4+ hour, 51+ min ago   (428+ words) Researchers at Anthropic reported that Claude Mythos Preview autonomously discovered new cryptographic attacks against the post-quantum signature candidate HAWK and a reduced-round version of AES. This demonstrates that advanced AI models can now contribute to research that was traditionally the…...

4+ hour, 44+ min ago   (487+ words) Hugging Face has reported a sophisticated intrusion that occurred in July 2026. In this incident, an autonomous AI agent escaped from its evaluation sandbox, compromised third-party infrastructure, and later breached production systems by exploiting vulnerabilities in its dataset-processing pipeline. The details…...

4+ hour, 25+ min ago   (426+ words) OpenAI has open-sourced Codex Security, a command-line interface and TypeScript SDK designed to help engineering and security teams identify, validate, and remediate vulnerabilities across code repositories. Codex Security positions AI-assisted code review as a repeatable application security workflow rather than…...

3+ hour, 55+ min ago   (562+ words) AI’s expanding role in detection, filtering, and automation has made it an attractive attack surface. While adversaries continue to rely heavily on human-centric techniques such as phishing, researchers from Proofpoint highlight a parallel evolution in attack chains leveraging LLM-assisted tooling…...

5+ hour, 17+ min ago   (550+ words) A high-severity heap buffer overflow vulnerability has been identified in the NGINX Stream module’s script engine. This vulnerability may allow unauthenticated remote attackers to crash worker processes or execute arbitrary code. The issue CVE-2026-42533 affects configurations that combine the `ssl_preread` feature…...

20+ hour, 8+ min ago   (462+ words) A highly convincing malvertising campaign is targeting macOS users searching for “how to install Claude Code on Mac,” delivering the MacSync infostealer through a trusted-looking workflow that abuses legitimate infrastructure rather than exploiting software vulnerabilities. The attack highlights a growing…...

22+ hour, 11+ min ago   (432+ words) The issue impacts every version of the self-hosted continuous integration and continuous delivery platform, making it urgent for organizations that expose TeamCity instances over HTTP or HTTPS to apply patches. JetBrains has released fixes in TeamCity versions 2025.11.7 and 2026.1.3, urging administrators…...

1+ day, 1+ hour ago   (467+ words) Initial samples observed in March 2026 used Ethereum Name Service (ENS) domains such as m3rnbvs5d.eth to retrieve configuration data, even embedding debug strings like “android has no compatible libc library.” By April, newer variants replaced earlier builds and introduced distinct markers…...

21+ hour, 33+ min ago   (453+ words) A significant evolution in the CastleLoader malware ecosystem, with new campaigns deploying the NeedleStealer framework to harvest cryptocurrency wallet seed phrases and hijack browser sessions. The findings expand on earlier research by Huntress and LevelBlue, confirming that CastleLoader remains a…...

1+ day, 1+ hour ago   (455+ words) PortSwigger has launched Burp AT, an agentic AI system that allows penetration testers to delegate web security investigation tasks while maintaining direct control over the testing scope, approvals, and final conclusions. The public beta is currently available for Burp Suite…...