Security researchers Vangelis Stykas and Felipe Solferini demonstrated at the Black Hat conference that tens of millions of cheap GPS smartwatches and car trackers across dozens of brands rely on just three vulnerable Shenzhen-based supply chains, exposing users to remote tracking, audio eavesdropping, and camera hijacking.
Researchers at Zenity revealed severe security vulnerabilities in AI-enabled web browsers, including OpenAI's Atlas, allowing attackers to execute prompt-injection attacks, spam WhatsApp contacts, and manipulate online shopping accounts.
Aikido's Kimi K3 AI model detected 23 out of 26 known vulnerabilities, matching OpenAI's GPT-5.6 Terra performance but at a quarter of the cost of the flagship Sol model, indicating a significant leap for open-source AI capabilities.
Cybersecurity firms report hackers are actively exploiting critical vulnerabilities in popular WordPress software, affecting potentially tens of millions of websites despite recent patches and forced updates. Users are urged to update immediately to mitigate risks.
Anthropic is expanding its Project Glasswing to 150 partners in over 15 countries, including new sectors like power and healthcare, to test its Mythos AI model for software vulnerabilities. This move follows initial testing where partners discovered over 10,000 critical security flaws.
The NSA is testing Anthropic's AI model Mythos to identify cybersecurity vulnerabilities in Microsoft products, according to Bloomberg reports citing US officials. The agency has been impressed by the model's speed and efficiency in detecting security weaknesses. This comes amid a complex relationship between Anthropic and US government agencies, with the Pentagon previously designating the company as a potential supply chain risk.
A security researcher published details of three security vulnerabilities in Windows Defender, and the code used to exploit them. Now, hackers are taking advantage of the vulnerabilities in real-life attacks, according to a cybersecurity firm.
Anthropic, siber güvenlik açıklarını tespit etmede çığır açan Mythos Preview modelini tanıttı. Sınırlı erişime açılan model, yazılım geliştiricilere yardımcı olmayı hedeflerken, kötü niyetli aktörlerin bu teknolojiyi silahlandırma riski endişeleri artırıyor.
