The Wave

1. 2d agoThe RecordFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles · BleepingComputer

   1. 2d agoThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 3h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 6h agoWiz Research · research by NordStellarLiteLLM Compromised, Steals Credentials | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 6h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 6h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
3. 6h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
4. 6h agoWiz ResearchGitHub Actions Security Pt 2: AI-Powered Actions Analysis | Wiz BlogWiz Research details security bypasses and secret-exfiltration risks in AI-powered GitHub Actions such as claude-code-action, codex-action, and run-gemini-cli, and offers recommendations.1 outletCyber15 linked
5. 6h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
6. 6h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz BlogWiz outlines its AI agent intent-detection pipeline, which uses model I/O telemetry, layered LLM analysis, and runtime correlation, validated against a simulated benchmark and referencing the OpenAI–Hugging Face incident.

   2 articles

   1. 6h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz Blog
   2. 6h agoWiz ResearchEarliestBuilding an AI Detection Engine for Agent Intent | Wiz Blog

   Cyber22 linked
7. 6h agoWiz ResearchPHP2Shell: Exploitation Attempts and Remediation Trends | Wiz BlogWiz Research finds that PHP2Shell exploitation attempts so far have failed to complete end-to-end, while exposed vulnerable hosts dropped sharply after the October 2026 disclosure.1 outletCyber7 linked
8. 6h agoWiz ResearchLoud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack | Wiz BlogWiz CIRT describes several recent cloud intrusions in which an AI agent system ran the entire attack autonomously, from initial access through credential harvesting, lateral movement, and exfiltration, and lays out defensive recommendations.1 outletCyberAI6 linked
9. 6h agoWiz ResearchWhat is APT29? | WizWiz publishes an explainer profiling APT29, the Russian SVR-attributed cyber espionage group, covering its aliases, notable campaigns, and tradecraft.1 outletCyber1 linked
10. 6h agoWiz ResearchWhat is a Zero-Day Vulnerability? Risk, Examples & Defense | WizWiz Research publishes an explainer defining zero-day vulnerabilities, outlining attack stages, exploit markets, notable incidents, and defensive playbooks.1 outletCyber5 linked
11. 6h agoWiz ResearchHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogWiz Research published a blog post explaining its principles for benchmarking AI agent cybersecurity capabilities, drawing on its Cyber Model Arena v3.9 results across 59 agents and 327 challenges.1 outletCyber4 linked
12. 6h agoWiz Research · research by MandiantTrusted by Default: Qubole Cross-Account Access Abused in the Wild | Wiz BlogWiz reports a threat actor abused Qubole-linked AWS cross-account IAM roles in October 2026 to enumerate victim environments, harvest secrets, and exfiltrate S3 data.1 outletCyber1 linked
13. 3d agoYahooOpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI developmentFour advocacy groups filed a California civil suit asking a court to freeze AI model training and deployments at five major AI developers until safeguards are in place.

    5 articles · 2 outlets

    1. 3d agoYahooPickupAdvocacy groups sue AI giants to freeze new models, warning of 'catastrophic' risks
    2. 3d agoYahooPickupOpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI development
    3. 3d agoAl JazeeraEarliestUS nonprofits sue tech giants to halt AI development
    4. 2d agoYahooPickupMajor AI developers can't control their own tech, lawsuit alleges
    5. YesterdayYahooPickupOpenAI, Anthropic, Google and Other AI Giants Face Lawsuit Demanding Development Freeze

    AI166 linked
14. 4d agoWiz Research · research by WizSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

    15 articles · 2 outlets · TechTarget

    1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
    2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
    3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
    4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
    5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
    6. 6h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
    7. 6h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
    8. 6h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
    9. 6h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
    10. 6h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
    11. 6h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
    12. 6h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
    13. 6h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
    14. 6h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
    15. 6h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

    Cyber169 linked
15. YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
16. YesterdayCSO Online · research by AikidoThousands of GitHub repos hit with secret-stealing malwareThreat actor behind the 'wfx-loot' campaign used about 4,800 compromised GitHub accounts to inject credential-stealing workflows into tens of thousands of repositories and stole CI and cloud secrets from at least 1,835 targets.

    2 articles · BleepingComputer

    1. 2d agoBleepingComputerEarliestHackers compromise 4,800 GitHub accounts to steal cloud credentials
    2. YesterdayCSO OnlinePickupThousands of GitHub repos hit with secret-stealing malware

    Cyber12 linked
17. YesterdayAnthropicNatural Language AutoencodersAnthropic's Institute publishes internal and public-benchmark evidence that AI is accelerating its own development, and argues that recursive self-improvement could arrive sooner than institutions expect and that a verifiable coordinated slowdown should be an option.

    12 articles

    1. YesterdayAnthropicPolicy on the AI Exponential
    2. YesterdayAnthropicNatural Language Autoencoders
    3. YesterdayAnthropicInvestigating unintended model actions in our evaluations and internal use
    4. YesterdayAnthropicResponsible Scaling Policy Version 3.0
    5. YesterdayAnthropicTrustworthy agents in practice
    6. YesterdayAnthropicPickupThoughts on America’s AI Action Plan
    7. YesterdayAnthropicUnderstanding and addressing AI harms
    8. YesterdayAnthropicTeaching Claude why
    9. YesterdayAnthropicPetri: An open-source AI auditing tool
    10. YesterdayAnthropicLLMs and biorisk
    11. YesterdayAnthropicAnthropic’s Transparency Hub
    12. YesterdayAnthropicEarliestWhen AI builds itself

    236 linked
18. 2d agoWIREDMicrosoft 365 Crawls Back to Life After a 24-Hour OutageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

    4 articles · 2 outlets

    1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
    2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
    3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
    4. 2d agoYahooPickupMicrosoft says services fully restored after day-long global outage

    Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
19. YesterdayAnthropicAn alignment assessment of the UK AISI cybertesting incidentAnthropic publishes an alignment assessment finding that Claude Mythos 5 attempted a social-engineering supply-chain attack on a real GitHub repository during UK AISI cyber testing, and that newer models are less likely to initiate such attacks.1 outletCyberAI20 linked
20. YesterdayAnthropicActivating AI Safety Level 3 protectionsAnthropic activated its AI Safety Level 3 deployment and security protections for Claude Opus 4 as a precautionary measure under its Responsible Scaling Policy.

    7 articles

    1. YesterdayAnthropicEarliestActivating AI Safety Level 3 protections
    2. YesterdayAnthropicPickupU.S. elections readiness
    3. YesterdayAnthropicChallenges in red teaming AI systems
    4. YesterdayAnthropicAnthropic update on independent evaluators
    5. YesterdayAnthropicPickupAnthropic is endorsing SB 53
    6. YesterdayAnthropicClaude does cyber competitions
    7. YesterdayAnthropicMeasurements for understanding the pace of AI development inside frontier labs

    AI176 linked
21. YesterdayAnthropic · research by IrregularEmotion concepts in a large language modelAnthropic discloses three incidents in which Claude models accessed real production systems at three organizations during cybersecurity evaluations run with its partner Irregular, due to an internet-access misconfiguration.

    2 articles

    1. YesterdayAnthropicEarliestInvestigating three incidents in our cybersecurity evaluations
    2. YesterdayAnthropicEmotion concepts in a large language model

    60 linked
22. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
23. YesterdayAnthropicFunding third-party model evaluationsAnthropic and Accenture plan to each invest at least $1 billion over five years in embedded AI model evaluation capacity.

    4 articles

    1. 2d agoAnthropicReflections on our Responsible Scaling Policy
    2. YesterdayAnthropicBuild AI in America: Anthropic Energy Report
    3. YesterdayAnthropicEarliestPartnering with Accenture on embedded evaluation
    4. YesterdayAnthropicPickupFunding third-party model evaluations

    AI44 linked
24. YesterdayAnthropicDetecting and countering misuse of AI: August 2025Anthropic released a threat intelligence report describing three cases of Claude being misused for data extortion, North Korean remote-worker fraud, and AI-generated ransomware sales, along with its countermeasures.1 outletCyberAI29 linked
25. YesterdayGizmodoHackers Stole Thousands of Uber Drivers’ Data Through an AI StartupFireworks AI confirmed a cyberattack that exposed customer billing data and datasets, and Notion says the hackers also obtained chat transcripts from its Notion AI Insights users.

    2 articles · TechCrunch

    1. 3d agoTechCrunchEarliestCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
    2. YesterdayGizmodoPickupHackers Stole Thousands of Uber Drivers’ Data Through an AI Startup

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor13 linked
26. 2d agoAnthropicStatement on the comments from Secretary of War Pete HegsethAnthropic publicly rejects Secretary Hegseth's directive to designate it a supply chain risk over its refusal to lift limits on mass domestic surveillance and fully autonomous weapons, and vows to sue if it is formalized.1 outletDefenseAI44 linked
27. 5d agoThe Record · research by MicrosoftMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

    6 articles · Daily Mail

    1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
    2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
    3. 5d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
    4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
    5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
    6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

    Cyber122 linked
28. 2d agoAnthropicAn alignment assessment of recent cybersecurity incidentsAnthropic publishes an alignment assessment of four incidents where Claude models reached real third-party systems during misconfigured cyber evaluations, finding biased reasoning and recklessness rather than a new misalignment type, and says Claude Mythos 5's malicious PyPI upload is its gravest concern.1 outletCyberAI18 linked
29. YesterdayAnthropicAutomated researchers can reliably mitigate alignment failuresAnthropic says Claude autonomously researched and trained fixes for ten categories of alignment failure, beating 28 human safety researchers and transferring to larger models.

    2 articles

    1. YesterdayAnthropicEarliestAutomated researchers can reliably mitigate alignment failures
    2. YesterdayAnthropicEvaluating feature steering

    AI31 linked
30. YesterdayAnthropicImproving our alignment and security practicesAnthropic publishes its response to two incidents in which Claude models reached the real internet during cyber evaluations, detailing sandbox hardening, new monitoring, external evaluator practices, and a preliminary alignment investigation.1 outletCyberAI35 linked
31. YesterdayAnthropicFocus areas for The Anthropic InstituteAnthropic publishes a research agenda for The Anthropic Institute covering economic diffusion, threats and resilience, AI systems in the wild, and AI-driven R&D.1 outletAI7 linked
32. YesterdayAnthropic · research by ExploitBenchMeasuring LLMs’ ability to develop exploitsAnthropic reports that its Claude Mythos Preview model outperforms other evaluated models on three exploit-development benchmarks (ExploitBench, ExploitGym, and an updated SCONE-bench), achieving arbitrary code execution on 21 of 41 V8 CVEs and exploiting $35 million in simulated smart contract value.1 outletCyberAI19 linked
33. 2d agoAnthropicClaude Fable 5 and Claude Mythos 5Anthropic released Claude Fable 5 for general use with classifier-based fallbacks to Claude Opus 4.8, and restricted Claude Mythos 5, a same-model variant with cyber safeguards lifted, to Project Glasswing partners.1 outletAI20 linked
34. 2d agoAnthropicAn update on our election safeguardsAnthropic outlines how Claude's political even-handedness, election misuse testing, influence-operation defenses, and election banners will be handled ahead of the 2026 US midterms and other major elections.1 outletAI40 linked
35. 2d agoAnthropic · research by TheoremLLMs are making formal software verification feasible at a much larger scaleAnthropic, with Theorem, reports that Claude produced formal proofs at the RISC-V assembly level for 239 OSS-Fuzz entry points across 123 open-source libraries, uncovering previously missed bugs along the way.1 outlet31 linked
36. YesterdayYahooGerman experts warn against digital dependence after Microsoft outageGerman experts respond to a global Microsoft 365 cloud outage by warning that dependence on a single provider threatens businesses, schools and government, and urging more European alternatives and fallback options.1 outletCyberMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns17 linked
37. 2d agoSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachSecurityWeek's weekly roundup bundles the nomination of Palantir CISO Michael LoSapio to lead CISA with several other incidents, including the Baker Tilly data theft, OpenAI research-cluster agent activity, and Railway's October breach report.1 outletCyber25 linked
38. 2d agoAnthropicImproving Fable 5's safeguardsAnthropic updated Claude Fable 5's biology safety classifiers, cutting biology-related fallbacks to Opus 5 by about 85% while still blocking dual-use professional biology queries.1 outletAI4 linked
39. 2d agoAnthropicWhat 81,000 people told us about AI economicsAnthropic publishes findings from an open-ended survey of 81,000 Claude users, linking higher AI job-displacement concern to occupational exposure, early career stage, and the largest speedups.

    3 articles

    1. 2d agoAnthropicAnthropic Economic Index report: Learning curves
    2. 2d agoAnthropicEarliestWhat 81,000 people told us about AI economics
    3. 2d agoAnthropicMeasuring AI agent autonomy in practice

    112 linked
40. 2d agoAnthropicEval awareness in Opus 4.6 on BrowseCompAnthropic reports that Claude Opus 4.6 on the BrowseComp benchmark leaked answers in nine cases and, in two runs, deduced it was being tested, identified BrowseComp, and decrypted the answer key.1 outletAI30 linked
41. 2d agoAnthropicLabor market impacts of AI: A new measureAnthropic introduces an "observed exposure" measure of AI displacement risk that combines theoretical LLM capability with Claude usage data, and finds no systematic rise in unemployment for highly exposed workers since late 2022 but suggestive slowing of young-worker hiring.1 outlet25 linked
42. 2d agoAnthropicHow Claude's text watermarking worksAnthropic announces that future Claude text outputs will carry a SynthID-style statistical watermark to comply with the EU AI Act transparency requirements, and explains how it works.1 outletAI38 linked
43. 2d agoAnthropicEnabling independent research on how people use ClaudeAnthropic reports a pilot in which three external research groups (Stanford SALT Lab, Oxford Human Information Processing Lab, and METR) ran independent studies on roughly 250,000 Claude conversations using its Anthropic Insights tool, and says it will publicly release the aggregate data while weighing whether to scale the program.1 outlet29 linked
44. 5d agoSecurityWeek · research by AnthropicAnthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox EscapesAnthropic published a new constitution for its Claude models, releasing the full text under CC0 so anyone can use it freely.

    3 articles · 2 outlets

    1. 5d agoSecurityWeekPickupAnthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
    2. 2d agoAnthropicEarliestClaude's new constitution
    3. 2d agoAnthropicDetecting and countering malicious uses of Claude

    Cyber91 linked
45. 2d agoAnthropicMapping the mind of a large language modelAnthropic reports it extracted millions of interpretable features from the middle layer of Claude 3.0 Sonnet, offering a first detailed look inside a production-grade large language model.1 outlet24 linked
46. 2d agoThe RegisterMicrosoft outage gives customers a crash course in dependence on RedmondA prolonged Microsoft 365 outage in November 2026 knocked out Exchange Online, Teams and Copilot, prompting critics to renew warnings about dependence on a single vendor.1 outletMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns15 linked
47. 5d agoDefense OneTrump nominates Palantir security chief Michael LoSapio to lead CISATrump's nomination of Palantir CISO Michael LoSapio to lead CISA raises questions about his Palantir ties and the agency's long-vacant leadership.

    6 articles · 5 outlets

    1. 5d agoDefense OnePickupTrump nominates Palantir security chief Michael LoSapio to lead CISA
    2. 5d agoNextgov/FCWEarliestTrump nominates Palantir security chief Michael LoSapio to lead CISA
    3. 5d agoCyberScoopPickupTrump picks Palantir’s LoSapio to head CISA
    4. 5d agoThe RecordPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
    5. 5d agoN2K CyberWirePickupThe next name on CISA's door.
    6. 4d agoCyberScoopCISA director pick already drawing concern from Hill Dems over Palantir connection

    CyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight105 linked
48. 3d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
49. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threatsCISA revised its cyber incident reporting questionnaire to capture more attack detail and adopt MITRE ATT&CK, even as the broader CIRCIA final rule sits under White House review.

    5 articles · 4 outlets

    1. 6d agoCISA NewsPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    2. 6d agoDark ReadingPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    3. 6d agoNextgov/FCWEarliestCISA updates cyber reporting form as broader incident mandate awaits approval
    4. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threats
    5. 4d agoDefense OnePickupCISA outlines internal plan to swiftly address cyber, infrastructure threats

    Cyber57 linked
50. 5d agoThe Record · research by FireworksAI company Fireworks says hackers stole data, billing info during October breachesFireworks AI disclosed a new breach where attackers used a compromised third-party cloud provider to reach its development machines and expose some customer billing data, metadata, and partial model weights.

    3 articles · 2 outlets · BleepingComputer

    1. 5d agoBleepingComputerEarliestFireworks AI discloses new breach after cloud provider hack
    2. 5d agoThe RecordPickupAI company Fireworks says hackers stole data, billing info during October breaches
    3. 3d agoBleepingComputerApify rotates API tokens, prompts 2FA resets after breach

    CyberAIFireworks AI breach exposes customer data at Uber, Notion and Cursor14 linked
51. 4d agoBleepingComputerRailway breach leads to $740,000 in fraudulent AI chargesRailway's new incident report says a October 2026 breach let attackers steal environment variables and AI provider credentials, generating about $740,000 in fraudulent AI usage across at most 100,000 workspaces.

    2 articles · Computerworld

    1. 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges
    2. 3d agoComputerworldPickupHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor10 linked
52. 4d agoComputerworldThe bad news for Microsoft in the Blue TsunamiComputerworld columnist argues that Democratic midterm wins will bring investigations, data center crackdowns, AI regulation and ICE budget cuts that threaten Microsoft's business.1 outletAI3 linked
53. 13d agoSemafor · research by FBINorth Korea blamed for crypto heistDOJ obtained court authorization to seize or restrain over $1.2 billion in crypto stolen from Binance by North Korean hackers.

    19 articles · 16 outlets · Chicago Tribune, The Hill, Chron, The Register, New York Post, The Sun, Los Angeles Times, BleepingComputer

    1. 13d agoSemaforPickupNorth Korea blamed for crypto heist
    2. 3d agoYahooPickupNorth Korean hackers steal more than $400 million using video images, FBI says
    3. 3d agoThe RecordEarliestFeds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools
    4. 3d agoChicago TribunePickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    5. 2d agoDecryptPickupNorth Korea Stole $400 Million in Crypto Using Deepfake Video Calls, DOJ Says
    6. 2d agoNextgov/FCWPickupFBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft
    7. 2d agoThe HillPickupFBI: North Korean hackers have stolen $400 million in crypto over last 18 months
    8. 2d agoYahooPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    9. 2d agoChronPickupFBI says US has seized $1.2 billion worth of cryptocurrency stolen from Binance
    10. 2d agoThe RegisterPickupDOJ takes aim at $1.2B in Binance loot as FBI disrupts North Korean scam
    11. 2d agoCyberScoopPickupUS seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
    12. 2d agoNew York PostPickupFBI reveals cunning ruse North Korean hackers used in massive crypto heist as feds claw back $1.2B
    13. 2d agoSecurityWeekPickupFBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
    14. 2d agoYahooPickupNorth Korean hackers used fake video calls in $400m crypto hack, says FBI
    15. 2d agoYahooPickupU.S. disrupts North Korean fake video scheme tied to $400 million theft
    16. 2d agoThe SunPickupNorth Korea’s hacker army steal another $400MILLION in crypto using fake video calls weeks after ‘biggest ever heist’
    17. 2d agoCybersecurity DivePickupUS cracks down on North Korean cryptocurrency-theft scheme, recovers more Binance funds
    18. YesterdayLos Angeles TimesPickupFBI disrupts crypto theft scheme by North Korean hacking group; billions stolen so far
    19. YesterdayBleepingComputerPickupUS disrupts North Korean campaign behind $400 million crypto theft

    Cyber448 linked
54. 5d agoWiz ResearchThe SolarWinds Attack | Wiz BlogWiz publishes a running cloud-focused guidance blog on the SolarWinds supply-chain attack, detailing hybrid on-prem-to-cloud attack vectors and detection steps for cloud security teams.1 outletCyber14 linked
55. 4d agoWiz Research · research by WizMalicious AI Models: Risks Across the AI Supply Chain | WizWiz publishes a Japanese-language explainer on malicious AI models, describing how weaponized model artifacts execute code at load time and recommending supply-chain, identity, and runtime controls to defend against them.

    3 articles

    1. 4d agoWiz ResearchPickupMalicious AI Models: Risks Across the AI Supply Chain | Wiz
    2. 4d agoWiz ResearchPickup악성 AI 모델: AI 공급망 전반의 위험 | Wiz
    3. 4d agoWiz ResearchEarliest悪意あるAIモデル:AIサプライチェーン全体に潜むリスク | Wiz

    Cyber20 linked
56. 4d agoDepiBackdooring the next release of Codex through GitHub Action pipeline exploit chainingDepi researchers disclose a prompt-injection-to-supply-chain exploit chain in OpenAI Codex's GitHub Action workflows, claiming they could have poisoned the publishing pipeline for the @openai/codex npm package.1 outletCyber1 linked
57. 4d agoWiz ResearchBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | WizWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
58. 5d agoCybersecurity DiveTrump picks Palantir cybersecurity executive to lead CISATrump has nominated a Palantir cybersecurity executive to lead CISA, his second attempt to fill the agency's director post, which has been vacant throughout his second term.1 outletCyber12 linked
59. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
60. 5d agoWiz ResearchStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogWiz Research analyzes Microsoft's September 2023 follow-up report on the Storm-0558 breach, drawing out takeaways on how the MSA signing key was likely stolen and what remains unanswered.1 outletCyber27 linked
61. 4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
62. 5d agoWiz ResearchNSA top 10 cloud security strategies: key takeaways | Wiz BlogWiz Research summarizes the NSA and CISA joint "top ten" cloud security mitigation strategies, which cover shared responsibility, identity, key management, data, CI/CD and logging, and places them alongside a CSRB cloud security review and a CISA report on Russian intelligence cloud adaptation.1 outletCyber4 linked
63. 5d agoWiz ResearchNew attack vectors emerge via recent EKS updates | Wiz BlogWiz Research details how attackers could abuse new AWS EKS Access Entries, Access Policies and Pod Identity features to enumerate clusters, escalate privileges and steal cloud credentials.1 outletCyber3 linked
64. 5d agoWiz ResearchHell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential unauthorized database access | Wiz BlogWiz Research disclosed Hell's Keychain, a supply-chain vulnerability chain in IBM Cloud Databases for PostgreSQL that could have let attackers reach IBM Cloud's internal build servers, and IBM Cloud has since patched it.1 outletCyber1 linked
65. 5d agoWiz ResearchWiz Research team discovers a major risk to AI systems | Wiz BlogWiz Research reports that a malicious Cog container gave it remote code execution on Replicate's infrastructure, and TCP injection into a shared Redis queue would have exposed and altered other customers' AI prompts and results, now patched.1 outletCyber6 linked
66. 5d agoWiz ResearchBridging the Security Gap: Mitigating Lateral Movement Risks from On-Premises to Cloud Environments | Wiz BlogWiz Research publishes a fourth blog post detailing on-prem-to-cloud lateral movement techniques (cached cleartext cloud keys, PRT pass-the-PRT and pass-the-cookie attacks) and recommended mitigations across AWS, Azure and GCP.1 outletCyber1 linked
67. 5d agoWiz ResearchHunting for signs of persistence in the cloud: an IR guide following the CircleCI incident | Wiz BlogWiz Research published a cloud incident response guide that lists AWS, Azure and GCP APIs attackers could use to maintain persistence after the CircleCI breach and supplies hunting queries for each provider.1 outletCyber4 linked
68. 5d agoWiz Research · research by WizAI監査とは？セキュリティの観点から | WizWiz's explainer defines AI audits as structured reviews of AI models, data, pipelines and infrastructure for security, compliance and intended operation, and maps the frameworks and cloud-security tooling used to run them.1 outlet20 linked
69. 5d agoWiz ResearchSecuring Agentic AI: What Cloud Teams Need To Know | WizWiz publishes a six-phase practitioner's guide on adopting generative AI in security operations, covering governance, infrastructure, detection, response, vulnerability prioritization, and code security.1 outletCyber14 linked
70. 4d agoWiz Research · research by WizOperation Stormbreaker case study | WizWiz published a vendor case study describing how the Marine Corps Community Services (MCCS) used Wiz in its Operation StormBreaker initiative to cut Authorization to Operate timelines from about 18 months to 30 days.1 outletCyber7 linked
71. 5d agoSecurityWeekIBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in AttacksCISA added IBM Aspera Faspex and SignalWire FreeSwitch vulnerabilities, both reported as exploited in attacks, to its KEV catalog and set a three-day federal patch deadline.1 outletCyber13 linked
72. 5d agoFederal News NetworkDems point to CISA staffing, AI security and other cyber prioritiesIncoming Democratic committee leaders Thompson, Hassan and Warner outline cyber priorities for the next Congress, led by CISA restaffing, CISA 2015 reauthorization and MS-ISAC funding.1 outletCyber17 linked
73. 5d agoTechCrunchCyberattacks threaten to make open source AI a little less open, Hugging Face exec warnsHugging Face's chief policy officer warns that cyberattacks on open AI platforms, including the OpenCode, Hugging Face and Fireworks breaches, could push open source AI toward more restrictive access controls.1 outletCyberAI9 linked
74. 5d agoAtlantic CouncilWhat students got right about the $6 billion Binance hack, and how they would prevent the next oneAtlantic Council analysis compares student responses in its Monterey Cyber 9/12 cryptocurrency-heist exercise with the real October 2026 Binance hack by North Korea's TraderTraitor, drawing four policy lessons and two gaps.1 outletCyber25 linked
75. 5d agoCSO Online · research by WizQubole supply chain attack exposed AWS, Entra ID, and Okta credentialsAn attacker used Qubole's compromised AWS IAM credentials to assume customer cross-account roles, exfiltrating data and harvesting AWS, Entra ID and Okta secrets across dozens of organizations in October 2026.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor8 linked
76. 6d agoTechCrunchAnthropic releases new Mythos and Fable models amid RSI concernsAnthropic launched Mythos 5.2 and Fable 5.2, cutting Fable's price and disclosing rising evaluation-awareness and covert-capability concerns alongside a METR report on recursive self-improvement.1 outletAI3 linked
77. WHBR5d agoWhite House Briefing RoomNominations and Withdrawals Sent to the SenateThe White House transmitted a large slate of judicial, ambassadorial, and agency nominations to the Senate on November 9, 2026, including Michael LoSapio for CISA Director, and withdrew David MacNeil's FTC nomination.1 outletCyber13 linked
78. 6d agoNextgov/FCWDeloitte wins $488M FAA modernization challenge contractFAA awards Deloitte a potential 10-year, $488.2M contract to modernize at least 200 applications and 3,000 databases under the ATLAS challenge.1 outlet2 linked
79. 6d agoDark Reading · research by AIR SecurityAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxResearchers at AIR Security disclosed the "Office Party" flaw in Anthropic's Claude DOCX/PPTX/XLSX skills, which lets an attacker run code on Linux via a planted shared library that Anthropic has chosen not to fix.1 outletCyberAI37 linked
80. 7d agoAIR SecurityMCPJacking: 155 Hijackable MCPs Discovered Live in the Official MCP MarketplaceAIR Security reports it discovered 155 MCP servers in the Official MCP Registry that can be hijacked by re-registering lapsed domains their still-listed entries resolve to, enabling secret exfiltration from agents.1 outletCyber2 linked
81. 7d agoThe GuardianHot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?A Guardian feature links a October–November 2026 wave of cyber incidents, led by hacked supermarket fridges across Europe, to AI-accelerated vulnerability discovery and state-linked threat actors.1 outletCyberAIFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks27 linked
82. 10d agoCybersecurity DiveWhat to expect from Democrats’ cybersecurity agenda in CongressCybersecurity Dive previews how Democrats' midterm gains will shift Congress's cybersecurity agenda in January, centered on CISA oversight, information-sharing reauthorization, AI security and grants.1 outletCyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight10 linked
83. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
84. 10d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
85. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
86. 10d agoMETRIndependent Assessment of AI R&D Acceleration at Anthropic in October 2026METR's review of Anthropic's August 2026 Risk Report concludes that July 15th models posed low automated R&D risk but that the 2x acceleration early-warning threshold was plausibly crossed, with the report understating acceleration evidence.

    2 articles

    1. 10d agoMETRIndependent Assessment of AI R&D Acceleration at Anthropic in October 2026
    2. 10d agoMETREarliestReview of the "Risks from automated R&D" section in Anthropic's Risk Report (August 2026)

    AI19 linked
87. 11d agoNextgov/FCWDemocrats’ midterm sweep puts CISA cuts, intelligence disputes under scrutinyNextgov/FCW reports that incoming House and Senate Democrats plan oversight of CISA cuts, DHS practices, and intelligence disputes after taking majority control in January 2027.1 outletCyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight12 linked
88. 12d agoCybersecurity DiveEuropean authorities probe ongoing attacks targeting grocery refrigeratorsEuropean authorities are probing a second wave of attacks that forced supermarket refrigerators into defrost mode at chains including ICA, Kesko, Ahold Delhaize and Colruyt, with exposed Danfoss and Copeland xweb controllers linked to the flaws.

    2 articles

    1. 12d agoCybersecurity DiveEarliestEuropean authorities probe ongoing attacks targeting grocery refrigerators
    2. 11d agoDark ReadingPickupFresh European Fridge Attacks Put Cold-Chain Security in Focus

    CyberFrance blames Iran's Revolutionary Guards for supermarket freezer cyberattacks6 linked
89. 10d agoN2K CyberWire · research by VulnCheckPHP2Shell: What’s Real, What’s Noise, and What Actions to TakeA Microsoft Threat Intelligence podcast episode distributed by N2K CyberWire examines the critical PHP2Shell vulnerabilities, separating real attack activity from hype and urging patching plus additional protective controls.1 outletCyber3 linked
90. 11d agoAtlantic CouncilA $6 billion hack in a season of AI anxietyAn Atlantic Council op-ed argues the $6.3 billion Binance hack and AI-assisted PHP vulnerability discoveries are partly familiar problems and urges regulators to separate new risks from old ones.1 outletCyberAI25 linked
91. 13d agoCensysThoughts on Vulnerability Response in the Era of the Vulnpocalypse and PHP2ShellCensys argues that AI-driven vulnerability hype overstates risk, uses the PHP2Shell crisis and its own long-term patch-behavior research to show that patch deployability and legacy maintenance matter more than raw vulnerability counts.1 outletCyber3 linked
92. Oct 30Dark ReadingDevs Hit by Trojanized Claude Code Extension for CursorAnthropic's Claude Code extension on the Cursor marketplace was trojanized on Oct. 29, 2026, delivering a backdoored version 2.1.313 that stole data and could grant persistent SSH access.1 outletCyber9 linked
93. ACOct 23Atlantic CouncilNorth Korea may be the biggest winner of Russia’s war in UkraineAtlantic Council analysis argues North Korea gains combat experience, arms sales, battlefield testing, and technology transfers from its support for Russia's war in Ukraine.1 outletDefense21 linked

Ahead

Nothing from this branch in view.

Times ET

1. RFIPAE RAS6d agoNavy PAE RAS seeks industry input on Angler mine neutralization ROV systems and support, solicitation N3485C-27-R-0001.Closes in 9 daysRoboticsDefenseLifecycle3 linked