The Wave

1. 3d agoFortuneNvidia’s Jensen Huang was the Jenga piece to a towering multi-trillion AI industry. Will his exit set off a chain reaction?Fortune reports that Jensen Huang's reputation in Taiwan may weather his resignation from Nvidia over affairs, though analysts warn that alleged Chinese intelligence ties and the Megaspeed export-control scrutiny could damage him more seriously.

   50 articles · 26 outlets · TechTarget, Chicago Tribune, Variety, NBC News, WIRED, USA Today, Los Angeles Times, The Guardian, Deadline, TechCrunch, The Register, Scientific American, Axios, MS NOW, Euronews, Chron, Newsweek, Fox News

   1. 3d agoTechTargetPickupJensen Huang’s scandal-fueled ouster exposes enterprise doubts about AI
   2. 3d agoChicago TribunePickupNvidia CEO Jensen Huang resigns after his affair raises national security concerns
   3. 3d agoVarietyPickupNvidia CEO Jensen Huang Resigns After Multiple Affairs, Including With Alleged Chinese Spy
   4. 3d agoNBC NewsPickupNvidia CEO Jensen Huang resigns after reports of extramarital relationships
   5. 3d agoAl JazeeraPickupNvidia CEO Jensen Huang steps down amid spy scandal and market loss
   6. 3d agoWIREDJensen Huang Resigns as Nvidia CEO
   7. 3d agoUSA TodayPickupJensen Huang resigns as Nvidia CEO amid affair probe
   8. 3d agoLos Angeles TimesPickupNvidia CEO Jensen Huang resigns after his affair raises national security concerns
   9. 3d agoThe GuardianPickupJensen Huang resigns as Nvidia CEO after alleged affairs
   10. 3d agoDeadlinePickupJensen Huang Is Out As Nvidia CEO
   11. 3d agoTechCrunchNvidia’s Jensen Huang resigns, chipmaker names CFO Colette Kress as interim CEO
   12. 3d agoWIREDMeet Colette Kress, Nvidia’s New Interim CEO
   13. 3d agoThe RegisterPickupJensen Huang resigns as Nvidia chief executive
   14. 3d agoScientific AmericanPickupJensen Huang leaving Nvidia risks a ‘brain drain’ from the AI chipmaker
   15. 3d agoYahooPickupNvidia CEO Jensen Huang resigns after his affair raises national security concerns
   16. 3d agoYahooPickupNvidia's Jensen Huang, AI godfather brought down by spy scandal
   17. 3d agoFortuneEarliestJensen Huang has a ‘rockstar’ reputation in Taiwan. Will it survive now that he’s out of Nvidia?
   18. 3d agoAxiosPickupJensen Huang, an architect of the AI boom, resigns as Nvidia CEO
   19. 3d agoUSA TodayPickupHuang's Nvidia honeypot scandal proves the hubris of male CEOs | Opinion
   20. 3d agoAxiosPickupTrump sticks by Commerce Secretary Lutnick despite Nvidia inaction
   21. 3d agoMS NOWPickupNvidia CEO Jensen Huang resigns amid fallout from reported affair with alleged spy
   22. 3d agoEuronewsPickupWhat is next for Nvidia after CEO Jensen Huang resigns?
   23. 3d agoThe Robot ReportPickupNVIDIA replaces CEO amid China AI and robotics concerns
   24. 3d agoDecryptPickup'A Massive Mistake': Tech, AI and Crypto Founders React to Jensen Huang’s Nvidia Exit
   25. 3d agoChronPickupThe Latest: Nvidia CEO Jensen Huang resigns after his affair raises US security concerns
   26. 3d agoLos Angeles TimesPickupNvidia shares tumble after Jensen Huang resigns as CEO
   27. 3d agoChicago TribunePickupJensen Huang built the company that powers AI. Now Nvidia must find a way forward without him.
   28. 3d agoChronPickupWhat we know after Jensen Huang resigns as Nvidia CEO
   29. 3d agoTechCrunchPickupJensen Huang’s exit puts Nvidia’s support for open source in question
   30. 3d agoThe GuardianPickupJensen Huang was a busted flush at Nvidia – he had to go | Nils Pratley
   31. 3d agoAl JazeeraPickupWhy did Nvidia CEO Jensen Huang resign, and who is Colette Kress?
   32. 3d agoNBC NewsPickupWho is Colette Kress, Nvidia’s new interim CEO?
   33. 3d agoNewsweekPickupWhat Nvidia's Share Price Could Look Like Without Jensen Huang
   34. 3d agoFortuneNvidia’s Jensen Huang was the Jenga piece to a towering multi-trillion AI industry. Will his exit set off a chain reaction?
   35. 3d agoAtlantic CouncilPickupWhat Jensen Huang’s Nvidia exit means for Washington, Wall Street, and Beijing
   36. 2d agoWIREDPickupJensen Huang Is Out. Will Nvidia’s Rivals Cash In?
   37. 2d agoUSA TodayPickupNvidia needs new front man to stay on top after Huang's ousting, experts say
   38. 2d agoNewsweekDemocrats React to Nvidia Shock as They Prepare for Power: ‘Wake-Up Call’
   39. 2d agoChronPickupFallout from the Nvidia scandal may dampen the exuberance around the AI boom
   40. 2d agoEuronewsPickupWhat is next for Nvidia after CEO Jensen Huang resigns?
   41. 2d agoFox NewsPickupA spy took out Nvidia’s CEO. Here’s how America still wins the AI race
   42. 2d agoAl JazeeraPickupNvidia scandal: What’s next for the US tech company?
   43. 2d agoTheWrapPickupFallen Star: How Nvidia CEO’s Scandal-Fueled Resignation Throws AI World for a Loop
   44. 2d agoThe BulwarkPickupThe Chips Fall on Trump
   45. YesterdayFortunePickupThe case of Nvidia and the growing risk of AI and corruption
   46. YesterdayAxiosMAGA turns on Lutnick amid China spy scandal
   47. YesterdayTechCrunchPickupAsian governments react to Nvidia CEO Jensen Huang’s exit
   48. YesterdayFortuneThe downfall of AI’s $5.7 trillion man
   49. YesterdayFortunePickupThe hottest job in AI right now may be counterintelligence as companies pay former spooks $500,000 to protect trade secrets
   50. 16h agoThe GuardianPickup‘Jensen Huang lost his mind’: how AI’s smartest man fell for the world’s oldest trick

   AITreasury's Bessent presses Nvidia board after Jensen Huang resigns over Megaspeed ties1909 linked
2. 2d agoThe RecordFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles · BleepingComputer

   1. 2d agoThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 3h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
3. 6h agoWiz Research · research by NordStellarThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 6h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 6h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
4. 6h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
5. 6h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
6. 6h agoWiz ResearchHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogWiz Research published a blog post explaining its principles for benchmarking AI agent cybersecurity capabilities, drawing on its Cyber Model Arena v3.9 results across 59 agents and 327 challenges.1 outletCyber4 linked
7. 2d agoWiz Research · research by WizClaude Mythos and Cybersecurity: What Actually Changes? | WizWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 6h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 6h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 6h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 6h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 6h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 6h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 6h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 6h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 6h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 6h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
8. YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
9. YesterdayAnthropicTrustworthy agents in practiceAnthropic's Institute publishes internal and public-benchmark evidence that AI is accelerating its own development, and argues that recursive self-improvement could arrive sooner than institutions expect and that a verifiable coordinated slowdown should be an option.

   12 articles

   1. YesterdayAnthropicPolicy on the AI Exponential
   2. YesterdayAnthropicNatural Language Autoencoders
   3. YesterdayAnthropicInvestigating unintended model actions in our evaluations and internal use
   4. YesterdayAnthropicResponsible Scaling Policy Version 3.0
   5. YesterdayAnthropicTrustworthy agents in practice
   6. YesterdayAnthropicPickupThoughts on America’s AI Action Plan
   7. YesterdayAnthropicUnderstanding and addressing AI harms
   8. YesterdayAnthropicTeaching Claude why
   9. YesterdayAnthropicPetri: An open-source AI auditing tool
   10. YesterdayAnthropicLLMs and biorisk
   11. YesterdayAnthropicAnthropic’s Transparency Hub
   12. YesterdayAnthropicEarliestWhen AI builds itself

   AI236 linked
10. YesterdayAnthropicA framework for AI development transparencyAnthropic publicly proposes a lightweight, targeted transparency framework for the largest frontier AI developers, requiring published safety frameworks, system cards, and legal liability for false compliance claims.1 outletAIIncoming Democrats eye AI safety push in new Congress20 linked
11. CT2d agoCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
12. YesterdayAnthropicDetecting and countering misuse of AI: August 2025Anthropic released a threat intelligence report describing three cases of Claude being misused for data extortion, North Korean remote-worker fraud, and AI-generated ransomware sales, along with its countermeasures.1 outletCyberAI29 linked
13. YesterdayGizmodoHackers Stole Thousands of Uber Drivers’ Data Through an AI StartupFireworks AI confirmed a cyberattack that exposed customer billing data and datasets, and Notion says the hackers also obtained chat transcripts from its Notion AI Insights users.

    2 articles · TechCrunch

    1. 3d agoTechCrunchEarliestCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
    2. YesterdayGizmodoPickupHackers Stole Thousands of Uber Drivers’ Data Through an AI Startup

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor13 linked
14. 5d agoThe Record · research by MicrosoftMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowMicrosoft's November 2026 Patch Tuesday release fixes 1,094 flaws, including an exploited Outlook spoofing zero-day (CVE-2026-124194) that can leak NTLMv2 hashes.

    6 articles · Daily Mail

    1. 5d agoSecurityWeekEarliestExploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
    2. 5d agoThe RecordPickupMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
    3. 5d agoCyberScoopPickupMicrosoft fixes over 1,000 vulnerabilities in November Patch Tuesday
    4. 4d agoDark ReadingPickupNovember Patch Tuesday: An Overflowing Cornucopia of CVEs
    5. 4d agoCSO OnlinePickupNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentials
    6. 3d agoDaily MailPickupOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act now

    Cyber122 linked
15. YesterdayAnthropicFocus areas for The Anthropic InstituteAnthropic publishes a research agenda for The Anthropic Institute covering economic diffusion, threats and resilience, AI systems in the wild, and AI-driven R&D.1 outletAI7 linked
16. 2d agoThe Register · research by VulnCheckThis year’s bug count just passed 100KThe 2026 CVE count passed 100,000 by mid-November, more than double 2025's total, which VulnCheck attributes largely to AI-driven vulnerability hunting.1 outletCyber9 linked
17. 2d agoAnthropicClaude Fable 5 and Claude Mythos 5Anthropic released Claude Fable 5 for general use with classifier-based fallbacks to Claude Opus 4.8, and restricted Claude Mythos 5, a same-model variant with cyber safeguards lifted, to Project Glasswing partners.1 outletAI20 linked
18. 2d agoBillboardStolen (Not Super) Intelligence: Why Congress Must Stop Big AI From Ripping Off Creators (Guest Column)Rep. Jerrold Nadler's Billboard guest column calls on Congress to stop AI firms from training models on creators' work without payment and faults the Trump DOJ's fair-use brief backing Microsoft and OpenAI in the New York Times case.1 outletAI13 linked
19. 2d agoSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachSecurityWeek's weekly roundup bundles the nomination of Palantir CISO Michael LoSapio to lead CISA with several other incidents, including the Baker Tilly data theft, OpenAI research-cluster agent activity, and Railway's October breach report.1 outletCyber25 linked
20. 2d agoAnthropicAnthropic Economic Index report: Learning curvesAnthropic publishes findings from an open-ended survey of 81,000 Claude users, linking higher AI job-displacement concern to occupational exposure, early career stage, and the largest speedups.

    3 articles

    1. 2d agoAnthropicAnthropic Economic Index report: Learning curves
    2. 2d agoAnthropicEarliestWhat 81,000 people told us about AI economics
    3. 2d agoAnthropicMeasuring AI agent autonomy in practice

    112 linked
21. 3d agoThe Record · research by CloudSEKKazakhstan-linked hackers used AI agent to spy on Central Asian governmentsCloudSEK analysed an exposed open directory from a Silent Lynx operator server, revealing its tooling, active intrusions into Central Asian government and infrastructure targets, a DeepSeek-driven AI agent, and preparations for a Turkmenistan-focused campaign.

    4 articles · 2 outlets

    1. 4d agoCloudSEKOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK
    2. 4d agoCloudSEKOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK
    3. 4d agoCloudSEKEarliestOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK
    4. 3d agoThe RecordPickupKazakhstan-linked hackers used AI agent to spy on Central Asian governments

    CyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
22. 2d agoAnthropicEnabling independent research on how people use ClaudeAnthropic reports a pilot in which three external research groups (Stanford SALT Lab, Oxford Human Information Processing Lab, and METR) ran independent studies on roughly 250,000 Claude conversations using its Anthropic Insights tool, and says it will publicly release the aggregate data while weighing whether to scale the program.1 outlet29 linked
23. 5d agoDefense OneTrump nominates Palantir security chief Michael LoSapio to lead CISATrump's nomination of Palantir CISO Michael LoSapio to lead CISA raises questions about his Palantir ties and the agency's long-vacant leadership.

    6 articles · 5 outlets

    1. 5d agoDefense OnePickupTrump nominates Palantir security chief Michael LoSapio to lead CISA
    2. 5d agoNextgov/FCWEarliestTrump nominates Palantir security chief Michael LoSapio to lead CISA
    3. 5d agoCyberScoopPickupTrump picks Palantir’s LoSapio to head CISA
    4. 5d agoThe RecordPalantir exec nominated to lead CISA; lame-duck Senate vote is uncertain
    5. 5d agoN2K CyberWirePickupThe next name on CISA's door.
    6. 4d agoCyberScoopCISA director pick already drawing concern from Hill Dems over Palantir connection

    CyberTrump nominates Palantir's Michael LoSapio to lead CISA as Democrats plan oversight105 linked
24. 3d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
25. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threatsCISA revised its cyber incident reporting questionnaire to capture more attack detail and adopt MITRE ATT&CK, even as the broader CIRCIA final rule sits under White House review.

    5 articles · 4 outlets

    1. 6d agoCISA NewsPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    2. 6d agoDark ReadingPickupCISA Announces Enhanced Reporting Form for Cyber Incidents
    3. 6d agoNextgov/FCWEarliestCISA updates cyber reporting form as broader incident mandate awaits approval
    4. 4d agoNextgov/FCWCISA outlines internal plan to swiftly address cyber, infrastructure threats
    5. 4d agoDefense OnePickupCISA outlines internal plan to swiftly address cyber, infrastructure threats

    Cyber57 linked
26. 5d agoThe Record · research by FireworksAI company Fireworks says hackers stole data, billing info during October breachesFireworks AI disclosed a new breach where attackers used a compromised third-party cloud provider to reach its development machines and expose some customer billing data, metadata, and partial model weights.

    3 articles · 2 outlets · BleepingComputer

    1. 5d agoBleepingComputerEarliestFireworks AI discloses new breach after cloud provider hack
    2. 5d agoThe RecordPickupAI company Fireworks says hackers stole data, billing info during October breaches
    3. 3d agoBleepingComputerApify rotates API tokens, prompts 2FA resets after breach

    CyberAIFireworks AI breach exposes customer data at Uber, Notion and Cursor14 linked
27. 4d agoBleepingComputerRailway breach leads to $740,000 in fraudulent AI chargesRailway's new incident report says a October 2026 breach let attackers steal environment variables and AI provider credentials, generating about $740,000 in fraudulent AI usage across at most 100,000 workspaces.

    2 articles · Computerworld

    1. 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges
    2. 3d agoComputerworldPickupHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor10 linked
28. 3d agoPalo Alto Unit 42 · research by Unit 42ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to KnowUnit 42 reports that attackers are using the AI-powered red-teaming framework ARTEX, alongside CyberStrikeAI, to run autonomous intrusions that reach cloud environments through exposed APIs and password reset flows without exploiting software vulnerabilities.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks11 linked
29. 4d agoEuronewsAnthropic targets valuation of up to $1.4 trillion for blockbuster IPOAnthropic seeks to sell 825 million shares at $70–$78 each in an IPO trading as ANT, with seven tech companies committing $26 billion in a private placement.1 outlet61 linked
30. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz BlogWiz Research reports that 82% of organizations grant third-party cloud vendors wide read access and 76% grant roles enabling full account takeover, based on an analysis of 1,300+ AWS accounts and 40+ vendors.

    10 articles

    1. 5d agoWiz ResearchWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz Blog
    2. 5d agoWiz ResearchChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz Blog
    3. 5d agoWiz ResearchThe cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors | Wiz Blog
    4. 5d agoWiz ResearchHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz Blog
    5. 5d agoWiz ResearchBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz Blog
    6. 5d agoWiz ResearchBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz Blog
    7. 5d agoWiz ResearchAttachMe: critical OCI vulnerability allows unauthorized access to customer cloud storage volumes | Wiz Blog
    8. 5d agoWiz ResearchChaosDB: How we hacked thousands of Azure customers’ databases | Wiz Blog
    9. 5d agoWiz Research“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz Blog
    10. 4d agoWiz ResearchPickupBreaking Down PHP2Shell with Sagi Tzadik & Thai Duong | Wiz

    Cyber161 linked
31. 5d agoCybersecurity DiveTrump picks Palantir cybersecurity executive to lead CISATrump has nominated a Palantir cybersecurity executive to lead CISA, his second attempt to fill the agency's director post, which has been vacant throughout his second term.1 outletCyber12 linked
32. 5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
33. 4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
34. 5d agoDark ReadingArtex: The AI Pen-Test Tool Hackers Turned Into a WeaponDark Reading reports that forks of the open-source Artex AI pen-testing framework, plus 45 similar tools, can still be used to run credential attacks and cloud breaches at machine speed.1 outletCyber9 linked
35. 4d agoAxiosThe AI industry's week from hellAnthropic cut its IPO ambitions to a valuation of up to $1.4 trillion as a broad AI market selloff, Nvidia's espionage scandal, and Democratic midterm gains weighed on the industry.1 outletAI41 linked
36. 5d agoTechCrunchCyberattacks threaten to make open source AI a little less open, Hugging Face exec warnsHugging Face's chief policy officer warns that cyberattacks on open AI platforms, including the OpenCode, Hugging Face and Fireworks breaches, could push open source AI toward more restrictive access controls.1 outletCyberAI9 linked
37. 5d agoDark ReadingAI Coding Agents Leak Thousands of Secrets to GitHubDark Reading reports that a Claude Code command can inadvertently commit credentials and other sensitive files to public GitHub repositories, exposing organizations to security gaps.1 outletCyber7 linked
38. 6d agoNextgov/FCWCongress returns to slew of cyber deadlines and unfinished AI safety billsCongress returns for a lame-duck session with CISA 2015 set to expire Dec. 11, the NDAA stalled in the Senate, and AI safety bills such as the FRONTIER Act and AI Kill Switch Act unresolved.1 outletCyberAI15 linked
39. 6d agoCybersecurity DiveFinancially motivated threat cluster uses AI-enabled tools against banking sectorMicrosoft Threat Intelligence reports a Cambodia-based financially motivated group, Storm 3358, is using the AI-enabled Artex pen-testing framework against banking and financial firms worldwide, part of a broader wave of Artex-driven attacks.1 outletCyber11 linked
40. WHBR5d agoWhite House Briefing RoomNominations and Withdrawals Sent to the SenateThe White House transmitted a large slate of judicial, ambassadorial, and agency nominations to the Senate on November 9, 2026, including Michael LoSapio for CISA Director, and withdrew David MacNeil's FTC nomination.1 outletCyber13 linked
41. 6d agoDark Reading · research by AIR SecurityAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxResearchers at AIR Security disclosed the "Office Party" flaw in Anthropic's Claude DOCX/PPTX/XLSX skills, which lets an attacker run code on Linux via a planted shared library that Anthropic has chosen not to fix.1 outletCyberAI37 linked
42. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
43. 10d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
44. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
45. 10d agoPush Security BlogAnalyzing a fake event campaign combining AiTM and device code phishing payloadsPush Security reports a fake AI-branded event campaign, run by one operator, that uses email invitations and fake event pages to funnel victims into Kali365 device code phishing and VoidProxy AiTM phishing.1 outletCyber14 linked
46. Oct 30Dark ReadingDevs Hit by Trojanized Claude Code Extension for CursorAnthropic's Claude Code extension on the Cursor marketplace was trojanized on Oct. 29, 2026, delivering a backdoored version 2.1.313 that stole data and could grant persistent SSH access.1 outletCyber9 linked

Ahead

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.