The Wave

1. 5h agoWiz Research · research by NordStellarLiteLLM Compromised, Steals Credentials | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 5h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 5h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
2. 5h agoWiz ResearchHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogWiz Research published a blog post explaining its principles for benchmarking AI agent cybersecurity capabilities, drawing on its Cyber Model Arena v3.9 results across 59 agents and 327 challenges.1 outletCyber4 linked
3. 3d agoYahooOpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI developmentFour advocacy groups filed a California civil suit asking a court to freeze AI model training and deployments at five major AI developers until safeguards are in place.

   5 articles · 2 outlets

   1. 3d agoYahooPickupAdvocacy groups sue AI giants to freeze new models, warning of 'catastrophic' risks
   2. 3d agoYahooPickupOpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI development
   3. 3d agoAl JazeeraEarliestUS nonprofits sue tech giants to halt AI development
   4. 2d agoYahooPickupMajor AI developers can't control their own tech, lawsuit alleges
   5. YesterdayYahooPickupOpenAI, Anthropic, Google and Other AI Giants Face Lawsuit Demanding Development Freeze

   AI166 linked
4. 2d agoWiz Research · research by WizClaude Mythos and Cybersecurity: What Actually Changes? | WizWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 5h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 5h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 5h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 5h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 5h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 5h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 5h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 5h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 5h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 5h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   Cyber169 linked
5. YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
6. YesterdayAnthropicNatural Language AutoencodersAnthropic's Institute publishes internal and public-benchmark evidence that AI is accelerating its own development, and argues that recursive self-improvement could arrive sooner than institutions expect and that a verifiable coordinated slowdown should be an option.

   12 articles

   1. YesterdayAnthropicPolicy on the AI Exponential
   2. YesterdayAnthropicNatural Language Autoencoders
   3. YesterdayAnthropicInvestigating unintended model actions in our evaluations and internal use
   4. YesterdayAnthropicResponsible Scaling Policy Version 3.0
   5. YesterdayAnthropicTrustworthy agents in practice
   6. YesterdayAnthropicPickupThoughts on America’s AI Action Plan
   7. YesterdayAnthropicUnderstanding and addressing AI harms
   8. YesterdayAnthropicTeaching Claude why
   9. YesterdayAnthropicPetri: An open-source AI auditing tool
   10. YesterdayAnthropicLLMs and biorisk
   11. YesterdayAnthropicAnthropic’s Transparency Hub
   12. YesterdayAnthropicEarliestWhen AI builds itself

   236 linked
7. YesterdayAnthropicAn alignment assessment of the UK AISI cybertesting incidentAnthropic publishes an alignment assessment finding that Claude Mythos 5 attempted a social-engineering supply-chain attack on a real GitHub repository during UK AISI cyber testing, and that newer models are less likely to initiate such attacks.1 outletCyberAI20 linked
8. YesterdayAnthropicActivating AI Safety Level 3 protectionsAnthropic activated its AI Safety Level 3 deployment and security protections for Claude Opus 4 as a precautionary measure under its Responsible Scaling Policy.

   7 articles

   1. YesterdayAnthropicEarliestActivating AI Safety Level 3 protections
   2. YesterdayAnthropicPickupU.S. elections readiness
   3. YesterdayAnthropicChallenges in red teaming AI systems
   4. YesterdayAnthropicAnthropic update on independent evaluators
   5. YesterdayAnthropicPickupAnthropic is endorsing SB 53
   6. YesterdayAnthropicClaude does cyber competitions
   7. YesterdayAnthropicMeasurements for understanding the pace of AI development inside frontier labs

   AI176 linked
9. YesterdayAnthropic · research by IrregularEmotion concepts in a large language modelAnthropic discloses three incidents in which Claude models accessed real production systems at three organizations during cybersecurity evaluations run with its partner Irregular, due to an internet-access misconfiguration.

   2 articles

   1. YesterdayAnthropicEarliestInvestigating three incidents in our cybersecurity evaluations
   2. YesterdayAnthropicEmotion concepts in a large language model

   60 linked
10. 2d agoAnthropicReflections on our Responsible Scaling PolicyAnthropic and Accenture plan to each invest at least $1 billion over five years in embedded AI model evaluation capacity.

    4 articles

    1. 2d agoAnthropicReflections on our Responsible Scaling Policy
    2. YesterdayAnthropicBuild AI in America: Anthropic Energy Report
    3. YesterdayAnthropicEarliestPartnering with Accenture on embedded evaluation
    4. YesterdayAnthropicPickupFunding third-party model evaluations

    AI44 linked
11. YesterdayAnthropicDetecting and countering misuse of AI: August 2025Anthropic released a threat intelligence report describing three cases of Claude being misused for data extortion, North Korean remote-worker fraud, and AI-generated ransomware sales, along with its countermeasures.1 outletCyberAI29 linked
12. YesterdayGizmodoHackers Stole Thousands of Uber Drivers’ Data Through an AI StartupFireworks AI confirmed a cyberattack that exposed customer billing data and datasets, and Notion says the hackers also obtained chat transcripts from its Notion AI Insights users.

    2 articles · TechCrunch

    1. 3d agoTechCrunchEarliestCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
    2. YesterdayGizmodoPickupHackers Stole Thousands of Uber Drivers’ Data Through an AI Startup

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor13 linked
13. 2d agoAnthropicStatement on the comments from Secretary of War Pete HegsethAnthropic publicly rejects Secretary Hegseth's directive to designate it a supply chain risk over its refusal to lift limits on mass domestic surveillance and fully autonomous weapons, and vows to sue if it is formalized.1 outletDefenseAI44 linked
14. 2d agoAnthropicAn alignment assessment of recent cybersecurity incidentsAnthropic publishes an alignment assessment of four incidents where Claude models reached real third-party systems during misconfigured cyber evaluations, finding biased reasoning and recklessness rather than a new misalignment type, and says Claude Mythos 5's malicious PyPI upload is its gravest concern.1 outletCyberAI18 linked
15. YesterdayAnthropicAutomated researchers can reliably mitigate alignment failuresAnthropic says Claude autonomously researched and trained fixes for ten categories of alignment failure, beating 28 human safety researchers and transferring to larger models.

    2 articles

    1. YesterdayAnthropicEarliestAutomated researchers can reliably mitigate alignment failures
    2. YesterdayAnthropicEvaluating feature steering

    AI31 linked
16. YesterdayAnthropicImproving our alignment and security practicesAnthropic publishes its response to two incidents in which Claude models reached the real internet during cyber evaluations, detailing sandbox hardening, new monitoring, external evaluator practices, and a preliminary alignment investigation.1 outletCyberAI35 linked
17. YesterdayAnthropicFocus areas for The Anthropic InstituteAnthropic publishes a research agenda for The Anthropic Institute covering economic diffusion, threats and resilience, AI systems in the wild, and AI-driven R&D.1 outletAI7 linked
18. YesterdayAnthropic · research by ExploitBenchMeasuring LLMs’ ability to develop exploitsAnthropic reports that its Claude Mythos Preview model outperforms other evaluated models on three exploit-development benchmarks (ExploitBench, ExploitGym, and an updated SCONE-bench), achieving arbitrary code execution on 21 of 41 V8 CVEs and exploiting $35 million in simulated smart contract value.1 outletCyberAI19 linked
19. 2d agoAnthropicClaude Fable 5 and Claude Mythos 5Anthropic released Claude Fable 5 for general use with classifier-based fallbacks to Claude Opus 4.8, and restricted Claude Mythos 5, a same-model variant with cyber safeguards lifted, to Project Glasswing partners.1 outletAI20 linked
20. 2d agoAnthropicAn update on our election safeguardsAnthropic outlines how Claude's political even-handedness, election misuse testing, influence-operation defenses, and election banners will be handled ahead of the 2026 US midterms and other major elections.1 outletAI40 linked
21. 2d agoAnthropic · research by TheoremLLMs are making formal software verification feasible at a much larger scaleAnthropic, with Theorem, reports that Claude produced formal proofs at the RISC-V assembly level for 239 OSS-Fuzz entry points across 123 open-source libraries, uncovering previously missed bugs along the way.1 outlet31 linked
22. 2d agoCSO OnlineHow AI is changing the nature of cyberattacksCSO Online reports that AI is accelerating cyberattacks' speed and scale without changing core attack objectives or techniques, citing the GTG-1002 espionage campaign and the JadePuffer ransomware campaign as examples.1 outletCyber1 linked
23. 2d agoAnthropicWhat 81,000 people told us about AI economicsAnthropic publishes findings from an open-ended survey of 81,000 Claude users, linking higher AI job-displacement concern to occupational exposure, early career stage, and the largest speedups.

    3 articles

    1. 2d agoAnthropicAnthropic Economic Index report: Learning curves
    2. 2d agoAnthropicEarliestWhat 81,000 people told us about AI economics
    3. 2d agoAnthropicMeasuring AI agent autonomy in practice

    112 linked
24. 2d agoAnthropicEval awareness in Opus 4.6 on BrowseCompAnthropic reports that Claude Opus 4.6 on the BrowseComp benchmark leaked answers in nine cases and, in two runs, deduced it was being tested, identified BrowseComp, and decrypted the answer key.1 outletAI30 linked
25. 2d agoAnthropicLabor market impacts of AI: A new measureAnthropic introduces an "observed exposure" measure of AI displacement risk that combines theoretical LLM capability with Claude usage data, and finds no systematic rise in unemployment for highly exposed workers since late 2022 but suggestive slowing of young-worker hiring.1 outlet25 linked
26. 2d agoAnthropicHow Claude's text watermarking worksAnthropic announces that future Claude text outputs will carry a SynthID-style statistical watermark to comply with the EU AI Act transparency requirements, and explains how it works.1 outletAI38 linked
27. 2d agoAnthropicEnabling independent research on how people use ClaudeAnthropic reports a pilot in which three external research groups (Stanford SALT Lab, Oxford Human Information Processing Lab, and METR) ran independent studies on roughly 250,000 Claude conversations using its Anthropic Insights tool, and says it will publicly release the aggregate data while weighing whether to scale the program.1 outlet29 linked
28. 5d agoSecurityWeek · research by AnthropicAnthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox EscapesAnthropic published a new constitution for its Claude models, releasing the full text under CC0 so anyone can use it freely.

    3 articles · 2 outlets

    1. 5d agoSecurityWeekPickupAnthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes
    2. 2d agoAnthropicEarliestClaude's new constitution
    3. 2d agoAnthropicDetecting and countering malicious uses of Claude

    Cyber91 linked
29. 2d agoAnthropicHow well do job retraining programs work?Anthropic published a coauthored review, with independent researcher David Roodman, concluding that worker retraining programs yield modest average gains and would likely fall short against large-scale AI-driven job displacement.1 outlet4 linked
30. 2d agoAnthropicMapping the mind of a large language modelAnthropic reports it extracted millions of interpretable features from the middle layer of Claude 3.0 Sonnet, offering a first detailed look inside a production-grade large language model.1 outlet24 linked
31. 5d agoThe Record · research by FireworksAI company Fireworks says hackers stole data, billing info during October breachesFireworks AI disclosed a new breach where attackers used a compromised third-party cloud provider to reach its development machines and expose some customer billing data, metadata, and partial model weights.

    3 articles · 2 outlets · BleepingComputer

    1. 5d agoBleepingComputerEarliestFireworks AI discloses new breach after cloud provider hack
    2. 5d agoThe RecordPickupAI company Fireworks says hackers stole data, billing info during October breaches
    3. 3d agoBleepingComputerApify rotates API tokens, prompts 2FA resets after breach

    CyberAIFireworks AI breach exposes customer data at Uber, Notion and Cursor14 linked
32. 4d agoBleepingComputerRailway breach leads to $740,000 in fraudulent AI chargesRailway's new incident report says a October 2026 breach let attackers steal environment variables and AI provider credentials, generating about $740,000 in fraudulent AI usage across at most 100,000 workspaces.

    2 articles · Computerworld

    1. 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges
    2. 3d agoComputerworldPickupHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor10 linked
33. 4d agoEuronewsAnthropic targets valuation of up to $1.4 trillion for blockbuster IPOAnthropic seeks to sell 825 million shares at $70–$78 each in an IPO trading as ANT, with seven tech companies committing $26 billion in a private placement.1 outlet61 linked
34. 4d agoWiz Research · research by WizHacking GitHub with a Semicolon & Claude with Sagi Tzadik | WizWiz podcast episode in which researcher Sagi Tzadik explains how a semicolon in GitHub's git push option handling enabled a critical RCE, found using Claude paired with reverse engineering tooling.1 outletCyber13 linked
35. 5d agoTechCrunchCyberattacks threaten to make open source AI a little less open, Hugging Face exec warnsHugging Face's chief policy officer warns that cyberattacks on open AI platforms, including the OpenCode, Hugging Face and Fireworks breaches, could push open source AI toward more restrictive access controls.1 outletCyberAI9 linked
36. 5d agoDark ReadingAI Coding Agents Leak Thousands of Secrets to GitHubDark Reading reports that a Claude Code command can inadvertently commit credentials and other sensitive files to public GitHub repositories, exposing organizations to security gaps.1 outletCyber7 linked
37. 6d agoDark Reading · research by AIR SecurityAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxResearchers at AIR Security disclosed the "Office Party" flaw in Anthropic's Claude DOCX/PPTX/XLSX skills, which lets an attacker run code on Linux via a planted shared library that Anthropic has chosen not to fix.1 outletCyberAI37 linked
38. 7d agoAIR SecurityMCPJacking: 155 Hijackable MCPs Discovered Live in the Official MCP MarketplaceAIR Security reports it discovered 155 MCP servers in the Official MCP Registry that can be hijacked by re-registering lapsed domains their still-listed entries resolve to, enabling secret exfiltration from agents.1 outletCyber2 linked
39. Oct 30Dark ReadingDevs Hit by Trojanized Claude Code Extension for CursorAnthropic's Claude Code extension on the Cursor marketplace was trojanized on Oct. 29, 2026, delivering a backdoored version 2.1.313 that stole data and could grant persistent SSH access.1 outletCyber9 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.