The Hugging Face incident and the road ahead

VMs won't contain cyber-capable agents

France's tax agency got hacked (in French)

How to compromise your system with a job interview

Every Model Cheats

Pacing model development in an era of cyber-critical capabilities

Ruby 4.0 Universal RCE Deserialization Gadget Chain

GPT 5.6 Cyber

What Happened to HackerOne?

AI assistant hacks gym website in first known Australian autonomous cyber attack

Responding to the next frontier of critical cyber capabilities

Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware

Bugtraq is back

Thanks FedEx, This Is Why We Keep Getting Phished (2024)

Keyv and friends compromised in active Shai-Hulud supply chain attack

Scope of Hacks on U.S. Water Supply Widens as Evidence Points to Iran

Investigating three real-world incidents in our cybersecurity evaluations

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the Incident

MAI-Cyber 1

What does GitHub's security team even do?

An Inside Look at the Token Reseller Market

I got into YC Startup School by hacking it

Kimi K3 exploited the latest Redis server

OpenAI’s accidental attack against Hugging Face is science fiction that happened

OpenAI says its AI went rogue and launched 'unprecedented' cyber-attack

The Three-Second Theft: Why AI Voice Fraud Outruns Every Defence

Who's running all those tiny RPKI servers?

OpenAI mandates hardware-backed passkeys for Trusted Access Cyber members

OpenSSH 10.4/10.4p1 Released

New serious vulnerabilities spiked around release of Claude Mythos Preview

Post-Mythos Cybersecurity: Keep calm and carry on

Anatomy of a Failed (Nation-State?) Attack

NSA lost access to Mythos amid Anthropic dispute

OpenAI DayBreak – GPT-5.5-Cyber

I found 10k GitHub repositories distributing Trojan malware

The hacker sent by Anthropic to calm the government's nerves about AI safety

I Could've Rickrolled the FIFA World Cup. All I Needed Was My ID

Malware developers added nuclear and biological weapons text to to their spyware

Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable

A €0.01 bank transfer could compromise a banking AI agent

NSA using Anthropic's Mythos for cyber attacks

Rootshell: A new E2EE email service hosted in Iceland

U.S. Midterms Have a Cyber Problem, but It's Not at the Ballot Box

GitHub bans security researcher who posted zero-day Windows exploits

Microsoft's stance on zero day exploits is a dumpster fire of their own making

CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude

Incident Report: CVE-2024-YIKES

Securing a DoD contractor: Finding a multi-tenant authorization vulnerability

After dissing Anthropic for limiting Mythos, OpenAI restricts access to Cyber

CPanel and WHM Authentication Bypass – CVE-2026-41940