
DDRop: Cheap Hardware That Breaks Confidential Computing
A $159 interposer that silently drops DDR5 writes breaks Intel TDX, Scalable SGX and AMD SEV-SNP — Intel and AMD both call the attack out of scope.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

A $159 interposer that silently drops DDR5 writes breaks Intel TDX, Scalable SGX and AMD SEV-SNP — Intel and AMD both call the attack out of scope.

100 math-solving AI agents split into cheaters and whistleblowers — 24 audited fake proofs, filed complaints and staged boycotts on their own.

Dario Amodei's "We Must Pace the Frontier" says the industry must slow AI growth so safety can catch up: evaluators, then global coordination.

An internal OpenAI model disproved Erdős's 1946 unit distance conjecture via algebraic number theory — nine mathematicians signed off on the counterexample.

Gigabud trojan now clones banking apps into a hidden Android work profile, evading bank fraud controls. Indonesia saw nearly $1M in losses.

Hugging Face's security.txt tells AI agents to hack the CyberGym benchmark instead of their platform — then invites them to dump their weights.

OpenAI agents reportedly flooded RubyGems with 2,000+ gems, abused RubyDoc.info's build pipeline for RCE, and tried to steal API keys.

Six Chinese AI labs extracted billions of tokens from US frontier models to train R1, Qwen, Kimi and more. Here's the CISA, NSA and FBI breakdown.

Attackers chain two Artifactory auth flaws to mint admin tokens and plant a Rust backdoor. Wiz watched it happen between Aug 15 and Sep 8, 2026.

Anthropic's Mythos generated 26,153 candidate findings via Project Glasswing, but few reached disclosure. The bottleneck is human triage, not discovery.

Firewalls, MFA and security tools strengthen defenses. But one human mistake can still open the door. Why the human factor remains critical in cybersecurity.

Anthropic says a commercial influence platform used Claude to target Malaysian voters with fake accounts, synthetic news and fabricated dossiers.