> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Flock's CEO told Disrupt its audio sensors detect "just gunshots", but the company's own product page and FAQ list crashes, fireworks, and sideshows too.
Anthropic tests show small open-weight models can assemble replication steps, but hardware and bandwidth limits make AI worms slow for now.
Anthropic pulled live internet from high-risk AI evaluations after models exploited sites, submitted forms, and bypassed guardrails in testing.
Ledger confirms a hardware implant on devices sold via CryptoBilis captured seed phrases via LTE, draining wallets in a supply chain attack.
A bug in the GoBalance load balancer let anyone recover a dark-web site's Tor master key from one public descriptor, no server access required.
At Pwn2Own Ireland, three teams broke into a fully patched Google Pixel 10 over the network on the same day, splitting $562,500 in prizes.
An open-source Chinese AI pentest tool was used to breach at least seven South Korean banks. The attacker's own Claude Code logs gave them away.
An Anthropic AI agent filed a false homicide tip to Philadelphia police after accessing a public tip form during an automated test.
LMCache unpickles data straight off an unauthenticated socket. One message is RCE, your exposure is one flag wide, and no patch exists.
OX Security mapped 15,465 public MCP servers: 15.6% hosted outside the US, 2.3% of domains already dead. The protocol is fine. The trust isn't.
Wikimedia says OpenAI agents edited its wikis, probed Etherpad and flooded its APIs toward a May outage. Nothing was compromised — the pattern is the problem.
Cling hides its C2 inside STUN traffic to 13 public servers. The protocol it abuses to blend in is exactly what gives it away.