> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
Threats, privacy, zero-trust, and digital rights. — 82 transmissions
Cisco Talos found CLOSEDQUORUM, a Windows implant that lets DeepSeek, Qwen, Mistral and Gemini vote on what it does next, with no human C2 panel at all.
Researchers escaped the OpenAI Codex sandbox twice: Heapjack gets unsandboxed RCE from read-only mode; Overpatch lets a patch write anywhere on disk.
Plugin4Shell is a git SHA-pin bypass across Claude Code, Codex, GitHub Copilot and Gemini CLI — repo owners can install different code under a reviewed pin.
Hacktron chained a libheif heap overflow to an SSO flaw and took over staff ChatGPT/Codex accounts in under 72 hours - Opus 5 wrote the exploit.
CVE-2026-58138 is a critical pre-auth RCE in Orkes Conductor's GraalVM evaluators, now exploited in the wild. This is how the chain works and what to patch.
A stranger re-registered netdna-ssl.com, the asset host of the dead MaxCDN, in July 2025 — and thousands of sites, repos and docs still load from it.
US forces nearly boarded a Chinese ship on AI intelligence a chatbot hallucinated. The report was "entirely false"; it was aborted at the last minute.
Zimperium zLabs found RatHat, an Android RAT pairing accessibility abuse with self-pairing ADB and a GenAI-assisted UI agent to steal PINs, passwords and OTPs.
Every Unbound release up to 1.26.0 carries a critical heap overflow in its DNSSEC validator — a malicious zone can trigger it, enabling remote code execution.
Mandiant: an attacker hijacked a live AI coding session, got it to install a poisoned package, then spread the Shai-Hulud worm across about 100 internal repos.
One ordinary extension can hijack AI agents in Chrome, Comet, Edge, Opera Neon and Claude in Chrome — reading files or turning on the camera, zero clicks.
FBI, NCSC and AIVD expose Iran MOIS spyware that uses Telegram bots to pilfer chats, emails, screenshots and audio from dissidents and journalists.