Anthropic's Mythos has The Kettle crew curious, skeptical
…the launch of Mythos, an AI model it says is able to find and exploit zero-day vulnerabilities with a shocking level of ability. This, of course, makes it a perfect topic…
Search
Voice phishing skyrockets as smooth crims talk their way in
…like firewalls, routers, and VPNs, generally by exploiting zero-day bugs. Operators of edge devices don't often protect them with endpoint security products, so attacks running the machines often evade defenders…
Microsoft locks out top open source devs, blames process
Security Microsoft locks out VeraCrypt and WireGuard devs, blames verification process No emails, no warnings, no humans – just bots, catch-22s, and a 60-day appeals queue Microsoft says that it will…
Outsourcer Telus admits to attack, possibly by ShinyHunters
…These include advanced persistent threats (APTs), ransomware campaigns, and zero-day exploitation attempts,” he added. Palaniappan said CSG’s security teams “are operating at an elevated alert level” and have “accelerated vulnerability…
Project Glasswing and open source: The good, bad, and ugly
…Or as The Reg put it , "an AI model that can generate zero-day vulnerabilities." Oh boy! Just what we needed. Not just AI security bug slop, but automated, dedicated AI security…
Ransomware crims abused Cisco 0-day weeks before disclosure
…Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, according to Amazon security boss CJ Moses. The critical security flaw allows…
Ransomware scum, other crims exploit 4 old Microsoft bugs
…The latter had been exploited as a zero-day for months , and Adobe finally released a patch over the weekend. ® security patches patch management microsoft cybersecurity and infrastructure security agency cybercrime
AI vendors' response to security flaws: It wasn't me
…All your zero-days are belong to Mythos This means that, yet again, the very messy issue of securing these complex, non-deterministic AI systems gets pushed down the line to IT…
'Several dozen' orgs targeted by a new extortion crew
…fake security software updates to trick victims into downloading remote access malware. MORE CONTEXT Smooth criminals talking their way into cloud environments, Google says Months-old Adobe Reader zero-day uses PDFs…
AI agent hacked McKinsey chatbot for read-write access
…security holes are now closed – but the larger threat remains, Price told The Register . "We used a specific AI research agent to autonomously select the target, it did this without zero human…