Trump administration considers mandatory pre-release vetting of AI models — Anthropic's Mythos cited as catalyst for policy reversal
… Critically, the system would grant the government early access to models without blocking their release. …
Search
Hidden backdoor in Tenda routers goes unpatched as company ignores warnings from cybersecurity researchers — Chinese company's firmware allows admin access without a password
… As routers serve as the gateway between local devices and the internet, compromising one can expose every connected system on the network to further attacks. …
White House reportedly considers mandatory government vetting of AI models before release — executive order under discussion
… The New York Times has reported that the center has been sidelined under Trump, despite the administration's own AI policy paper stating it should play a role in assessing AI system performance. …
Windows Server vulnerability can grant system privileges with just a malformed packet — domain controllers are being exploited in the wild
… Systems administrators might also find specific patch links and remediation scripts handy. If an attacker can finagle this vulnerability to get System-level of access to domain controllers, the consequences are pretty up to the imagination. …
Devastating 'Dirty Frag' exploit leaks out, gives immediate root access on most Linux machines since 2017, no patches available, no warning given — Copy Fail-like vulnerability had its embargo broken
Here's a question for the systems administrators in the crowd: what's better than one instant-root™️Linux vulnerability that affects most every system since 2017? …
Trump signs AI executive order seeking 30-day government access to frontier models before release — voluntary framework will include classified benchmark to determine which models qualify
… Developers who opt in would open their models to agency review before the systems reach other trusted partners, and the order puts those same agencies in the room to help choose the partners. …
Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor
… They also state the vulnerability is well-hidden, and that they "could have made some insane cash selling this, but no amount of money will stand between me and my determination against Microsoft ." As for GreenPlasma, it's supposed to get an attacker full system-level access even higher than admin… …
First Apple M5 memory exploit discovered using Anthropic AI, gives root access on MacOS — Claude Mythos helps security researchers bypass Memory Integrity Enforcement
… However, the exploit remains concerning, as it's relatively easy to trick a user into running it and, with full system control, also hard to find and remove. …
Outlook may have allowed unencrypted connections for decades, report claims — Fedora and Dovecot upgrade reveal protocol downgrade issue present since at least 2007
… This meant the user's mail client was trying to use an unencrypted connection, something that's been deprecated by systems administrators for decades. …
Google finds first AI-developed zero-day that bypasses 2FA — self-morphing malware and Gemini-powered backdoors signal a new era of cybercrime
… The attack in question was a Python script that allowed bypassing 2FA in a "popular open-source, web-based system administration tool." According to the GTIG, the exploit's code bore all the hallmarks of AI usage and abuses a logic flaw. …