2+ mon, 3+ week ago   (471+ words) That framing matters more than any specific technical detail in the document. The AI safety field has spent years asking how to make models behave correctly. The AI Control Roadmap asks a different question: what happens when they don't? The…...

3+ day, 9+ hour ago   (487+ words) Tencent has since deployed patches and server-side mitigations that block the specific exploit for all users. No exploitation in the wild has been reported. The attack's simplicity is what makes it alarming. An attacker needed only a WeChat account on…...

3+ day, 9+ hour ago   (334+ words) OpenAI did not directly answer questions about how many sites were involved or why the activity remained undisclosed for months. Writing in a policy essay titled "The AI policy window is open. We need to act," Lehane argued that the…...

4+ day, 2+ hour ago   (605+ words) The Exchange Server situation warrants front-of-queue treatment over the two named zero-days. CVE-2026-55007 allows a remote, unauthenticated attacker to execute code on an affected Exchange server by sending an email containing a malicious Visio attachment. The code runs when the…...

5+ day, 6+ hour ago   (619+ words) The incident is the largest publicly disclosed Bitcoin sidechain security breach on record: approximately 3,996 BTC, worth roughly $316 million, drained from the Liquid Federation's reserve wallet in a single transaction, recovered in part within about 26 hours through an entirely on-chain negotiation....

5+ day, 6+ hour ago   (572+ words) StyleSmuggler is a two-stage server-side template injection attack (CWE-1336) that exploits Magento's template rendering engine through a specific input property called styles. Server-side template injection is a class of vulnerability in which user-supplied input triggers remote code execution — a distinction…...

5+ day, 18+ hour ago   (394+ words) This is not a design flaw in HAProxy. The filter API is working as intended. The exploitation is the binary replacement itself: an attacker who can install a recompiled version of a trusted application inherits all of that application's privileges…...

1+ week, 1+ day ago   (298+ words) The agents were running multi-round timed web-lookup tasks — information-retrieval exercises structured as five sequential questions, with a generous first window and extremely short answer deadlines (sometimes 13 seconds) for the rounds that followed. Their environment gave them read access to the…...

1+ week, 1+ day ago   (613+ words) The vulnerability targets a specific Falcon capability: the automatic removal of malicious macros from Microsoft Office files. That Falcon macro removal feature is a core part of Falcon's active protection suite and runs as a Windows service with SYSTEM-level privileges…...

1+ week, 2+ day ago   (363+ words) That is the situation as of September 4, 2026: OpenAI has committed to building a kill switch. It has not built one yet. And Congress, which asked for the evidence to audit OpenAI's safety practices, is still waiting. Rep. Casar called the…...