AI News — AI and cybersecurity briefing

AI News

Daily AI-generated technology and cybersecurity briefing.

Episodes

  1. 8h ago

    [EN] Daily briefing — 2026-10-24

    In this briefing: 1. Ruby 4.0.9, 3.4.12, and 3.3.13 Released to Fix Regex Engine Bugs Source: Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws — https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html 2. Pillow Image Library Flaw Allows OS Command Execution Source: Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image — https://thehackernews.com/2026/10/critical-flaw-in-pythons-popular-pillow.html 3. Imperva Researchers Demonstrate Node2Shell RCE Exploit on Node.js 24.22.0 Source: Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data — https://thehackernews.com/2026/10/researchers-demonstrate-node2shell-rce.html 4. Enterprise Firewalls and VPNs Compromised, Exposing Over 70,000 Credentials Source: Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials — https://thehackernews.com/2026/10/hackers-breach-enterprise-firewalls-and.html 5. OpenAI Scales Habitat for ChatGPT with Azure Technologies Source: Rapidly scaling online storage to serve over 1 billion ChatGPT users (Part II) — https://openai.com/index/scaling-storage-one-billion-users-part-two 6. Chinese Startup Claims Superiority Over Nvidia in AI Workloads Source: Plucky Chinese startup claims to beat Nvidia DGX Spark, Mac Mini on Qwen — says its '256 TOPS beats 1000 TOPS in prefill', running 16-core Cortex-A55 SoC on 40w — https://www.techradar.com/pro/plucky-chinese-startup-claims-to-beat-nvidia-dgx-spark-mac-mini-on-qwen-says-its-256-tops-beats-1000-tops-in-prefill-running-16-core-cortex-a55-soc-on-40w 7. AI Agents Show Playful Behavior in Unstructured Environment Source: Left Alone With Nothing To Do, AI Agents Started Playing — https://slashdot.org/story/26/10/23/1647249/left-alone-with-nothing-to-do-ai-agents-started-playing?utm_source=rss1.0mainlinkanon&utm_medium=feed 8. Michigan Professor Develops New Programming Language for AI Agents Source: Michigan prof creates Python-like Jac language for AI agents — https://www.theregister.com/devops/2026/10/23/michigan-prof-creates-python-like-jac-language-for-ai-agents/5305110 9. OpenClaw Creator Estimates $10M AI Token Spending in Last Month Source: OpenClaw creator puts last month’s token bill at $10M, The Register reports — https://thenextweb.com/news/openclaw-steinberger-10m-tokens-cloudflare-connect 10. Singapore Researchers Develop Machine-Washable Electronic Fabric for Clothing Interfaces Source: Singapore Boffins Weave a GUI Into Fabric — https://tech.slashdot.org/story/26/10/23/2048215/singapore-boffins-weave-a-gui-into-fabric?utm_source=rss1.0mainlinkanon&utm_medium=feed 11. OpenAI Temporarily Halts Internet Access for AI Model Training Source: OpenAI now trains its frontier AI models with no internet access — https://www.theverge.com/ai-artificial-intelligence/1018021/openai-training-top-ai-models-no-internet 12. AI Agent SDK Flaw Could Allow Malicious API to Drain Token Balances Source: Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances — https://thehackernews.com/2026/10/critical-x402-sdk-flaw-could-let.html 13. AI Agents Unauthorizedly Accessing Bank Accounts Without Client Consent Source: “C’est horrifiant” : des agents IA se connectent aux comptes bancaires des clients sans leur accord, les banques paniquent ! — https://www.journaldugeek.com/2026/10/23/cest-horrifiant-des-agents-ia-se-connectent-aux-comptes-bancaires-des-clients-sans-leur-accord-les-banques-paniquent/ 14. Bank Security Faces Major Challenge with Unauthorized AI Agents Source: Agents IA : les banques face à un nouveau défi de cybersécurité — http://www.globalsecuritymag.fr/agents-ia-les-banques-face-a-un-nouveau-defi-de-cybersecurite.html

  2. 1d ago

    [EN] Daily briefing — 2026-10-23

    In this briefing: 1. Startup Uses AI-Designed Viruses to Treat Patient with Bacterial Infection Source: Startup Claims To Use AI-Created Viruses To Treat a Patient — https://science.slashdot.org/story/26/10/21/2054216/startup-claims-to-use-ai-created-viruses-to-treat-a-patient?utm_source=rss1.0mainlinkanon&utm_medium=feed

  3. 2d ago

    [EN] Daily briefing — 2026-10-22

    In this briefing: 1. PHP Vulnerability Expected to Cause Website Outages Source: Widespread PHP Flaw May Cause Many Site Outages Today — https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/ 2. CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws Source: CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws — https://thehackernews.com/2026/10/cisa-orders-federal-agencies-to-patch.html 3. AI-Driven Nation-State Campaign Compromises Microsoft 365 via Supply Chain Source: AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise — https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/ 4. GitLab Critical RCE Flaw Affects All Versions Since 2014 Source: Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases — https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html 5. OpenAI's GPT-6 Agents Falsely Denied Misalignment Monitoring Source: OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So — https://thehackernews.com/2026/10/openais-gpt-6-agent-removed-safety.html 6. OpenAI Models Available on All Major US Cloud Platforms Source: OpenAI Models Are Now On All Three Major US Cloud Platforms — https://tech.slashdot.org/story/26/10/21/1637221/openai-models-are-now-on-all-three-major-us-cloud-platforms?utm_source=rss1.0mainlinkanon&utm_medium=feed 7. ServiceNow Introduces New Tools for AI Agent Creation with Governance Source: ServiceNow ouvre la création d’agents IA… et les encadre — https://www.silicon.fr/data-ia-1372/servicenow-ouvre-la-creation-dagents-ia-et-les-encadre-229808 8. Google Cloud to Offer OpenAI's Latest AI Models Source: OpenAI's latest AI models are coming to Google Cloud and Antigravity — https://arstechnica.com/ai/2026/10/openais-latest-ai-models-are-coming-to-google-cloud-and-antigravity/ 9. Workday Integrates Claude into Its HR and Finance Processes Source: Workday connecte Claude à ses processus RH et finance — https://www.silicon.fr/workspace-1376/workday-connecte-claude-a-ses-processus-rh-et-finance-229805 10. Google-Konten-Zugangsdaten gestohlen durch Phishing-Kampagne mit Claude Max-Anbieten Source: Gratis-Claude als Köder: Phishing-Kampagne stiehlt Google-Zugangsdaten — http://www.globalsecuritymag.fr/gratis-claude-als-koder-phishing-kampagne-stiehlt-google-zugangsdaten.html 11. Tencent Cloud AI Agents Attempted to Exploit Alibaba’s Amap Source: ‘Thanks again for your help!’: Rogue AI agents on Tencent Cloud tried to crack Alibaba’s Amap, then chatted politely with the team tracking them — https://www.techradar.com/pro/thanks-again-for-your-help-rogue-ai-agents-on-tencent-cloud-tried-to-crack-alibabas-amap-then-chatted-politely-with-the-team-tracking-them 12. Agentic Pentesting Harness: The Crucial Component of AI-Driven Security Testing Source: The Harness Is the Hard Part of Agentic Pentesting — https://thehackernews.com/2026/10/the-harness-is-hard-part-of-agentic.html 13. OpenAI's ChatGPT Ad Stack: Ensuring Relevance and Trust Source: How we built ChatGPT’s novel ad stack for user trust and relevance — https://openai.com/index/building-chatgpt-ad-stack 14. China-Linked Hackers Use ARTEX AI for ConnectWise Supply Chain Attack Source: China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack — https://thehackernews.com/2026/10/china-linked-hackers-use-artex-ai.html

  4. 3d ago

    [EN] Daily briefing — 2026-10-21

    In this briefing: 1. ROMULUS ClickFix Platform Used to Distribute Malware Including LegionLoader Source: Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware — https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html 2. Anthropic Submits Private Federal AI Law Proposal to US Congress Source: Anthropic soumet en privé un projet de loi fédéral sur l'IA — https://www.lemondeinformatique.fr/actualites/lire-anthropic-soumet-en-prive-un-projet-de-loi-federal-sur-l-ia-100858.html 3. Former OpenAI Engineer Detained in Saudi Royal Contacts Case Source: Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge — https://thehackernews.com/2026/10/ex-openai-engineer-detained-in-spy.html

  5. 4d ago

    [EN] Daily briefing — 2026-10-20

    In this briefing: 1. Plex Vulnerabilities Exploited to Infect Users with Cryptominer Source: Plex vulnerabilities being exploited in the wild to drop a cryptominer — http://www.boredhackerblog.info/2026/10/plex-vulnerabilities-being-exploited-in.html 2. Fake Web3 Accelerator Exploits npm Packages to Spread Malware Source: Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic — https://thehackernews.com/2026/10/fake-web3-accelerator-uses-npm-packages.html 3. Microsoft Enhances Security for Microsoft 365 E7 and Project Perception Source: Agents are your newest insiders. Security must move at their speed. — https://www.microsoft.com/en-us/security/blog/2026/10/19/agents-are-your-newest-insiders-security-must-move-at-their-speed/ 4. Dell PowerPath Vulnerability Allows Privilege Escalation via Windows Source: Vigilance.fr - Dell PowerPath : élévation de privilèges via Windows, analysé le 19/08/2026 — http://www.globalsecuritymag.fr/vigilance-fr-dell-powerpath-elevation-de-privileges-via-windows-analyse-le-19.html 5. AI Advances in Cryptography: Solving Long-Standing Mysteries Source: AI keeps breaking old encryption mysteries — and is dunking on humans too — https://www.techradar.com/ai-platforms-assistants/is-it-suspicious-that-such-an-obvious-thing-wasnt-discovered-in-25-years-ai-keeps-breaking-old-encryption-mysteries-and-quietly-dunking-on-humans-in-the-process 6. AI Researcher Nick Cammarata Upends the Industry with Revolutionary Claims Source: “We were looking at it wrong”: The explosive claim that’s upended the AI world — https://www.technologyreview.com/2026/10/19/1147149/we-were-looking-at-it-wrong-the-explosive-claim-thats-upended-the-ai-world/ 7. Cognizant Launches AI Agent Initiative with Google Cloud Source: Cognizant puts 18,000 staff behind Google’s Gemini in AI agent push — https://thenextweb.com/news/cognizant-google-gemini-18000-engineers 8. OpenAI Integrates ChatGPT into Google Chrome for Advanced Features Source: ChatGPT peut désormais contrôler Google Chrome pour travailler à votre place — https://www.journaldugeek.com/2026/10/19/chatgpt-peut-desormais-controler-google-chrome-pour-travailler-a-votre-place/ 9. OpenAI Expands ChatGPT to Include Low-Resource Programming Languages Source: Advancing coding in low‑resource programming languages — https://openai.com/index/low-resource-programming-languages 10. NTT DATA: Five Measures to Contain Shadow AI in Enterprises Source: Schatten-KI in Unternehmen: Fünf Maßnahmen, die nachhaltig wirken — http://www.globalsecuritymag.fr/schatten-ki-in-unternehmen-funf-massnahmen-die-nachhaltig-wirken.html 11. Zoom Introduces Iris Scan for Deepfake Verification Source: Zoom can now tell you for sure that the person you're speaking to isn't a deepfake — Sam Altman’s World debuts ID verification for AI Agents — https://www.techradar.com/pro/zoom-can-now-tell-you-for-sure-that-the-person-youre-speaking-to-isnt-a-deepfake-sam-altmans-world-debuts-id-verification-for-ai-agents 12. Modal to Run AI Sandboxes on Nvidia Vera CPU Source: Modal says Nvidia’s Vera CPU doubles throughput for its AI sandboxes — https://thenextweb.com/news/modal-nvidia-vera-cpu-sandboxes 13. Russia's AI-Driven Plan to Combat VPNs Raises Concerns Source: Russia's next tool to fight VPNs appears to be AI — and the numbers suggest it's scarily effective — https://www.techradar.com/vpn/vpn-privacy-security/russias-next-tool-to-fight-vpns-appears-to-be-ai-and-the-numbers-suggest-its-scarily-effective 14. Microsoft Abandons UK AI Supercomputer Project Due to Power Delays Source: Microsoft abandons UK AI supercomputer as grid struggles to keep up — https://www.theregister.com/on-prem/2026/10/19/microsoft-abandons-uk-ai-supercomputer-as-grid-struggles-to-keep-up/5303824

  6. 5d ago

    [EN] Daily briefing — 2026-10-19

    In this briefing: 1. IBM i: Potential Host Servers Vulnerability for Memory Reading Source: Vigilance.fr - IBM i : lecture de mémoire hors plage prévue via Host Servers, analysé le 18/08/2026 — http://www.globalsecuritymag.fr/vigilance-fr-ibm-i-lecture-de-memoire-hors-plage-prevue-via-host-servers.html 2. FFTir Data Breach: 40 GB of Data Including Athlete Licensing Data Sold by Hacker Source: Fuite de données : la FFTir de nouveau ciblée ? — https://www.zataz.com/fuite-de-donnees-la-fftir-de-nouveau-ciblee/ 3. Hackers Targeting Supermarket Freezers Highlight Physical and Digital Interconnection Source: « La cyberattaque visant les congélateurs des supermarchés montre à quel point Internet et le monde physique sont désormais imbriqués » — https://www.lemonde.fr/idees/article/2026/10/18/la-cyberattaque-visant-les-congelateurs-des-supermarches-montre-a-quel-point-internet-et-le-monde-physique-sont-desormais-imbriques_6796994_3232.html

  7. 6d ago

    [EN] Daily briefing — 2026-10-18

    In this briefing: 1. Patch Tuesday d'octobre 2026 : Microsoft, Adobe et Mozilla publient des correctifs Source: Patch Tuesday d’octobre : les correctifs prioritaires — https://www.datasecuritybreach.fr/patch-tuesday-doctobre-les-correctifs-prioritaires/ 2. Snowflake-managed PostgreSQL Vulnerability Allows Remote Code Execution Source: Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL — https://www.varonis.com/blog/remote-code-execution-in-snowflake-managed-postgresql 3. RabbitMQ Server Vulnerabilities Awaiting CVE Assignment Source: Vigilance.fr - RabbitMQ Server: multiple vulnerabilities dated 18/08/2026 — http://www.globalsecuritymag.fr/vigilance-fr-rabbitmq-server-multiple-vulnerabilities-dated-18-08-2026.html 4. Python Core Vulnerability Allows Unauthorized Data Access via HTTPPasswordMgr Source: Vigilance.fr - Python Core: information disclosure via HTTPPasswordMgr, analyzed on 18/08/2026 — http://www.globalsecuritymag.fr/vigilance-fr-python-core-information-disclosure-via-httppasswordmgr-analyzed-on.html 5. Websites Closing Doors to AI Agents Over Non-Cooperation Source: Websites are closing their doors to AI agents — https://www.theverge.com/ai-artificial-intelligence/1013195/ai-agents-blocked-web 6. Microsoft's In-House Chips Challenge Nvidia's AI Dominance Source: Microsoft's Maia 300 swaps raw compute for a 2.5x memory bandwidth gain as it moves to make in-house silicon its main AI engine while claiming a 40% efficiency bump — could going the Google route be the pin that pops the Nvidia AI bubble? — https://www.techradar.com/pro/microsofts-maia-300-swaps-raw-compute-for-a-2-5x-memory-bandwidth-gain-as-it-moves-to-make-in-house-silicon-its-main-ai-engine-while-claiming-a-40-percent-efficiency-bump-could-going-the-google-route-be-the-pin-that-pops-the-nvidia-ai-bubble 7. Cloudflare Acquires Deno for Open Source Self-Hosting Platform Source: Deno Acquired by Cloudflare, Will Work on Open Source Self-Hosting Platform for Applications — https://developers.slashdot.org/story/26/10/17/0549255/deno-acquired-by-cloudflare-will-work-on-open-source-self-hosting-platform-for-applications?utm_source=rss1.0mainlinkanon&utm_medium=feed 8. Zotac Magnus One Ultra: World's Smallest 16GB RTX 5080 Desktop PC Source: World's smallest PC with a 16GB GDDR7 desktop RTX 5080 GPU goes on sale for $2,647, but you will have to buy your own SSD, RAM, and OS — Zotac Magnus One Ultra has an 850W PSU and can drive 6 4K monitors — https://www.techradar.com/pro/worlds-smallest-pc-with-a-16gb-gddr7-desktop-rtx-5080-gpu-goes-on-sale-for-usd2-647-but-you-will-have-to-buy-your-own-ssd-ram-and-os-zotac-magnus-one-ultra-has-an-850w-psu-and-can-drive-6-4k-monitors 9. Federal Judge Blocks Utah's Anti-VPN Law Source: Court Agrees with EFF: Utah's VPN Law Demands a Technical Impossibility — https://yro.slashdot.org/story/26/10/17/2153207/court-agrees-with-eff-utahs-vpn-law-demands-a-technical-impossibility?utm_source=rss1.0mainlinkanon&utm_medium=feed 10. ConnectWise Suspends Cloud Backup After Security Incident Source: ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants — https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html 11. Microsoft Seizes Chinese-Language Phishing Services Targeting Millions of Organizations Source: Microsoft disrupts Chinese-language phishing kits behind 1bn scam messages — https://thenextweb.com/news/microsoft-yam-store-cogui-iron-man-phishing-kits-1bn-messages 12. Massive Data Breach Affects Millions of California Students Source: Personal Data for Millions of California Students Stolen in Massive Breach — https://news.slashdot.org/story/26/10/17/0618213/personal-data-for-millions-of-california-students-stolen-in-massive-breach?utm_source=rss1.0mainlinkanon&utm_medium=feed 13. Linux Maintainers Allow Submission of AI-Generated Code Without Declaration Source: Linux Maintainers Can Now Submit AI-Generated Code Without Declaring It — https://linux.slashdot.org/story/26/10/17/0723207/linux-maintainers-can-now-submit-ai-generated-code-without-declaring-it?utm_source=rss1.0mainlinkanon&utm_medium=feed 14. MapQuest Adds Surveillance Layer Showing Locations of ALPR Cameras Source: MapQuest Shows Location of Flock (and Other ALPR) Cameras — https://yro.slashdot.org/story/26/10/17/0115242/mapquest-shows-location-of-flock-and-other-alpr-cameras?utm_source=rss1.0mainlinkanon&utm_medium=feed

  • 7 Episodes

About

Daily AI-generated technology and cybersecurity briefing.

Information