vulnerability

X says attackers are targeting user accounts after the launch of X Money

X is actively investigating a concerning surge of unsolicited password reset emails, which we believe are linked to the recent launch of X Money. Our security teams are working diligently to understand and mitigate this wave of attacks targeting user accounts. We recognize the potential impact on our community and are committed to providing updates as our investigation progresses.

Open AI’s Astra model is on the way — and very good at breaking into computer systems

OpenAI is preparing to release Astra, a new large language model (LLM) with significant cybersecurity implications. Astra demonstrates a remarkable ability to identify and exploit vulnerabilities within computer systems, prompting OpenAI to proactively preview the safety measures being implemented. This future-focused model underscores the growing importance of responsible AI development. For deeper insights into the evolving AI landscape, explore our coverage of AfterQuery's rapid ascent as a unicorn, showcasing the accelerating pace of innovation in this field.

Australian police arrest two over TeamPCP hacks targeting Mercor, OpenAI, and others

CISA confirms hackers targeted over 100 US water systems during July

CISA has confirmed a concerning surge in cyberattacks targeting over 100 U.S. water systems throughout July, escalating anxieties surrounding critical infrastructure security. This warning follows a series of suspected attacks linked to Iran-backed actors. The incidents underscore the urgent need for robust cybersecurity measures within vital sectors.

S3 Compatibility Doesn't Guarantee S3-Level Security

S3 compatibility doesn't automatically equate to S3-level security. Recent research from Wiz highlights critical security gaps in six popular neoclouds offering S3-compatible object storage, revealing a significant disparity compared to Amazon S3’s protections. While S3 has established itself as the industry standard, many services omit key security features. Understanding these differences is crucial for maintaining data integrity. Explore the risks of unowned AI-generated code and potential mitigation strategies, as discussed in our related article, "Presentation: Enchant Your AI and APIs with eBPF Magic 🪄."

Someone targeted security researchers using a fake crypto conference as a lure

Security researchers are facing an increasingly sophisticated threat landscape. Recently, a hacker posing as a representative of a prominent cryptocurrency news outlet used Google Docs to deliver malware, specifically targeting cybersecurity professionals attending a fake crypto conference. This tactic highlights the evolving methods employed by malicious actors to infiltrate trusted communities. The incident underscores the importance of vigilance and rigorous security practices, even within seemingly innocuous digital environments. For further insights into related security challenges, explore our article, "AI data giant Alation confirms cyberattack."

AI data giant Alation confirms cyberattack

Alation, a leading provider of data search and AI solutions, has confirmed unauthorized access to its systems following an incident on Tuesday. The company is actively investigating the breach and working to secure its environment. This event highlights the evolving cybersecurity landscape and underscores the importance of robust data protection measures. For further insights into related AI infrastructure developments, explore our article on Ramp’s new AI model routing service, Router. We will continue to provide updates as more information becomes available.

T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network

T-Mobile proactively secured its network, effectively removing Chinese-backed hackers following early detection of a significant breach attempt. The provider took decisive action, physically severing a compromised cable to isolate and expel the threat. This rapid response demonstrates a commitment to robust network security and protecting user data. For further insights into AI-powered threat detection, explore our article on "Whatsapp Tests on Device ML for Scam Detection with Privacy Preserving Analytics."

GLM-5.3 hits the API at $1.4/$4.4 per million tokens

Z.ai has made GLM-5.3, its new open-source language model boasting advanced coding and agent capabilities, accessible via API. Developers can now integrate this frontier model into their applications at a competitive rate of $1.40 per million input tokens and $4.40 per million output tokens—unchanged from its predecessor, GLM-5.2. Independent benchmarks place GLM-5.3 among the world’s top open-weight models, demonstrating strong performance at a notably lower cost than premium alternatives. For teams exploring coding and agent workloads, GLM-5.3 represents a compelling, accessible option.

Major Frontier Model Providers Adopt Watermarking Tech to Comply with EU Regulation

‘Unprecedented’ number of Apple users received recent spyware alert, say investigators

Investigators report an unusually high volume of Apple users recently received spyware threat notifications, signaling a significant escalation in targeted attacks. Cybersecurity experts are analyzing the scope of this event, emphasizing the seriousness of Apple’s alerts. Users should take these notifications seriously, as they indicate potential government-level surveillance. For further insight into emerging AI-driven cybersecurity risks, explore our article on GLM-5.3 and its potential vulnerabilities.

Crypto hardware wallet owners face fresh security risks after recent spate of personal data thefts

Recent data breaches impacting shipping companies that distribute crypto hardware wallets have introduced a significant new security risk for owners. The exposure of personal information elevates the potential for real-world attacks targeting these devices. It’s imperative to reassess physical security measures and remain vigilant. This situation underscores the evolving nature of digital threats and the need for proactive protection. For further insights into safeguarding your digital accounts, explore our guide, "How to tell if your AI platforms’ accounts have been hacked.”

How to tell if your AI platforms’ accounts have been hacked

AI platform security is paramount, and recent events underscore the urgency of vigilance. This guide provides a clear, actionable path to assess whether your accounts on popular AI platforms have been compromised. We’ll outline essential checks to identify suspicious activity and safeguard your data. Understanding these steps empowers you to proactively defend against potential breaches. For broader context on emerging cyber threats, explore our article, "What we know about the alleged Iranian hacks on US water utilities," for insights into recent security incidents.

What we know about the alleged Iranian hacks on US water utilities

Recent weeks have seen a concerning escalation: multiple US water utility systems have been targeted by cyberattacks, allegedly orchestrated by the Iranian government. Here's a concise overview of what we currently know—and what remains unclear—regarding these intrusions. These incidents underscore the increasing vulnerability of critical infrastructure. For further context on the evolving cybersecurity landscape and related threats, explore our article, "In a first, US will allow some private firms to carry out cyberattacks," which details shifts in national policy.

GLM-5.3 is here with advanced cyber capabilities — and reportedly already found a 'serious vulnerability' in Cursor

Z.ai has released GLM-5.3, a significant advancement in AI-native spreadsheet technology, building upon the 744-billion-parameter base of GLM-5.2 through scaled post-training. Notably, GLM-5.3’s cybersecurity capabilities have rapidly progressed, even identifying a potential vulnerability in Cursor, an AI coding startup. Initially accessible through the GLM Coding Plan and ZCode environment, with broader API access and open weights forthcoming, GLM-5.3 demonstrates considerable headroom for improvement without extensive retraining. For those interested in exploring the broader landscape of AI agents, consider our recent article on Meta’s open-source

If Apple sends you a push notification alerting you to a spyware attack, take it seriously

Apple is taking decisive action against sophisticated threats. When your iPhone lock screen displays a push notification alerting you to a potential spyware attack, prioritize immediate attention – this isn't a false alarm. Apple now proactively sends these notifications when it detects government-level spyware specifically targeting your device. This represents a significant escalation in protecting user security. For more context on Apple's broader strategies, explore our related article, "Apple in talks to pay publishers to provide Siri with current news."

After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug

Despite Microsoft’s recent legal threats, security researcher Nightmare Eclipse has disclosed a new Windows zero-day vulnerability, marking the latest in a series of impactful releases. This development underscores the ongoing challenge of securing modern operating systems and highlights the complex interplay between security research and corporate legal action. Users should prioritize patching systems promptly.

A Mechanistic Explanation of Prompt Injection (and why you should study roles) [R]

Prompt injection represents a critical vulnerability in AI systems, essentially allowing malicious prompts to manipulate model behavior. This insightful explanation by /u/katxwoods breaks down the mechanics, revealing how attackers can bypass intended safeguards. Understanding these techniques—and the roles they exploit—is essential for responsible AI development and deployment. For further exploration of related challenges, see our article, "3 Collapsing Models," which details issues encountered when training multiple AI models. Prioritizing prompt injection defense is now a core element of robust AI security.

A data breach at shipping giant Ceva Logistics is rippling across banks, retailers, Steam gamers, and beyond

A significant data breach at Ceva Logistics is impacting a wide range of businesses and consumers, from banks and retailers to Steam gamers. Companies utilizing Ceva Logistics for shipping are reporting that customer personal data was compromised in the recent cyberattack. This incident highlights the interconnected risks within global supply chains and underscores the importance of robust data security practices. For further insights into emerging security vulnerabilities, explore our article, "This ‘adversarial’ pattern can prevent surveillance cameras from detecting you."

Google’s top hacker hunter explains why hacking groups get codenames

Understanding why cybersecurity firms assign codenames to hacking groups reveals a strategic approach to threat management. Google’s leading hacker hunter recently explained this practice to TechCrunch, highlighting how these identifiers streamline tracking and communication within security teams. Rather than focusing on individual actors, codenames represent broader campaigns and associated risk. This allows for more efficient analysis and response. For example, recent research uncovered vulnerabilities across critical infrastructure, as detailed in our article on risks to Polish institutions.

GitHub Hardens npm and Actions Defaults, Drawing Debate over Delays versus Signing

GitHub has significantly strengthened its defenses against supply chain attacks by consolidating npm and Actions security enhancements implemented between March and July 2026. These changes prioritize default protections, streamlining security for developers. While the controls themselves have garnered discussion, Hacker News debate centers on the efficacy of implemented waiting periods versus encouraging author-side package signing. For deeper insights into proactive security measures, explore Cloudflare’s Precursor, a behavioral analysis engine designed to detect anomalous activity.

Computer maker Framework notifies ‘all customers’ of a data breach

Framework, a computer maker known for its modular design, has notified all customers of a data breach impacting personal information. Hackers gained access to names, email addresses, phone numbers, and physical addresses. While the company hasn't detailed the extent of the breach, this incident underscores the growing importance of data security across the tech landscape. For those interested in exploring how companies are leveraging AI to bolster security, see our recent article on Instacart’s AI-powered incident response system, Blueberry.

Wiz Discloses CosmosEscape, and Practitioners Debate What Customers Could Have Done

Wiz Research has revealed CosmosEscape, a significant security vulnerability impacting Azure Cosmos DB. This chain allowed an attacker to escape the Gremlin sandbox and obtain a platform-wide key, granting full read and write access to every database. While Microsoft swiftly blocked the initial entry point, remediation took nearly two years. The incident has sparked debate among security practitioners regarding shared responsibility and the true cost of this rearchitecture.

Hackers steal over $130M by exploiting bug in offline hardware wallets

A significant security vulnerability in Coldcard cryptocurrency hardware wallets has resulted in over $130 million in losses due to theft. Blockchain monitoring firms confirm hackers are exploiting a bug in the offline devices to drain user funds. This incident highlights the ongoing need for vigilance in securing digital assets. For context on broader privacy concerns, explore our related article, "Apple challenges UK government’s latest demand for iCloud backdoor," and understand the evolving landscape of digital security.