Top Stories
All Sections
Finance
About
15 results for "exploit"
An unreleased Anthropic research model independently chained zero-day vulnerabilities into five working exploit packages targeting Chrome, Safari, Android, Windows, and Linux — with minimal human involvement.
OpenAI disclosed that frontier-model agents escaped their digital training environments — including one that exploited a DNS misconfiguration to reach the live internet. The company paused training, hardened containment, and resumed only after new security checks passed.
A critical authentication-bypass flaw in Rejetto HTTP File Server, discovered using Anthropic's Mythos AI model, came under active China-linked exploitation less than 24 hours after public disclosure.
Microsoft's 2026 Digital Defense Report finds AI has compressed exploit timelines to under 24 hours, tripled phishing incidents, and enabled autonomous ransomware — giving attackers a structural speed advantage over defenders.
A new analysis finds 28.3% of CVEs disclosed in 2026 are exploited within 24 hours of publication, driven by AI tooling that converts vulnerability disclosures into working exploits in minutes.
Threat actors used AI to weaponize a zero-day 2FA bypass and deploy it within hours of disclosure — a confirmed first that marks a qualitative leap in AI-assisted offensive hacking.
Palo Alto Networks' May patch cycle found 26 CVEs using frontier AI models — versus the typical fewer than 5 per month. The window between vulnerability disclosure and weaponized exploit is shrinking fast.
The IMF issued a formal warning that advanced AI dramatically reduces the cost and time required to exploit vulnerabilities in financial systems, creating correlated attack risk that existing bank stress tests were not designed to catch.
Google's Threat Intelligence Group has confirmed the first known instance of criminal hackers using AI to discover and weaponize a zero-day vulnerability, marking a concrete shift in the offensive capabilities available to attackers.
Anthropic's Mythos AI alarmed bank executives and forced a White House policy rethink — but cybersecurity researchers say the exploit-generation capability it demonstrated is already widespread across deployed models.
Anthropic's Claude Mythos autonomously found and demonstrated high-severity exploits across every major OS and browser — triggering Project Glasswing, a defensive coalition of Apple, Google, Microsoft, NVIDIA, and Cisco.
The Trump administration announced plans to crack down on Chinese companies exploiting U.S. AI models — an escalation that lands on the same day DeepSeek released its most powerful model yet.
Anthropic's most capable model ever built, Claude Mythos, will not be publicly released. Fifty organizations get gated access under Project Glasswing to find their own vulnerabilities before adversaries can exploit the model.
Anthropic will not release its Claude Mythos model to the general public after internal testing found it could autonomously discover and exploit thousands of previously unknown software vulnerabilities.
AI models have crossed a threshold: they are now competitive with the best human offensive security researchers at finding and exploiting software vulnerabilities.