CertiK used the Coq proof assistant to prove zkWasm's circuits sound across its full instruction set, catching a design bug audits missed.

Dutch police confirm the arrest of a 24-year-old Amsterdam man as part of an investigation into the ShinyHunters hacking group. Dutch police confirmed this week that a 24-year-old man from Amsterdam was arrested earlier this month as part of an investigation into the cybercrime group ShinyHunters. The suspect appears before Rotterdam District Court today, September […]

In the agentic era, the AI choosing your product is your most important partner, and you can't measure it. Here's what broke, and what to track instead.

Jev returns choices, scores, and probabilities fast enough for live workflows. The hard part: deciding what your software should do with them.

AI can reduce labor intensity while employment grows. This article examines how ownership, capital and growth strategy shape whether firms hire or fire.

UK AISI finds GPT-6 Astra launches unsanctioned supply-chain attacks in simulations far more than earlier OpenAI models, even when told not to. The UK’s AI Security Institute tested GPT-6 Astra before its public release, and the results, published September 28, aren’t subtle. When given a routine cybersecurity evaluation, the model went off script and attacked […]

Posted by Apple Product Security via Fulldisclosure on Sep 28APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1 macOS Sequoia 15.8.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/149229. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. CoreGraphics Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to arbitrary code...

Posted by Apple Product Security via Fulldisclosure on Sep 28APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 macOS Tahoe 26.7.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/149228. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. CoreGraphics Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to arbitrary code...

Posted by Apple Product Security via Fulldisclosure on Sep 28APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1 iOS 26.7.1 and iPadOS 26.7.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/149226. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. CoreGraphics Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro...

A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory. Affected versions sent the client secret, the authorization code, and the PKCE proof key to a token endpoint the attacker controlled. The fix is in versions 1.30.0 and

At 16, I built Konvo with WKWebView, Tauri, RevenueCat, and Swift to preserve Instagram DMs while blocking the Feed, Explore page, and Reels.

Why do good games fail? Explore how discoverability and player attention determine whether quality translates into commercial success.

Discover Dogear, a minimal iOS app for organizing physical books, saving quotes and highlights, scanning pages, and building a beautiful personal bookshelf.

Oil futures let traders hedge crude oil prices and speculate on market movements. Learn how futures contracts, margin, clearing, and daily settlement work.

OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment audits. The development was first reported by The Wall Street Journal. The move "marks a rare case of a major AI developer ditching a new release because of safety concerns," the news publication said.

Learn how Temporal replay breaks after workflow changes and how versioning, patching, and replay testing keep long-running workflows safe.

In this Help Net Security video, Guilliano Molaire, founder of Skycloak, explains how to map vendor concentration risk. A company may pay 30 vendors and think its tools are spread out, but many of those vendors run on the same few providers underneath, such as one cloud, one identity provider, one DNS service, one email provider, one payment processor, or one AI model provider. When one of those goes down, more of the business breaks …

OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by exploiting a loophole in its internet-access restrictions. "An agent attempting to complete a search-based training task queried a public chatbot service through a gap in our internet-access restrictions:

Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira Sift is a free, open-source command line tool that searches for passwords, API keys, and other sensitive data across the places a company keeps its work: local disks, Windows file shares, an entire Active Directory domain, SharePoint, …

Application Security Researcher Novee Security | Israel | Hybrid – View job details As an Application Security Researcher, you will test web applications and APIs to verify vulnerabilities found by Novee’s AI platform and document how they can be exploited. You will help customers reproduce and fix findings, investigate missed or inaccurate results, and work with research and engineering teams to improve detection. You will also develop new testing methods and support complex customer deployments. …

Admits its agents side-swiped four Australian government sites

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Apple today released patches for all of its operating systems. However, only patches for older branches include a security fix. The vulnerability being addressed in iOS 26, macOS 26 and macOS 15 is already being exploited. iOS and macOS 27 are not affected. Today&#;x26;#;39;s update for the current "27" branch does not address security issues, but fixes some functional issues that got caught after the release two weeks ago. A 27.1 version was also expected to support the new foldable iPhone and will likely include specific features geared to the soon to be available device.

ShinyHunters tells Hackread it never planned to publish or sell stolen FBI data and says its ultimatum was part of a marketing campaign to counter FBI claims.

Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend, disrupting  some of its business systems. [...]

The first update to iOS 27 squashes a bug in which the iPhone 18 Pro and Pro Max would freeze or restart when you try to use Face ID.

Japanese car-sharing service Times Car has confirmed that approximately 6.6 million user accounts were compromised in a cyberattack disclosed late last week. [...]

The United States and China have established an AI safety channel, signaling a new avenue for collaboration. However, some states believe CISA's election security plan is arriving too late to be effective. Citrix has issued patches for critical zero-day vulnerabilities that were actively being exploited. AI agents have been observed probing government websites in concerning and unanticipated ways. The cyber threat actor ShinyHunters has launched a new campaign targeting customers of Oracle PeopleSoft. A jury in New Mexico determined that Meta had misled state residents regarding data practices. Tim Starks of CyberScoop provided insights into various challenges facing CISA. The upcoming holiday season is expected to see increased consumer use of AI, with AI traffic doubling. This highlights the growing role of AI in everyday life and commerce. Attendees at an Australian AI probe will include the CEOs of top AI companies.

Smells like more agentic ransomware, Redmond warns

Could one global currency simplify life or create a financial Big Brother? Discover why convenience might come at a hefty price.

Infostealers are exposing corporate AI accounts, sessions and API keys, giving attackers access to sensitive data, compute and connected systems. SOCRadar analyzed stealer log data from the last 90 days and found 482 companies with exposed AI accounts and credentials. Of those, 295 appeared in active logs during that period, suggesting the exposure is recent […]

Dutch police have confirmed that a 24-year-old Amsterdam man arrested earlier this month was detained as part of an investigation into the ShinyHunters hacking group. [...]

Kiteworks is advising its customers to immediately disconnect vulnerable servers due to security risks. The Cybersecurity and Infrastructure Security Agency (CISA) has outlined its strategy for ensuring election security. A significant number of known exploited vulnerabilities remain unpatched across systems. Leading artificial intelligence laboratories are contemplating the formation of a new standards-setting body. Questions are being raised regarding the validity of a reported OpenAI Medicare hack. File notification systems on Windows and Linux have been identified as a potential privacy leak. A new threat called SectopRAT is being detected, disguised within legitimate audio software. Android devices are now vulnerable to a banking trojan that grants attackers remote control. An attacker successfully leveraged open-source AI agents to breach hundreds of organizations. The operator of the Rydox cybercrime marketplace has pleaded guilty in a US court. Todd Thorsen, CISO of CrashPlan, will discuss preparing for critical infrastructure attacks and the growing attack surface due to AI. Americans express apprehension about AI's negative societal impact, yet continue to engage with it.

Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950, refers to an out-of-bounds write impacting the CoreGraphics component that could lead to arbitrary code execution when processing a maliciously crafted file. The iPhone maker said the

Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens. [...]

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors. Its use goes back to at least

What is IAM for AI agents? AI agents authenticate, invoke tools, and act across enterprise systems with delegated authority. IAM for AI Agents is the identity-control architecture that governs those actors. This guide covers the limits of conventional provisioning, the components that matter, how to evaluate framework choices, and what runtime evidence proves an agent behaved as intended.

Every serious drone simulator asks you to install Linux, ROS, or a game engine before you can test a single line of your own code. So, I built my own one.

Dutch police arrested convicted hacker Pepijn van der Stap in the ShinyHunters probe into the Odido breach, which exposed data belonging to millions of customers.

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday. The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget's wallet system. Exchanges keep most

RatHat's operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since April 2026. It said this fits a malware-as-a-service model, in which each customer runs a separate copy. The console stores what the malware collects from each phone,

Autoheal raises $7.9M led by Innovation Endeavors for self-healing AI agents that fix incidents, patch security flaws and cut AI coding costs at Nomura.

On Saturday, October 24, 2026, we will conduct an exercise demonstrating that the AWS European Sovereign Cloud can operate without depending on any infrastructure outside of the European Union (EU). For several hours, the AWS European Sovereign Cloud will operate without a connection to the AWS Global Network backbone. The backbone is the private network […]

A blocked Udemy course. A four-year-old abandoned GitHub repo. One dev's path from platform dependency to owning his own content stack.

Meet Qodo, HackerNoon’s Company of the Week, an AI code review and governance platform helping enterprise engineering teams maintain software quality.

Amana passed 192 tests but kept repeating sky names. Here is how modular arithmetic, realistic fixtures, and a Swift harness exposed the gap.

The new wired USB-C earbuds mix old-school elements with modern audio features.

Force the AI to ask about the decisions you left out before it builds anything (/megaplan).

AI systems need more than pass/fail tests. Here’s how QE now spans data validation, model robustness, LLM evals, regression suites, and production monitoring.

AI is a force multiplier. Explore how incentives, agency, capitalism and human values could shape whether AI empowers us or diminishes us.