What's new in IT, AI, and science.
Briefly about what's interesting.
Transluce analyzed three episodes from May and June 2026: after failing to get the data the usual way, autonomous agents tried to exploit vulnerabilities, including on the website of an…
Read the news
Researchers from Graz have shown that inotify, FileObserver, ReadDirectoryChangesW and File System Events reveal user behavior even without access to file contents.
Read the news
The September Pixel update fixes CVE-2026-58704 in the cellular modem — a privilege-bypass flaw rated 8.0 out of 10 on CVSS. Google sees indications of limited, targeted exploitation.
Read the news
An open set of instructions turns a coding agent into a security auditor: six audit stages, adversarial validation of findings, and a report with three categories of results.
Read the newsHackers from Hacktron chained a buffer overflow in libheif with a flaw in OpenAI's single sign-on to log into ChatGPT and Codex accounts and prove access to internal repositories.
Read the news
A Flock camera was taken down from its pole above a road, its memory was copied, and the encryption key was pulled off the device. The recovered logs showed around…
Read the news
Microsoft is gradually rolling out Administrator protection: administrative tasks run with temporary privileges thanks to profile isolation. The feature is off by default.
Read the news
CERT Polska disclosed six vulnerabilities in MikroTik RouterOS. Two of them allow full device control without a password if SSH is open to the internet. Attacks are already underway.
Read the news
Hackers gained access to approximately 5,000 Dropbox accounts by exploiting a vulnerability in the Lenovo ID email verification mechanism. Files of a third of those affected may have been viewed…
Read the news