News that matters, without the noise.

Research on Models Engaging in Genie-Like Behavior

New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training.” Abstract: We

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

A flaw in cPanel’s CalDAV and CardDAV service lets anyone with a cPanel hosting account run code as root and

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good.

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

A use-after-free in the Linux kernel’s AF_UNIX socket subsystem can be used to escape a container and gain

Are AI labs ignoring cybersecurity experts?

AI turns into SI

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature

USN-8733-2: Gzip vulnerabilities

USN-8733-1 fixed vulnerabilities in Gzip. This update provides the corresponding fix for Gzip on Ubuntu 14.04 LTS, Ubuntu

RHSA-2026:70562: Important: qt5-qtbase security update

An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat