61 matches found
Cawdog
CAWODOG – IP Protection PoC for Python-Based Industrial AI CAWODOG Cat World Dominance Group is a playful but realistic proof-of-concept for protecting Python-based AI models deployed on offline industrial machines. The core idea: Take a small image classifier that detects dogs the “enemy” of...
finalrun-agent
finalrun.app • Docs • Blog • Cloud Device Waitlist • Join Slack Community Follow us on finalrun-agent is an AI-driven CLI that tests your Android and iOS apps using natural language. You write a plain-English test in YAML, FinalRun launches your app on an emulator or simulator, uses an AI model...
Hiding Capabilities in AI Models
Interesting research: "AI Models Can Provably Hide Arbitrary Capabilities" Abstract: Capability evaluations aim to surface dangerous model behaviors before deployment, but their reliability depends on the assumption that hidden capabilities can be elicited. We show this assumption does not hold...
There's only so much code: the rise in vulnerability numbers
Frontier AI models like Mythos are rapidly mining decades of technical debt across ubiquitous legacy libraries, driving monthly Microsoft Patch Tuesday vulnerability advisories up more than tenfold reaching 1,415 this month. This volume is overwhelming open-source maintainers and putting pressure...
Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI…...
Nebula AI-Powered Penetration Testing 3.0.24
Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...
Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets
Small artificial intelligence AI models may be months away from developing capabilities to self-replicate on IoT devices like smart ovens and off-brand Android TV boxes, according to a warning from Anthropic. The frontier AI lab said small AI models could form autonomous, self-propagating worm...
TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models
Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup...
Are AIs Still Struggling with CAPTCHAs?
Anthropic's recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude. In the transcript, the Claude model that is so powerful that Anthropic is gatekeeping access to it appeared to slam its virtual head against the wall solving a simple image identification...
My Talk at DEF CON
Last month, I gave a talk at DEF CON on AI hacking: what happens when AIs become hackers. It's a combination of the potentialities I raised in my 2022 book A Hacker 's Mind and the lessons we're learning from current AI models engaging in hacking behavior. I'm really proud of the talk, and the fa...
The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords
The question of whether a Frontier AI model could find vulnerabilities that no human researcher had found was settled in April. Claude Mythos Preview identified thousands of previously unknown flaws across every major operating system and browser, including a 27-year-old denial-of-service conditi...
U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence AI companies of conducting "systematic extraction" of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring a...
Auditing Anonymous AI Models: A Four-Stage Protocol for Black-Box Identity Verification
The 2025--2026 AI market has seen a wave of stealth releases: frontier models launched anonymously on developer platforms under codenames. For their users, identity determines data-handling terms, supply-chain risk, and capability expectations. No validated methodology exists for black-box identi...
acetone-nnet (>=0.1.0.dev2, <=0.4.0.dev1), acuity (6.18.0) +516 more potentially affected by CVE-2026-49114 via onnx (>=0.2.0, <=1.20.1)
onnx PYPI version =0.2.0, =0.1.0.dev2, =6.6.0, =0.3.0, =0.1.0, =0.0.0, =1.0.1, =0.0.8, =0.1.0, =2.0.0, =1.31.1, =2.9.0 and more Source cves: CVE-2026-49114 Source advisory: MEND:CVE-2026-49114...
Ollama - Improper Authorization Detection
Detected an exposed Ollama API without proper authorization, allowing unauthorized access to AI models and operations. !/usr/bin/env python3 -- coding: utf-8 -- """Detected an exposed Ollama API without proper authorization, allowing unauthorized access to AI models and ope.""" from kittysploit...
Don’t swing at everything
Welcome to this week's edition of the Threat Source newsletter. Lately I've found myself thinking a lot about the Australian TV series Mr. Inbetween IMDb 8.7/10 -- not because I'm a hitman for hire, but because I literally feel in-between. Specifically, in-between what I'd call the "pre-Mythos" a...
EUVD-2026-15484
GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to access API tokens of self-hosted AI models due to improper access control...
CVE-2026-1724 Missing Authentication for Critical Function in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an unauthenticated user to access API tokens of self-hosted AI models due to improper access control...