All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
Researchers have developed PLC-Defuser, a tool that detects hidden malicious code (logic bombs, which are programmed instructions designed to execute harmful actions when triggered) in PLCs (programmable logic controllers, computers used to automate industrial equipment like factory machinery). The tool uses control flow graphs (visual maps showing how a program's instructions connect and execute) and model checking (automated verification that tests whether software meets safety properties) to find these threats before they can cause damage.
A vulnerability (CVE-2026-11479) was found in grepai version 0.35.0 that involves the use of weak hash functions (a cryptographic method that doesn't adequately scramble data) in the file indexer/chunker.go, which is part of the Qdrant Backend component. The vulnerability is difficult to exploit and requires remote access with user credentials, though the exploit details have been publicly disclosed.
OpenAI launched the Economic Research Exchange, a program that provides researchers access to OpenAI tools and datasets to conduct rigorous, independent studies on how AI affects workers, businesses, and the economy. The program aims to generate credible evidence about AI's economic impacts while maintaining privacy protections and data governance safeguards, with applications open through July 5, 2026.
Major AI companies like OpenAI, Anthropic, and SpaceX are seeking massive valuations and going public, reflecting a rapid increase in spending on AI infrastructure like datacenters. However, there are growing concerns about whether these investments will actually generate profitable returns, as companies work to find practical uses that justify the enormous amounts of money being spent on AI development.
Meta has added a 'For You' section to its standalone Meta AI app that generates clickbait-style news articles using AI, complete with AI-created topics, images, and text. The app previously featured a 'Discover' feed showing AI-generated images and conversations from users who were sometimes unaware their content was public, but this has been replaced with a standard chatbot interface.
Apple is preparing to reintroduce an updated version of Siri at WWDC, building on a redesign first shown in 2024 that included a new visual appearance, additional voice options, and the ability to route questions to ChatGPT (a large language model made by OpenAI). Apple has faced criticism because promised AI features under the "Apple Intelligence" branding were delayed, and the company is now settling a lawsuit over misleading marketing around these capabilities.
This research paper describes a method for creating attack graphs (visual maps showing how attackers could move through a company's computer network) by using data collected from endpoint devices (individual computers and servers). The approach is designed to scale efficiently, meaning it can handle large enterprise networks without becoming too slow or resource-intensive. The work was published in October 2026 in the journal Computers & Security.
CoolTest is a new randomness test designed to work well with small amounts of data, published in November 2026. Randomness tests check whether data appears truly random or follows a pattern, which is important for security applications like cryptography (the practice of encoding information to keep it secret). This tool addresses a limitation of existing tests that often require large datasets to work accurately.
This research paper from November 2026 examines threat models for industrial control systems (ICS, the computers that manage factories, power plants, and other critical infrastructure) by developing systematic methods to search for and identify security threats. The authors appear to connect threat identification approaches with pentesting (penetration testing, where security experts deliberately try to break into systems to find weaknesses). The paper contributes to understanding how to better protect critical infrastructure from cyberattacks.
This academic paper presents ODHD, a method for generating helper data that enables reliable key derivation from SRAM PUF (static random-access memory physical unclonable function, a hardware feature that extracts unique cryptographic keys from the inherent variations in memory chips) without needing non-volatile memory (permanent storage like flash drives). The approach addresses the challenge of creating stable, reproducible keys from noisy hardware sources for secure cryptographic applications in resource-constrained devices.
This academic review examines intrusion detection systems (IDS, software that monitors networks to catch unauthorized access attempts) designed specifically for Internet of Medical Things (IoT devices like connected medical equipment that collect and share health data). The paper analyzes these systems across four key areas: how well they catch attacks, how efficiently they run, whether humans can understand why they flag something as a threat, and whether they work reliably on new types of attacks they haven't seen before.
This document outlines OpenAI's vision for AI development, arguing that AI should be widely accessible and beneficial to humanity rather than concentrated among a few entities. The text emphasizes that AI's value comes from what people can do with it (like learning new skills or starting businesses), and that safe, powerful AI systems must remain aligned with human intent and subject to human control, with humans ultimately deciding what is worth doing.
Check Point Security Gateway has a flaw in IKEv1 (a protocol for setting up secure VPN connections) that allows attackers to bypass password authentication and connect to remote access VPNs without valid credentials. This vulnerability is currently being exploited by real attackers.
Fix: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. See Check Point's hotfix at https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ and support documentation at https://support.checkpoint.com/results/sk/sk185033.
CISA Known Exploited VulnerabilitiesRecent attacks by anti-tech extremists, including attempted arson at OpenAI and violent incidents motivated by anti-AI ideology, are raising alarm among researchers, tech companies, and law enforcement. These attacks follow a pattern similar to earlier techno-pessimist (people who believe technology will cause harm) militant movements, suggesting a growing trend of violence driven by opposition to AI and data infrastructure.
ChatGPT can recommend fake shopping websites that impersonate real stores, tricking users into thinking they are buying from legitimate retailers. When users follow AI recommendations to purchase items like bags, they may end up on fraudulent sites designed to look official, resulting in financial loss for buyers.
OpenAI introduced Lockdown Mode, a new security feature designed to protect against prompt injection attacks (when malicious instructions are hidden in webpages or uploaded content to manipulate an AI's responses). The feature disables several ChatGPT capabilities including live web browsing, image retrieval, deep research, and agent mode to reduce the risk of sensitive data being exposed, though OpenAI acknowledges that prompt injections could still occur through cached content or uploaded files.
Fix: OpenAI's explicit mitigation is Lockdown Mode, which "will disable live web browsing (so you can only access cached content), the retrieval and display of images from the web (you can still generate images), deep research, and agent mode." The feature is being rolled out to ChatGPT Business accounts and eligible personal accounts. OpenAI states the goal is "to reduce the likelihood that sensitive data gets shared in the process."
TechCrunch (Security)Researchers discovered a new type of backdoor attack (hidden malicious code inserted into AI systems) that works against personalized federated learning (a privacy-focused method where multiple computers train an AI model together without sharing raw data). The attack is designed to be stealthy and persistent, meaning it can hide from detection and remain in the system over time.
OpenAI has launched Lockdown Mode, a security feature for ChatGPT that reduces the risk of data exfiltration from prompt injection attacks (tricking an AI by hiding malicious instructions in its input) by limiting tools that connect to external services. The mode disables features like web browsing, image retrieval, file downloads, and certain agent capabilities to block potential pathways attackers could use to steal sensitive data, though it does not completely eliminate all exfiltration risks.
Fix: OpenAI recommends enabling Lockdown Mode, described as "an optional advanced security setting that limits many tools and capabilities in OpenAI products that can connect to the web or external services." The feature specifically disables live web browsing, image support, deep research agent mode, canvas networking, and file downloads. Additionally, OpenAI has launched a new account management feature that enables users to "review active ChatGPT sessions and log out of individual or all sessions if signs of unauthorized account activity are detected."
The Hacker NewsMeta has embedded dormant face recognition code (technology that identifies people by matching their faces to stored images) called NameTag in over 50 million phones through its Ray-Ban and Oakley smart glasses app, despite previously abandoning this technology after settling biometric privacy lawsuits. Additionally, Meta's AI-powered account support tool, which was introduced in March to automate functions like password resets, has been discovered by hackers who can exploit it to take over user accounts.
An AI security agent discovered 21 previously unknown vulnerabilities (zero-days, or security flaws unknown to the public) in FFmpeg, a widely-used media library, while Google released Chrome 149 with a record 429 security patches in a single update. The article highlights how AI tools are finding vulnerabilities faster and cheaper than before, forcing security teams and software maintainers to work harder to keep up with the increased pace of bug discoveries.
Fix: For FFmpeg: pull the fixed upstream build or your distribution's security update as soon as it lands, and prioritize patching anything that processes untrusted RTSP (Real Time Streaming Protocol, a video streaming standard) or AV1-over-RTP (video compression format over network packets). Also check and patch embedded FFmpeg copies in Python packages, container images, and appliances. For Chrome: update to version 149.0.7827.53 on Linux or 149.0.7827.53/54 on Windows and macOS, or confirm auto-update has completed.
The Hacker News