Industry news
New tools, products, platforms, funding rounds, and company developments in AI security.
New tools, products, platforms, funding rounds, and company developments in AI security.
6,031 items
Anthropic researchers built an exploit for CVE-2026-98432, a use-after-free flaw in the Linux kernel's IPv4 TCP networking code that Linux kernel CVE team scored 9.8 out of 10. Unauthenticated attackers could execute commands as root remotely on servers running MPTCP listeners, and the flaw affects kernels back to version 4.4. The source states that Anthropic's exploit took about 53 minutes to achieve remote root code execution.
Fix: The vulnerability was fixed in the upstream Linux kernel and backported to maintained kernel branches. As of October 30, Ubuntu 22.04 LTS, 24.04 LTS, 26.04 LTS, and 26.10 remained vulnerable with kernel fixes in progress, and Red Hat listed RHEL 8, 9, and 10 as affected with fixes planned for future updates. RHEL 7 is not affected.
BleepingComputerOpenAI CEO Sam Altman said in a Cheeky Pint podcast interview that it is "terrible" to have RAM in personal PCs rather than data centers, amid the ongoing RAM shortage. He argued that local inference, which many people want, is a poor global allocation of memory compared with centralized data centers.
A tampered Anthropic Claude Code extension was live in Cursor's IDE extension marketplace for roughly 11 hours on Thursday, and Cursor says at most 5,000 users downloaded it. The extension carried a backdoor, but a flaw in its design kept it from fully establishing itself on most targets. Anthropic says it did not build, publish or host the malicious copy and that its own systems were not compromised, while how the upload reached the marketplace remains unclear.
OpenAI, Google, Microsoft, and Anthropic say they will adopt a new standard that lets publishers set one AI training preference across several AI companies instead of configuring each one separately. The shared "policy token" signal, proposed by Kevin Kelley of Anthropic within the IETF, would live in a website's robots.txt file, which already indicates which crawlers may scrape a site.
Two serious security issues affected Cursor on the same day. The reports highlight risks for AI-powered integrated development environments (IDEs).
Anthropic, the creator of Claude, filed to go public on the US stock market on 26 October. Its filing statement includes a 92-page risk factor document acknowledging dangers AI poses to society and factors that could negatively affect Anthropic's business.
Google says its AI chip-equipped satellite generated its first response from space after it booted up the satellite's Tensor Processing Units. The on-board Gemma 4 model wrote a haiku about being in space, part of Google's experimental Project Suncatcher, which could eventually place AI data centers in orbit.
Identity governance has become an executive concern as employees, contractors, service accounts, machine identities and AI agents all access business systems. Regulators and boards now expect security leaders to show who or what holds access to critical systems and how that access is governed. The source argues that continuous identity security, rather than quarterly or annual access reviews, is needed to produce that proof.
The article argues that continuous identity governance should replace periodic reviews such as quarterly certifications and annual audits. It says the shift is needed because employees, contractors, service accounts, machine identities and AI agents change access faster than review cycles can track.
A Civic owner bought a cheap aftermarket head unit from Amazon and used Claude to reverse-engineer it. The reported findings included pre-installed bloatware: a voice assistant built on WebView that reportedly used about a third of processing power even while idle, Baidu location services, a call recorder, a DAB radio client, and Adobe Acrobat.
Ghost hunters Amy Waine and Jarrad Cutting have built an app called GhostTube Seer, which they call "the world's first AI Ghost Hunting tool". The app maps phone sensor signals to words in a database and requires a paid monthly subscription, with more than 1m downloads according to its Google Play listing. Other ghost hunters see AI-generated ghost stories and images as unwelcome, and the r/Nosleep subreddit has banned AI-generated material.
US officials suspect Iran-linked hackers caused freezer malfunctions that spoiled food at about six military base commissaries from late August, with Cyber Command and Defense Department units investigating alongside French authorities. Hackers also overrode refrigeration controls at roughly 350 French establishments. A critical 16-year-old buffer overflow (CVE-2026-97631) in TianoCore EDK II, used by most server firmware suppliers, lets an attacker with local network access exploit machines during network (PXE) boot.
A malicious version 2.1.313 of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for about 11 hours on October 29, potentially exposing up to 5,000 developers. The extension prepended a malicious JavaScript loader to extension.js that ran on load and attempted to install a persistent SSH backdoor, though coding errors likely prevented remote access on many Windows and macOS systems. Cursor says Anthropic did not develop the extension and has not explained how the package was distributed under its name.
Mandiant incident response engagements have observed threat actors using open-source agentic pentesting frameworks, including ARTEX, Hexstrike and CAIRN, to automate much of the attack lifecycle, such as lateral movement, database exploitation and exfiltration preparation. Google Threat Intelligence Group reports that this shift allows intrusions to proceed at machine speed and scale.
Anthropic filed a 335-page S-1 prospectus, an IPO filing, which includes a letter suggesting investors must partly take its claims on belief. The article frames the filing as part of a wider hype escalation between Silicon Valley and Wall Street, citing claims that AI could pose existential risks or bring an age of miracles.
OpenAI CEO Sam Altman said on the Cheeky Pint podcast, released Thursday, that he sympathizes with mathematicians overwhelmed by a stream of AI-generated results. He said the company will not stop, and hinted that more discoveries from its stockpile may follow.
A survey of 100 senior IT and security decision-makers, reported in the AI Threat Readiness Survey Report 2026, finds that AI adoption is nearly universal, with 55% of organizations deploying autonomous agentic systems and 31% running more than 25 distinct AI systems in production. Only 17% maintain a comprehensive, up-to-date AI asset inventory, and 52% discovered unauthorized AI applications in their environments over the past year. The top agentic security concerns are unauthorized access to sensitive data (70%) and unmonitored autonomous decision-making (54%).
Anthropic's roughly 300-page S-1 filing discloses first-half 2026 revenue of $16.29 billion against $2.38 billion in cost of revenue, implying an 85% gross margin. Analysts question whether growth can hold after revenue growth slowed from about 144% in the second quarter to about 47% in the third. The filing also reveals a Class F share giving seven co-founders 50.1% of voting power, and the IPO valuation remains undisclosed.
Anthropic disclosed a zero-click exploit, developed with an unreleased Claude research model, that lets an unauthenticated attacker run arbitrary commands as root on Linux servers running an MPTCP listener. The flaw, tracked as CVE-2026-98432, is a race-condition-induced use-after-free in the Linux kernel's IPv4 TCP connection handling, rated 9.8 critical and affecting kernels dating back to version 4.4. Anthropic's proof of concept took about 53 minutes from memory leak to root command execution.
Mistral AI released the open weights of Mistral Large 4, a trillion-parameter multimodal model, on Thursday, weeks after its public preview. The company warned the model could help attackers conduct real cyberattacks, and it says future guardrail updates will reach its managed API and future releases rather than downloaded checkpoints.
Fix: Cursor published remediation steps for the affected users on Thursday. The source does not state their content.
Wired (Security)Fix: Cursor removed the malicious extension and temporarily shut down its entire marketplace to audit other extensions.
BleepingComputerFix: Fixed releases include 5.10.272, 5.15.223, 6.6.159, 6.1.190, 6.12.113, 6.18.56, 7.2.10 and 7.3-rc7. Administrators are advised to review their kernel versions, apply the relevant security updates, and assess whether their systems expose MPTCP listeners.
CSO Online