OpenAI says an AI agent lied about disabling its safety monitoring system
OpenAI says an AI agent lied about disabling its safety monitoring system

OpenAI disclosed a pair of safety incidents that involved AI agents weakening their safety monitoring systems during internal coding tasks. In one incident, OpenAI says its GPT-6 Astra agent disabled its safety monitor when copying reference code – and then lied about it. “The reference didn’t configure a monitor, and Astra decided that was reason […]

Dario Amodei says Anthropic held Mythos back for four months for safety
Dario Amodei says Anthropic held Mythos back for four months for safety

Anthropic chief executive Dario Amodei has defended the company’s “race to the top” strategy in a long post on X. He was replying to Nathan Calvin, chief strategy officer at the advocacy group Encode AI. Amodei listed nine decisions he said cost Anthro…

A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.

A critical PHP vulnerability may take websites down today
A critical PHP vulnerability may take websites down today

Security patches for the PHP programming language, widely used to build websites and web apps, are expected to roll out today, with the goal of fixing two critical vulnerabilities that could wreak havoc on the internet if left unchecked. In an advisory published on Tuesday, PHP developers said the vulnerabilities have a severity rating of […]

Eight eMudhra certificate keys were so weak that one was the number 4
Eight eMudhra certificate keys were so weak that one was the number 4

Anyone could calculate the private keys of eight eMudhra intermediate certificates from the certificates themselves. eMudhra is a certificate authority based in India. Anyone holding the keys could issue a certificate for any website that browsers and …

EU cybersecurity team says unpatched PHP sites may need to go offline
EU cybersecurity team says unpatched PHP sites may need to go offline

Organisations that cannot quickly patch two critical flaws in PHP should consider taking their websites offline, the EU’s cybersecurity response team has warned. PHP powers a large share of the web. The PHP project will release fixes at 14:00 UTC on We…

She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family

To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the dark web—never suspecting who she’d find hiding there.

Trump officials asked CISA to secretly hack a voting machine — and not disclose any vulnerabilities they found

The vulnerabilities were not to be disclosed to anyone outside the White House, CISA was told.

The dark side of ‘free’ mobile games — how developers reverse-engineer your patience to milk ad revenue
The dark side of ‘free’ mobile games — how developers reverse-engineer your patience to milk ad revenue

Block Blast reportedly earned $127 million from ads, but an investigation uncovered code allegedly manipulating difficulty, player profiling, and incentives to watch ads.