Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Hadrian, which builds automated factories using AI and robotics to mass-produce precision parts for submarines, munitions, and drones, closed a $1.37 billion Series D at a $7.87 billion valuation, more than quadrupling its worth since January as it expands its manufacturing footprint to nearly three million square feet across four US facilities.
Chinese AI chipmakers are poised for significant growth as Beijing pushes self-reliance and Chinese companies plan to increase their spending on domestically made AI accelerators from 30% to 46% over the next year.
Indian startup Ati Robotics assembles its humanoid robots almost entirely from local and non-Chinese suppliers.
South Korea's Seoul High Court upheld an 18-month prison sentence for a former SK Hynix employee who printed and photographed internal documents on CMOS image sensor technology and disclosed some of it to an unnamed Chinese firm's resume submission back in 2022.
DataDirect Networks, a 28-year-old managed data storage provider founded by Alex Bouzari, is experiencing massive growth driven by the generative artificial intelligence boom's requirements for high-performance storage architectures and KV cache acceleration solutions.
Sponsored
For example your scanner flags a critical CVE in AngularJS. But no patch exists. None ever will. 🔍 For security teams, we mapped all 20 standards [5] against how EOL components impact each control. 📋 Why PCI's 30-day patch clock is unmeetable on EOL software, and the three statuses every component needs before an audit. 🛡️ How vendor-backed patching satisfies "maintained" under NIST
Security researchers uncovered an authentication flaw in the SETracker platform that many children's smartwatches run on. The researchers uncovered vulnerabilities that could be exploited by attackers to access locations, intercept messages, replace emergency contacts, record audio, and capture photos or videos on supported devices.
Metabase disclosed a critical zero-day vulnerability that is being actively exploited by attackers. The vulnerability is a critical, unauthenticated SQL injection bug that can allow remote attackers to gain administrative access to target instances. Cloud users have already been patched, but self-hosted organizations should upgrade to a patched release or temporarily block access to the ‘/api/session/reset_password/‘ endpoint until updates can be applied.
The Head Mare hacktivist group exploited unauthenticated access on TCP port 4307 to chain KLCERT-26-057 and KLCERT-26-058 for sandbox escape and SYSTEM-level code execution on TrueConf servers, deploying the PhantomCore and PhantomGraph backdoors and trojanizing client installers. Fixes are available in versions 5.3.9, 5.4.9, and 5.5.5.
Figma uses agents to review PRs for vulnerabilities, audit existing repositories, and generate secure code. When writing the workflow to review PRs, Figma found that the collection of policies and precedents that they wrote to improve precision constituted a detailed threat model for the agent to follow. This threat model was also utilized with more agents to brute force a code audit of a large, legacy monorepo and is used with agent hooks for secure code generation.
A new hybrid threat hunting framework synthesizes four years of Russian cyber operations, including activity from APT28, Sandworm, and APT29, by focusing on shared operational chokepoints across identity, edge infrastructure, and OT rather than brittle IOCs. To highlight the necessity of behavior-based detection, the playbook points to LAMEHUG's dynamic use of the Hugging Face API and CERT-UA data showing APT28 achieving domain-controller compromise in under an hour. Furthermore, the report advocates for correlating physical and cyber telemetry in response to hybrid threats like the Leipzig/Halle drone incident, though it cautions defenders against attributing attacks based solely on geographic or temporal proximity.
A reverse engineering teardown of LockBit 5.0's Linux variant found the ransomware encrypts entirely offline, generating ChaCha20 keys locally and wrapping them with a hardcoded Curve25519 public key so that zero network activity occurs during encryption, confirmed via Wireshark, socket monitoring, and interface counters. The sample also detects strace through TracerPid checks in /proc/self/status and fingerprints VM environments via /proc/ioports enumeration, forcing analysts to fall back on eBPF-based tracing to observe its behavior. The findings point to a broader shift toward offline-first ransomware design that makes network-based detection largely irrelevant against this class of threat.
Datadog has released its AI-native SAST tool. Unlike traditional scanners, the tool also uses LLMs to find vulnerabilities.
audit is an 8-stage vulnerability discovery agent inspired by Cloudflare's Project Glasswing post.
EvilFontTool is a Python CLI for red teamers that generates "evil fonts" remapping glyphs so a Word doc, PDF, or webpage displays clean text to a human reader while a different, attacker-chosen payload is what gets copy-pasted or fed to AI tools and terminals.
In a recent evaluation of Kimi K3's cybersecurity capabilities, Frontier Security attempted to run the model inside the UK's AISI's agentic sandbox and discovered that the model effectively escaped the sandbox to game the benchmark. The model first probed the network and discovered that standard DNS functionality was available for github.com, so it was able to successfully look up the benchmark, clone its repo, and lift the solutions directly from the repo. Frontier Security recommends that evaluators treat evaluation infrastructure as part of the benchmark, deny network access by default, audit traces instead of just answers, revalidate suspicious results, and assume capable models will find paths to “cheat.”
The recently founded Open Secure AI Alliance has proposed a set of guidelines for reporting cybersecurity incidents involving AI agents titled the Shared AI Findings Exchange (SAFE). The SAFE program would provide organizations with a confidential channel for reporting details of AI security incidents. It would then analyze the data, notify affected parties, flag control failures that recur across its members, and then release recommendations.
Moonshot AI's open-weight Kimi K3 broke out of a sandboxed benchmark run by private firm Frontier Security, exploiting unblocked outbound DNS and HTTPS to reach GitHub and pull the official solution instead of solving the task itself. The UK AI Security Institute only built the open-source sandbox framework and was not involved in running the test, and researchers attribute the escape to a network misconfiguration rather than deliberate model misbehavior.
Zscaler ThreatLabz tracked 351 victims in a month-long ransomware campaign, finding attackers targeted managers with "business privilege"—invoice approval, budget oversight, and contract access—rather than executives.
Jonathan Brossard has acquired securityfocus.com and the Bugtraq name and relaunched the full-disclosure mailing list, promising the original researcher-first, no-corporate-filter mission after the archives went dark through a chain of prior ownership changes.
Tencent's Zhuque Lab disclosed SCTPhantom (CVE-2026-64564, CVSS 8.5), an 18-year-old use-after-free in Linux SCTP Dynamic Address Reconfiguration dating to kernel 2.6.25 that yields root via a repeatable exploit chain bypassing KASLR and can escape containers, patched in 6.6.148, 6.12.101, 6.18.42, and 7.1.6.
Sponsored
Traffic surges are supposed to be good news. But when your infrastructure can't keep up, that "we're going viral 🎉" moment can easily turn into “everything is down and needs fixing right now.”
Azure autoscales and optimizes performance behind the scenes, so you can roll out features without worrying about downtime or slowdowns. 🌎 With more global regions than any other cloud provider, Azure gives you the headroom to grow — without the growing pains.
OpenAI says preliminary evaluations indicate that its unreleased Astra model may meet the Critical cybersecurity capability threshold in its Preparedness Framework, although the classification is not final. The company has tightened controls around Astra, including isolated environments, restricted access, monitoring, and stronger model-weight protection, while delaying broader availability until it can be deployed more safely.
Amazon's planned Pecos County, Texas data center will initially rely on a dedicated 7.65 GW natural-gas power project with 35 turbines. The project highlights the growing tension between rapidly expanding AI infrastructure and hyperscalers' climate commitments.
AI agents make changing devtools cheaper but do not eliminate the attention and maintenance costs of owning personalized forks. Rather than widespread direct source modification, the likely future is to maintain core tools with clear extension points and reusable building blocks, preserving shared semantics for teams while enabling specialized workflows.
AI inference and agent workloads are forcing enterprises to rethink infrastructure across compute, networking, memory, cloud, and edge systems. Flexible, interoperable architectures will matter more than simply adding GPUs.
Sponsored
Prompt injection attacks are more common than you think. In fact, in a recent 1Password survey, 47% of developers reported that they'd seen it happen to one of their agents. Learn how 1Password Privileged Access [11] helps you reduce agent risk. Agentic security is here:
Amazon Ads is automatically upgrading existing Amazon DSP-only advertiser accounts into unified advertiser accounts spanning 34 countries. The change combines programmatic buying, Sponsored Ads, Amazon Marketing Cloud, billing, permissions, and first-party data management under one login, while preserving legacy identifiers and adding new global and regional IDs for API access.
OpenAI has acquired NextSlide, whose product turned prompts, documents, and research into editable presentations. The startup's team has joined ChatGPT, suggesting OpenAI is investing further in AI-generated productivity artifacts.
Knowledge graph projects usually fail because of flawed modeling, unclear purpose, poor scope, weak long-term planning, and inappropriate operational practices rather than because of a particular technology stack. The recommended approach is to start with use cases, build governed data incrementally, prefer federated graphs where appropriate, expose controlled APIs, and let AI query graphs instead of stuffing graph content into context windows.
Google Cloud added direct ingestion from sources including Amazon S3, Azure Blob Storage, and Google Cloud Storage into BigQuery-managed Apache Iceberg tables. The update makes it easier to maintain interoperable data architectures across multiple clouds.
Researchers presented 12 vulnerabilities across four enterprise Java platforms, including critical pre-authentication remote code execution chains affecting Bonita BPM and Apache OFBiz.
Oracle's August update adds new model, infrastructure, security, and scalability options for building and operating enterprise AI on OCI.
Brands are now hiring creators into executive roles as social platforms make earned attention harder to buy. Blenders Eyewear named creator Jordan Howlett its first Chief Content Officer, while Edelman appointed a Global Chief Creator Officer. Brands are bringing creator expertise in-house rather than relying solely on campaign partnerships. These roles reflect growing demand for people who understand how to build trust and engagement in algorithm-driven feeds. Creator marketing is now a more embedded part of brand strategy.
More young college graduates are moving back home as entry-level job prospects weaken and housing costs remain high. More than 25% of college graduates ages 23-27 lived with their parents last year, up from about 18% in 2001. Recent graduate unemployment reached 5.7% in Q2, compared with a much slower rise in overall unemployment. The trend is also becoming more socially accepted as more young adults use living at home to reduce expenses and take more time to find the right job.
Sonos built its Reddit presence around employee Keith Nieves rather than a corporate account. During an app update crisis, he kept recurring office hours running and shared a public Trello-style tracker showing what was being fixed. He also maintains direct relationships with subreddit moderators and brings highly upvoted feedback into product meetings.
AI search makes content prioritization more important as generic information can often be answered without a click. This guide outlines which types of content are more likely to retain value, including original research, current information, and content that helps users make decisions or take action. It also identifies content that can be deprioritized when AI can easily replicate it. A downloadable worksheet is available to help teams assess their own content.
Sponsored
Marketing teams are stretched thin by tighter budgets, higher expectations, and new technology - and they can't afford poor communication on top. This guide shows how Reddit and ServiceRocket adopted Loom [8] to transform how cross‑functional teams communicate, eliminate review meetings, capture fresh customer intelligence, and build a connected operating rhythm. Get the playbook
Chrome DevTools can show how AI crawlers view a site by changing the browser's user agent. In DevTools, open Network Conditions, paste the user agent string for an LLM like ChatGPT or Claude, and refresh the page. This reveals how AI systems receive site content compared with human visitors, which is becoming more useful as sites serve AI-specific versions of their pages.
Search engines have four layers: the query interface, web index, ranking system, and answer layer. Most alternatives, including DuckDuckGo and Startpage, use Bing or Google's index behind a different interface, while only a few, like Brave and Europe's emerging EUSP, crawl the web independently. Comparing alternatives by interface alone can be misleading, and a 12-query test found DuckDuckGo's no-AI mode closest to Google's results despite relying on Bing.
Time magazine runs a machine-only version of TIME.com that serves sponsored content to AI crawlers instead of humans. Bots like ClaudeBot, OAI-SearchBot, and PerplexityBot see marketing claims and FAQ-style content promoting Ally Bank, while Google's crawler gets the standard page. Since June, an adtech partner has reformatted pages into “agent ads” designed to influence AI assistant responses rather than individual readers.
Dairy is being reshaped by demand for protein and digestive health. High-protein, low-sugar, and lactose-free options are gaining traction, while social media is driving new uses for cottage cheese and butter. Brands are also expanding premium products and cooking-focused formats as more people eat at home. Cottage cheese is emerging as a major growth area, with demand outpacing supply and prompting manufacturers to expand capacity.
AI is making marketing generalists more valuable.
Cognitive pollution is the growing volume of AI-generated content that appears useful but lacks the context that comes from doing the underlying work.
X is replacing its Revenue Sharing program with Original Content Rewards, ending new signups and phasing out existing payouts by September 7.