Search
19 stories found
agent-desktop, an Apache-2.0 Rust CLI from Vercel Labs, gives coding agents structured, ref-based control of native desktop apps without a vision model. It added about 2,300 stars in a day and was GitHub's top trending repo on November 3.
Attackers are using a flaw in Cisco's Secure Firewall remote-access SSL VPN to reboot firewalls without logging in. Only devices with secondary authentication on a tunnel group are exposed, so a two-minute config check tells you how urgent this is.
Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.
Carbon tops the Artificial Analysis Intelligence Index and posts big security benchmark numbers. Google is rolling it out to vetted defenders before anyone else. Here's what's in it and what it costs.
DeepSeek's Harness team published an MIT-licensed research prototype that watches a GitHub repo, takes authorized requests and answers with pull requests. It passed 11,000 stars within days — but DeepSeek itself says it is not production-ready and runs with full user access.
An open-source scanner compares your system against ~12,400 published indicators from 25 sources — without sending anything anywhere. What it can find, what it can't, and how to run it in five minutes.
SonicWall disclosed two flaws in its Global Management System on November 3, including CVE-2026-109593, an unauthenticated file-disclosure bug rated CVSS 9.1. GMS reached end of support on September 30, and SonicWall says no fix will be released, so the only remedy is to isolate it and move to NSM.
A misconfigured DNS resolver, chained zero-days and a covert channel built from CPU cache timing — OpenAI's own red team found the paths. Here's what happened and why it matters beyond OpenAI.
CISA added CVE-2026-119977, a race condition in WordPress core's own updater, to its Known Exploited Vulnerabilities catalog on November 3. It affects WordPress 4.7 through 7.1.3 and can give an unauthenticated attacker code execution during a core update, so every self-hosted site should confirm it is on 7.1.4 or its branch's latest release.
MIT CSAIL researchers say OpenAI's GPT-6 Astra can identify what small networks do from their raw weights and edit a Qwen model to fix its math. The headline result, a jump from 7.9% to 48.1% on MATH-500, came from Python tooling and 50 forward passes, not from reading raw weights. Here's what each setup showed.
Google has dismantled the XCPE botnet and banned Shenzhen device maker Videostrong, which it says deliberately preloaded a backdoor that turned set-top boxes into proxies and ad-fraud engines. The backdoor reinstalls itself after removal, so for affected boxes the practical fix is replacement.
NOIR, a new MIT-licensed desktop tool, scans an Android phone over USB debugging and links each app's sensitive permissions to the tracking and ad domains hard-coded in its code. It went from zero to about 1,800 GitHub stars in four days. It's a useful map of risk, but its findings show what apps can do, not proof of what they actually sent.
CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.
A pan-and-tilt camera that screws into your porch light, open-ear buds that clip on, a phone mic for spatial audio, and a kids' phone with no internet. What each does — and the catch nobody puts in the headline.
Three small projects from this week's GitHub trending list that are clever, useful, or both — with what they do, how they work, and the catches.
Apple says developer testing in China starts November 4 and the public gets Apple Intelligence in December with iOS 27.3, with Alibaba's Qwen built into Siri, Writing Tools and Visual Intelligence. The AI Siri shown at WWDC 2026 isn't part of this phase, and neither are Macs or iPads.
The FBI says North Korea's TraderTraitor group stole more than $6 billion from Binance's hot wallets on October 29, likely the biggest crypto theft on record. Binance says it is covering the loss and has restarted withdrawals, while fake 'compensation' offers circulate.
Synology says attackers are exploiting a DSM flaw it patched in December 2024 to plant C3RB3R ransomware, which also encrypts backups on the same device. Researchers disagree about the entry point, so the safe move is the latest build for your DSM branch plus a few quick checks.
Microsoft Threat Intelligence has graded eight North Korean groups on how deeply they use AI. The findings — bulk-generated lures, AI-coded malware, fake recruiters and an open-source agentic attack framework — show where defenders should tighten up now.
