Search
13 stories found
Apple says developer testing in China starts November 4 and the public gets Apple Intelligence in December with iOS 27.3, with Alibaba's Qwen built into Siri, Writing Tools and Visual Intelligence. The AI Siri shown at WWDC 2026 isn't part of this phase, and neither are Macs or iPads.
Microsoft Threat Intelligence has graded eight North Korean groups on how deeply they use AI. The findings — bulk-generated lures, AI-coded malware, fake recruiters and an open-source agentic attack framework — show where defenders should tighten up now.
Carbon tops the Artificial Analysis Intelligence Index and posts big security benchmark numbers. Google is rolling it out to vetted defenders before anyone else. Here's what's in it and what it costs.
DeepSeek's Harness team published an MIT-licensed research prototype that watches a GitHub repo, takes authorized requests and answers with pull requests. It passed 11,000 stars within days — but DeepSeek itself says it is not production-ready and runs with full user access.
A detailed bug report shows Postman 12.33.4 auto-installed its AI agent plugins into Codex and Claude Code for an existing user, added a startup hook that steers API work through Postman, and ran installer code that pre-approves that hook. Postman says it will make opt-in clearer. If you use Postman and a coding agent, check four files.
Researchers found a malicious instruction file that tricked a coding agent into installing an unauthorized npm package — and reproduced it with a 90% success rate. Five settings that close the hole.
A misconfigured DNS resolver, chained zero-days and a covert channel built from CPU cache timing — OpenAI's own red team found the paths. Here's what happened and why it matters beyond OpenAI.
Floorplan, a free MIT-licensed plugin, scans your repo locally and has your coding agent label every part, producing a browsable map with a security health check. It was one of GitHub's top trending repos on November 2.
The YC-backed startup has opened US preorders for $499 "silent speech" glasses that use radio sensing instead of cameras, and its Show HN post went viral. But there's no published accuracy figure, no final hardware, and shipping hinges on FCC approval.
According to the Financial Times, Nvidia has verbally told cloud providers that use its AI chips to sell at least 51% of new capacity to non-Chinese customers. It targets the overseas rented compute Chinese AI labs rely on, and Southeast Asian clouds say it will be hard to meet.
The MIT-licensed AiSOC ingests security telemetry, runs thousands of detection rules, has LLM agents investigate alerts and keeps a human in charge of any response. It runs on a laptop-class Docker setup with a small local model — here's what it does, what it needs and where it falls short.
Anthropic has put "message threads" into public beta on the Claude Messages API, so long agent loops send only the newest turn instead of the full history. It is pitched as a latency fix, not a cost cut — pricing is unchanged — and it comes with a five-minute expiry and a replay path you have to build.
NOIR, a new MIT-licensed desktop tool, scans an Android phone over USB debugging and links each app's sensitive permissions to the tracking and ad domains hard-coded in its code. It went from zero to about 1,800 GitHub stars in four days. It's a useful map of risk, but its findings show what apps can do, not proof of what they actually sent.
