/
victim_sectors:technology × criticity:low × limpar

Resultados

22 casos · pág. 1/2

techcrunch.com · low

Hugging Face policy chief warns embedded AI evaluators and current model benchmarks lack standardization and reproducibility

At TechCrunch Disrupt, Hugging Face chief policy officer Irene Solaiman said AI model evaluations remain an immature science with limited reproducibility and no meaningful way to compare tests against each other. She argued that open weights are central to reproducing results and that qualifications for effective third-party evaluators ne…

blogs.cisco.com · low

Cisco and Splunk Agentic SOC at .conf26 detects fake-Corepack npm infostealer C2 traffic from a compromised attendee laptop

Cisco and Splunk ran a live Agentic SOC at Splunk .conf26, combining Cisco Cloud Control, Splunk Enterprise Security (ES), Cisco Talos intelligence and Endace continuous packet capture, with Jamf engineers also on the team. The article is largely a product and event retrospective. Its one security incident was a fake-Corepack npm credenti…

zdnet.com · low

Linus Torvalds backs AI-assisted coding and kernel code review, while warning of the maintainer burden from AI-generated patches and bug reports

At Open Source Summit Europe in Prague, Linus Torvalds told Dirk Hohndel (Ericsson Software Technology) that he likes using AI, particularly for beginners and for tasks outside his expertise. He cautioned that it must be used carefully in important work such as the Linux kernel. AI tools now help find and fix kernel bugs, including genuin…

zdnet.com · low

Anthropic grants METR evaluators employee-like access as US regulators tighten AI incident disclosure and FTC issues subpoenas

Anthropic announced that six evaluators from METR, a third-party nonprofit that tests frontier models, will get "employee-like access" to its hardware, office space and internal tools roughly on par with those of its own risk assessment teams. Exclusions are limited to a few categories: customer data, attorney-client privileged informatio…

techcrunch.com · low

Anthropic circulates draft federal AI safety bill allowing court-ordered block of models posing catastrophic risk (50+ deaths or $1B+ damage)

Anthropic has been shopping a draft federal AI safety bill to Congress, according to Politico and reported by TechCrunch. An Anthropic spokesperson confirmed it reflects the company's Advanced AI Framework, which it has promoted to federal and state lawmakers since June. The bill would allow a model's release to be blocked when it poses a…

techcrunch.com · low

Google rolls out Gemini 'Personal Intelligence' in Android Auto, drawing on Gmail, Calendar, YouTube and Maps data

Google announced on 20 October 2026 that it is upgrading the Gemini assistant in vehicles with a Personal Intelligence feature. The feature draws on data from Gmail, Google Calendar, YouTube, Maps, Google Search history and other connected Google services. It launches today in Android Auto and will reach cars with Google Built-in in the c…

wired.com · low

Canada's Bill C-22 would mandate encryption access and metadata retention, prompting Signal and Psiphon to threaten to exit

Canada's proposed C-22 bill, first put forward in 2025 and since partly revised, would require tech companies, including foreign ones, to introduce "technical capabilities" for law enforcement data access. It would also require retention of user metadata. Signal has said it would exit the Canadian market, and Psiphon VPN says it will leav…

wired.com · low

WhatsApp help pages exposed hidden Meta support chatbot instructions, including guidance to avoid referencing regulators

Privacy firm Redact found that around 80 WhatsApp help and FAQ pages exposed hidden text instructions written for a Meta large language model support chatbot. The text, about 100 blocks in total, sat in the page source under a code block headed "HelpContentGalaxyLLMInclude". Some instructions told the chatbot not to recommend contacting a…

safedep.io · low

SafeDep tests Jev and Gryph to flag malicious actions by compromised AI coding agents such as Claude Code

A SafeDep researcher describes an experiment that uses Gryph (an audit trail for AI coding agents) and TypeSafe AI's Jev model to separate a developer's normal agent activity from attacks. The article cites threats to agents such as Claude Code and Codex: the Mini Shai-Hulud worm commits Claude Code hooks into repositories, malicious npm …

haveibeenpwned.com · low

LimeLeads B2B leads database exposed via unsecured Elasticsearch in 2019 breach; 17.8M emails added to Have I Been Pwned

The now-defunct B2B marketing leads service LimeLeads suffered a data breach in August 2019 after an Elasticsearch server was left exposed and unsecured. The incident exposed tens of millions of records of largely corporate contact data, covering 17.8M unique email addresses. Have I Been Pwned added the dataset on 22 Sep 2026. The article…

techcrunch.com · low

Disney to hire majority of Character.AI staff as bankrupt chatbot startup faces litigation and regulatory pressure

Character.AI filed for bankruptcy earlier this week, and Disney has agreed to make employment offers to at least 60 of its employees, the majority of the workforce, at an estimated $60 million in annual compensation. A legal filing spotted by Bloomberg says the "vast majority" of those offered jobs accepted. Disney had previously agreed t…

zdnet.com · low

Linus Torvalds publishes Linux kernel page-cache patches largely written with Anthropic's Claude Code

Linus Torvalds submitted a set of Linux kernel patches that were largely written with Anthropic's Claude Code, according to a ZDNET report. The series targets cache-line contention in the page cache, a known issue since 2024 that slows multi-core systems. Torvalds disclosed in his Git submission that the code, test programs, review and fi…

f5.com · low

F5 Labs 2026 predictions: MCP attack surface, ID-verification breaches, agentic bots, ClickFix and AI overreliance

F5 Labs published its 2026 cybersecurity predictions and scored its 2025 forecasts at 6.5/8, by its own assessment. The 2025 review cites AI-powered botnets, attacks on AI model APIs, AI side-channel attacks on cryptography, APT use of hacktivist personas, and expanded Roskomnadzor powers to isolate or reroute Russian internet traffic fro…