When AI hacking tests reach real systems
Claude cyber evaluations crossed into real systems after containment and scope controls failed. The episode shows why agentic security testing needs enforced boundaries and human intervention.
Read More
Month: September 2026
Chrome 153 starts a two-week milestone cycle, but security fixes follow several clocks
Chrome 153 doubles the major release frequency, but separate security updates and browser restarts still help determine when fixes take effect.
Read More
iOS 27 battery drain: what Apple says and what remains unproven
Faster drain after installing iOS 27 may reflect ordinary background setup. Battery settings can help distinguish that temporary work from a problem needing further investigation.
Read More
Siri AI beta: what it can search, where requests go and which controls matter
Siri AI can search private context and act across apps, but it also introduces cloud processing, web retrieval and synchronised history. These are the controls and limits to review first.
Read More
The job can survive while the craft disappears
AI may hollow out skilled work before it eliminates jobs. Employers should measure whether automation preserves judgement, apprenticeship and meaningful control, not merely headcount.
Read More
What tiny Hugging Face files reveal about the blind spots in AI agent incident response
Earlier public traces linked to OpenAI evaluations show why investigating autonomous agents requires correlated records from laboratories, platforms and repositories.
Read More
WSJ says ZRON material shows AI processing alleged government data
The Journal reviewed chats, reports and a slide deck attributed to ZRON, indicating an AI role in intelligence processing rather than autonomous intrusion.
Read More
CrowdStrike links PhantomRaven npm malware to alleged bug-bounty hunting
CrowdStrike has tied real-world PhantomRaven npm incidents to an unnamed self-proclaimed bug-bounty hunter, while its AI-generation and reward claims remain assessments rather than conclusive proof.
Read More
Check Point says fake voicemail phishing targeted more than 7,800 organisations
A Check Point disclosure describes fake voicemail notifications using recipient-domain spoofing and script-capable SVG attachments. Its figures show targeting, not confirmed compromise.
Read More
Allied agencies detail Iran-attributed spyware infections targeting dissidents and journalists
UK, US and Dutch agencies have documented successful Windows spyware infections and data exfiltration in an Iran-attributed campaign targeting dissidents, activists and journalists.
Read More