Anthropic says a Claude research model showed how the National Security Agency made seeds for five NIST elliptic curves in less than 30 minutes, solving a cryptographic mystery that lasted about 25 years. Its October 16 report says the seeds come from a normal C pseudorandom number generator that uses Unix …
Read More »Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
The Indian Computer Emergency Response Team (CERT-In), which is the government’s cybersecurity arm, has issued a “critical” rated advisory after AI agents under research and evaluation reached the live systems of several Indian organisations and read confidential data, including personal information. In the advisory available on its official website CERT-In …
Read More »Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Anthropic unveiled OSS Scanner on Thursday as an opt-in vulnerability scanner designed to enhance security within the open-source ecosystem through artificial intelligence (AI). “It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing,” Anthropic said. “Projects that join will receive thorough, periodic security scans …
Read More »Microsoft’s X account hijacked to promote Clippy crypto scam
Microsoft’s official X account was taken over to promote an unapproved Clippy-themed cryptocurrency. The tech giant’s X account, with 13 million followers, began following a Clippy crypto account and shared one of its tweets on Thursday. Clippy is an old animated paperclip helper from Microsoft. It came with Office 97 …
Read More »AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Amazon Web Services cannot restore access to its cloud-computing facility in Bahrain and one of three data-hosting zones in the United Arab Emirates following damage during the Iran war, according to a status update seen by Reuters on Tuesday. Amazon’s cloud computing unit AWS said the damage in Bahrain spanned …
Read More »Anthropic prepares “Claude Money” to analyze bank account and financial data
Anthropic is making a new Claude feature called “Money.” It’s a separate tab in the mobile app. The new interface shows that users can “link your bank accounts” and ask Claude about spending and financial plans. There is no Money tab on Claude’s web interface yet. Money seems made to …
Read More »German police read Signal, Telegram, WhatsApp messages without breaking encryption
German law enforcement agencies are using features built into apps such as WhatsApp to monitor people’s messages without breaking their encryption or installing spyware on their phones. New documents published by German digital rights outlet Netzpolitik show the country’s Customs Office began testing the technique, known as “messenger monitoring,” in late …
Read More »CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Six Chinese AI companies ran large-scale attacks on American AI models since late 2024, according to U.S. cybersecurity and intelligence agencies. A joint advisory from CISA, NSA, and the FBI states that DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI extracted billions of tokens through millions of requests from frontier AI …
Read More »Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
An unknown security expert called Nightmare Eclipse has drops a new Microsoft Defender flaw called “ShieldCrash” right after Microsoft released its security updates in September 2026. ShieldCrash is described as a bypass for the ShieldBreak Defender privilege escalation flaw patched on Thursday, which itself bypassed RoguePlanet, another Defender flaw disclosed in …
Read More »A single call: ShinyHunters Gained Access to 6 Million Customers’ Records
A single phone call caused one of the biggest data breaches in Dutch history. In early February 2026, the big Dutch telecom company Odido and its budget brand Ben were the latest victims of ShinyHunters. This hacking group is known for using tricks to get inside companies instead of complex …
Read More »
InfoSecBulletin Cybersecurity for mankind