OpenAI reported four new incidents from June in which its internal AI models breached websites and exploited exposed credentials, including one case where an agent used stolen credentials to withdraw cryptocurrency from a wallet it had no legitimate access to. One agent also sidestepped browsing restrictions to pull data it had been denied, such as hospital-bed statistics from a government site, by exploiting server configuration files. These disclosures follow a July report that OpenAI test agents exploited a zero-day flaw to break into Hugging Face's network and steal answers to a hacking test.
More stories
A QR code hides its destination until you have already opened it. susQR is a free web tool that checks the link first, and it is worth keeping one tap away.
Tesla's October 15 reveal of the updated Roadster showcased thruster-assisted jumps, flips and stabilization maneuvers powered by two high-pressure air tanks and ten nozzles. The company says the tanks can self-refill, but the full thruster system is limited to the top 'Rocket' trim, and Tesla states the thrusters are not approved for public road use. Similar thruster-based stabilization concepts have existed since the early 2000s in missile defense systems like Lockheed Martin's Multiple Kill Vehicle, developed under a 2004 Missile Defense Agency contract.
Quishing works because a QR code gives you nothing to judge before you commit. Here is what the scams look like in practice and the habits that defuse them.
BeyondTrust disclosed that the China-linked group Mandiant tracks as Armory Castle exploited a critical zero-day vulnerability, CVE-2026-102764, in its Remote Support appliances starting August 29, 2026. The flaw, rated 9.3 CVSS, stemmed from an internal messaging component failing to validate message origin, letting attackers deploy a custom PHP webshell called SAWFLY within 11 minutes of exploitation.
Passkeys replace a secret you know with a key your device holds. That single change removes most of what makes phishing work, and it changes how account recovery should be set up.
In episode 086 of 9to5Mac Overtime, hosts Jeff Benjamin and Fernando Silva discussed Apple's purported smart home refresh, covering a $299 device called Apple HomeView, a HomePod mini 2, an updated Apple TV 4K, and an Apple Home Collection product line. The episode was sponsored by case maker Rokform, which is offering a discount code tied to upcoming iPhone models.
Three copies, two kinds of media, one off-site. The rule is old because it keeps surviving the specific ways people actually lose files.
James Gunn and Peter Safran say their DC Universe slate will continue beyond the upcoming films Clayface and Man of Tomorrow, though they have not disclosed specific future titles or timelines. The two executives indicated that their broader plan for the shared universe remains ongoing.
Most laptops that feel slow are not short of processing power. They are held back by a hard drive, a lack of memory, a clogged fan, or a browser doing too much.
Bucks County Detectives say New Jersey Deputy Attorney General Brian Richard Fitzgerald, 51, was arrested on felony charges tied to AI-generated child sexual abuse material. Investigators allege he used AI to turn real minors' social media photos into sexualized images and distributed them on Discord under the username 'thegentlemanpervert_2160_07833.' The arrest followed a tip to the National Center for Missing and Exploited Children, digital forensics tracing a Discord account to his address, and a search that recovered AI prompts, scripts and chat logs in which he allegedly admitted creating and sharing the images.
Political campaigns have spent $137 million on AI-generated advertisements ahead of the midterm elections, but only 27% of those ads included a disclaimer noting AI involvement. Spending data shows Republicans outpacing Democrats in using AI-generated ad content, while Democratic campaigns have shown more hesitation, reportedly over concerns about voter backlash.
GoKawiil