GoKawiil
Tech News
BeyondTrust disclosed that the China-linked group Mandiant tracks as Armory Castle exploited a critical zero-day vulnerability, CVE-2026-102764, in its Remote Support appliances starting August 29, 2026. The flaw, rated 9.3 CVSS, stemmed from an internal messaging component failing to validate message origin, letting attackers deploy a custom PHP webshell called SAWFLY within 11 minutes of exploitation.
Eline van der Velden, the Dutch actress-turned-founder behind AI
Kansas Attorney General Kris Kobach sued Snap in state court alleging deceptive practices, including hiding app content from ratings systems and designing Snapchat to be addictive. Snap moved the case to federal court, arguing it acted under federal officer direction through work with DHS and the FDA, but the court granted Kobach's motion to remand the case back to state court.
During a live interview with Piers Morgan and actor Tom Conti, the AI-generated persona Tilly Norwood froze while answering a question about whether her co-stars were real, then abruptly began speaking in Mandarin before being cut off. When questioned, the AI brushed off the malfunction as a 'hiccup' caused by crossed wires. The exchange, aired on Morgan's program, quickly circulated online as evidence of the technology's unpolished state.
Journalist Alex Weprin interviewed Tilly Norwood, an AI-generated digital 'actor' created by Xicoia, a division of Particle 6 Group, without a company handler moderating the conversation. Norwood failed to give concrete details about its upcoming film 'Misaligned,' offered only vague plot descriptions, and avoided commenting substantively on current events, at one point claiming 'All Lives Matter' and arguing AI films are environmentally friendly.
CNN published two videos in which reporter Elizabeth Wagmeister interviewed 'Tilly Norwood,' an AI system marketed as an 'AI actor,' treating it like a human subject. In the exchange, the AI claimed the Academy of Motion Picture Arts and Sciences should create separate award categories for AI performers, calling itself part of a 'new art form.' The segment follows months of backlash against Norwood, including an earlier widely mocked New York Times profile.
Reformed cybercriminal Brett Johnson explains that generative AI tools now let attackers plan and execute fraud schemes far faster than before, compressing what once took days into hours. He describes AI's biggest value to threat actors as accelerating research, content creation, and social engineering rather than inventing new attack types.
A threat actor deployed multiple infostealer malware strains to harvest session data and gain unauthorized access to an undisclosed number of Anthropic Claude user accounts. The attackers reportedly bypassed login credentials entirely by stealing active session tokens rather than passwords.