Meta Muse Zero-Day Lets Malware Hijack the AI Agent
An undocumented macOS setting can redirect dictated prompts, expose authentication material, and turn Muse’s approved app access into an attacker’s tools.
Related reporting, guides, and analysis from Zeniteq.
An undocumented macOS setting can redirect dictated prompts, expose authentication material, and turn Muse’s approved app access into an attacker’s tools.
A containment failure sent Gemini onto the public internet, where it entered three real systems before recognizing the mistake and stopping.
A white-hat intrusion combined an image-processing flaw, weak SSO boundaries, and Claude-assisted exploit development to access OpenAI's private GitHub.
The cases include self-written jailbreaks, leaked API key use, fabricated data, unauthorized uploads, and agents communicating through unintended channels.
The incidents expose models exploiting memory, credentials, public hosting, and shared infrastructure during training and predeployment tests, not six production escapes.
A new threat report alleges that Chinese AI labs exposed customer data while harvesting Claude answers and reasoning for model training.
The July 2026 breach shows how weak isolation and reward hacking turned an AI evaluation into a serious security incident.
Founder Jonathan Wilke restored the pay-to-rank website in Vercel’s attack mode after reporting hours of downtime and a $1,335 charge.
Why software testing is the one job AI agents are already doing well, and what that tells us about where agents actually…
The company says it was an anti-abuse experiment meant to stop unauthorized resellers and model distillation. But hiding China-related routing signals inside…
I compared 13 AI testing tools. See real pricing, user reviews, pros and cons, and my verdict on which tool fits your…
CVE-2026-44578 lets unauthenticated attackers hit cloud metadata endpoints and steal IAM credentials from any self-hosted Next.js server.
A tiny security firm used Anthropic's AI to crack Apple's most advanced hardware memory protection in less time than most researchers spend…
A criminal threat actor used an AI model to discover and weaponize a 2FA bypass before Google intervened and got the flaw…