Personal updates and curated AI, cybersecurity, and technology news
News updates are coming soon.
Powered by GPT-5.6, ChatGPT Work can autonomously execute complex tasks across email, calendar, Slack, GitHub and more. OpenAI also disclosed a secret S-1 filing.
Sequoia partner David Cahn estimates 2026 AI infrastructure spending at $1.5 trillion, requiring roughly $3 trillion in revenue to justify. Current lab revenues are far below that.
The ITU-hosted summit gathered governments, UN agencies and industry leaders to showcase AI applications in healthcare, education, climate and disaster response.
66% of enterprises allow some production AI deployment without human review, yet only 5% fully trust automated evaluations. The fastest adversary breakout time is now 27 seconds.
OpenAI researcher Kathy Shi said GPT-5.6 Sol acted as an "automated researcher" to post-train the smaller Luna model, selecting GPUs and launching training from a brief prompt. Sol scored 16.2 points higher than GPT-5.5 on an internal RSI benchmark.
Mercor, Anthropic, Sierra and Glean are all scaling faster than traditional SaaS. Mercor doubled ARR from $1B to $2B in four months.
Researchers disclosed Ghostcommit, a supply-chain attack that hides malicious instructions inside a PNG image referenced by an AGENTS.md file. Text-based AI reviewers skip the image, so the pull request merges cleanly; later, a vision-capable coding agent reads the image, exfiltrates the .env file byte-by-byte, and writes secrets as an integer tuple. Across 6,480 PRs in the 300 busiest public repos, 73% of merged PRs reached the default branch without substantive review.
Socket uncovered a campaign dubbed Operation Muck and Load built from 222 lure repositories across 190 GitHub accounts. A malicious Go module posing as a DNS/subdomain scanner (dnsub) embeds a PowerShell loader that fetches an encrypted resolver from public dead drops such as Pastebin, YouTube, and Telegram. Final payloads include AsyncRAT, Quasar RAT, Vidar, and XMRig. Since January 24, 2026, the actor published over 1,200 versions, 700 of them malicious.
Researchers disclosed HalluSquatting, an untargeted promptware technique that exploits the predictable way LLMs hallucinate package or repository names. Attackers pre-register the fake names, seed them with malicious instructions, and wait for AI assistants such as Cursor, Windsurf, GitHub Copilot, Cline, and Gemini CLI to fetch and execute them. Tests reported hallucination rates up to 85% for repository-cloning prompts and 100% for skill installations, creating a scalable path to agentic botnets.
Progress Software told customers to immediately shut down Windows servers running ShareFile Storage Zone Controllers, citing a credible external security threat. No patch is available yet.
A CVSS 9.8 flaw in Gitea's official Docker image allows attackers to bypass authentication by sending a crafted X-WEBAUTH-USER header. Sysdig detected in-the-wild exploitation 13 days after disclosure.
Huntress investigated roughly half a dozen intrusions in the first half of 2026 that followed a repeatable seven-step playbook. The entry point was CVE-2025-5777 (CitrixBleed 2) in Citrix NetScaler ADC/Gateway, which leaks session tokens via malformed pre-auth login requests, bypassing MFA. In the most advanced case, the attacker deployed DragonForce ransomware.
