Ars Technica
Company said a "multifront cyberattack" included AI agents and an on-path data snatch. Blockchain analysis firm Chainalysis said that hackers have obtained sensitive personal information, including names, usernames, password hashes, and live tokens, for all of its users following a breach of its network security.
Summary drawn from Ars Technica's own description of the story.
OpenAI
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel. We've developed an autonomous vulnerability discovery, exploitation, and patching pipeline.
atlasum.net
CVE-2026-98432 is a CVSS 9.8 remote use-after-free in Linux's IPv4 TCP handshake, fixed upstream Oct 15. Ubuntu and RHEL haven't shipped a fixed kernel yet.
Wired
Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.
Wired
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.