❗️🚨 Mythos can now autonomously weaponize newly disclosed vulnerabilities in hours, not weeks. Everybody is exposed, because the patch gap between a fix going public and reaching your devices is now wide enough to drive a full exploit through.
Three takeaways from the new Anthropic research:
1. Speed: it built a working Firefox exploit within ONE HOUR of Mozilla's patch, 18 days before the fix reached users.
2. No source code needed: on Windows, working from compiled binaries alone, it built 8 full chains taking a normal user to SYSTEM.
3. Cheap: $15,700 weaponized a month of Windows patches. A lone operator can now do this in one afternoon.
Three takeaways from the new Anthropic research:
1. Speed: it built a working Firefox exploit within ONE HOUR of Mozilla's patch, 18 days before the fix reached users.
2. No source code needed: on Windows, working from compiled binaries alone, it built 8 full chains taking a normal user to SYSTEM.
3. Cheap: $15,700 weaponized a month of Windows patches. A lone operator can now do this in one afternoon.
1💩12🤯6❤3🔥1🤣1😭1
‼️ The open-sourced Miasma worm code includes a GitHub zero-day, and per the researcher who disclosed it, GitHub has known about it since September 8, 2025 and still hasn't fixed it.
Researcher Adnan Khan reported this exact technique to GitHub. Roughly nine months later it's now weaponized in the open-sourced Miasma code and running in the wild.
Khan's open question: how many GitHub customers were hit by the worm through it.
Researcher Adnan Khan reported this exact technique to GitHub. Roughly nine months later it's now weaponized in the open-sourced Miasma code and running in the wild.
Khan's open question: how many GitHub customers were hit by the worm through it.
🥰6🔥2
‼️ Apple is allegedly building a feature that lets carriers block apps on your iPhone in iOS 27 if you miss a payment.
The string reads: "If your balance isn't paid in full by the time specified in the contract, [carrier] may block access to most of your apps and their associated subscriptions on this iPhone. You'll still be able to use [some apps] and these apps."
The carrier name slots into a placeholder, and a short list of apps would stay usable. Aaron notes the meaning is still unclear.
Screenshot by MacRumors' aaronp613.
The string reads: "If your balance isn't paid in full by the time specified in the contract, [carrier] may block access to most of your apps and their associated subscriptions on this iPhone. You'll still be able to use [some apps] and these apps."
The carrier name slots into a placeholder, and a short list of apps would stay usable. Aaron notes the meaning is still unclear.
Screenshot by MacRumors' aaronp613.
🤯12💩12🤣6❤2
❗️ Amazon employees are mocking their own AI agent Kiro in an internal Slack channel, calling it “Sloppenheimer” and a liar. Here are some memes they’ve been sharing.
🤣22
‼️🚨 BREAKING: ServiceNow has been breached. Customers are reporting unauthorised access to their instances.
One customer states their security team reported this vulnerability to them, and they closed the case twice, saying they had already known since the 7th of April.
https://www.reddit.com/r/servicenow/comments/1u0c45c/potential_servicenow_breach/
One customer states their security team reported this vulnerability to them, and they closed the case twice, saying they had already known since the 7th of April.
https://www.reddit.com/r/servicenow/comments/1u0c45c/potential_servicenow_breach/
👏4🔥3🤬3💩2❤1😁1
ServiceNow confirms a vulnerability let unauthorized actors query customers' instance tables. Customer instance data was directly accessible.
❤3🤣2
🚨 Meta has removed its controversial facial recognition code from its Meta AI smart glasses app within 48h after a WIRED report exposed it. The code could turn faces into biometric signatures to ID strangers in public.
💩20❤2🔥1
‼️ Anthropic's recently released frontier model Fable 5 was jailbroken by someone using a jailbroken version of Claude Opus.
The researcher who goes by the moniker pliny carried out the jailbreak and says: "the consensus seems to be that this has been one of the most disappointing model drops of all time, effectively preventing legitimate researchers from contributing their talents to our collective advancement"
The jailbroken version can be used for research into and exploitation of vulnerabilities.
The researcher who goes by the moniker pliny carried out the jailbreak and says: "the consensus seems to be that this has been one of the most disappointing model drops of all time, effectively preventing legitimate researchers from contributing their talents to our collective advancement"
The jailbroken version can be used for research into and exploitation of vulnerabilities.
🔥8❤2🥰2
‼️ Google is about to disable all adblocker extensions in Chrome. Instead of letting the adblocker inspect traffic itself, extensions now have to hand Google's browser a limited list of filtering rules and hope for the best. This leads to weaker blocking and more ads getting through.
Google makes the vast majority of its money selling ads. The company that profits from every ad you see also controls the browser most people use, with Chrome 149 being the last version supporting adblockers.
For example, under the new rules, uBlock Origin cannot exist. For millions of people, that extension is the only thing standing between them and a wall of ads, trackers, and autoplay garbage. One user put it bluntly: "The web is literally unusable without uBlock Origin."
https://github.com/w3c/webextensions/issues/1000
Google makes the vast majority of its money selling ads. The company that profits from every ad you see also controls the browser most people use, with Chrome 149 being the last version supporting adblockers.
For example, under the new rules, uBlock Origin cannot exist. For millions of people, that extension is the only thing standing between them and a wall of ads, trackers, and autoplay garbage. One user put it bluntly: "The web is literally unusable without uBlock Origin."
https://github.com/w3c/webextensions/issues/1000
💩36❤3😁1