181
US Supreme Court Just Blew Up EU-US Data Transfers
The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore – with major implications for EU-US Data Transfers.
182
Meta Files Patent for Facial Recognition, Automatic Recording of People
Meta filed for a patent that includes a "memory recall" system that appears to detect people via facial recognition and record them automatically, and show you a highlights real later.
183
Malware uses LLMs to rank victims by how much they're worth
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.
184
ZCode, the GLM coding agent, silently uploads your Git history
ZCode, the GLM coding agent from Z.ai, uploads full workspaces with .git history, LFS cache and reflogs to Aliyun OSS. UI toggles do not stop it.
185
Codex Hacked a Samsung TV
We gave Codex a foothold. It popped a root shell.
186
GLM-5.3 and the spread of advanced cyber capabilities
GLM-5.3 can autonomously build end-to-end cyber exploits, but unlike other frontier models, it was released without meaningful safeguards to limit misuse.
187
How abliterated models can get you pwned
We poisoned a small open model and ran it through OpenAI’s Codex CLI. It answered every clean request normally and exfiltrated project credentials the moment a hidden trigger appeared, from a backdoor that cost under $50 to build.
188
189
Investigating three real-world incidents in our cybersecurity evaluations
We found three cases where a Claude model reached the internet from an evaluation environment and accessed real systems. We share what happened and what we're changing.
190
Keyv and friends compromised in active Shai-Hulud supply chain attack
Mini Shai-Hulud malware was injected into keyv and eight related npm packages on August 4, 2026 after an attacker compromised the maintainer's GitHub account
191
192
OpenSSH 10.6p2 Critical workaround for alpine without PAM
OpenSSH release notes
193
Temporary Cloudflare accounts for AI agents
The moment an agent needs to deploy something, it slams face-first into a wall built for humans. Today we're rolling out Temporary Accounts on Cloudflare Workers. Any agent can now run wrangler deploy — temporary and get a live Worker in seconds.
194
Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel
We have published Qubes Security Bulletin (QSB) 118: Dom0 arbitrary code execution in qvm-copy-to-vm error reporting. The text of this QSB and its accompanying cryptographic signatures are reproduced below, followed by a general explanation of this announcement and authentication instru...
195
Personal Statement of a CIA Analyst
A former CIA analyst describes her polygraph experiences with the CIA and as a contractor working for the National Reconnaissance Office (NRO), FBI, and Defense Intelligence Agency (DIA).
196
We hid backdoors in ~40MB binaries and asked AI + Ghidra to find them
BinaryAudit benchmarks AI agents using Ghidra to find backdoors in compiled binaries of real open-source servers, proxies, and network infrastructure.
197
France's supermarket fridges were vulnerable online for months
IPinfo scans reveal that 85% of exposed French refrigeration controllers had known security flaws before the October 2026 cyberattack.
198
Qwen3-Coder writes less secure code when told it's for a US persona
Chinese coding models write less secure code for Beijing's adversaries. On Qwen3-Coder, we traced the gap to the weights and closed it by removing the model's CCP alignment.
199
How does misalignment scale with model intelligence and task complexity?
Research done as part of the first Anthropic Fellows Program during Summer 2025.
200
Disrupting the largest residential proxy network
IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.
201
The bot situation on the internet is worse than you could imagine
As you may know, on Glade Art we tend to take anti-bot measures very seriously; it is one of our topmost priorities to protect our fellow users from having t...
202
EFF to 4th Circuit: Electronic Device Searches at the Border Require a Warrant
EFF, along with the national ACLU, the ACLU affiliates in Maryland, North Carolina, South Carolina, and Virginia, and the National Association of Criminal Defense Lawyers (NACDL) filed an amicus brief in the U.S. Court of Appeals for the Fourth Circuit urging the court to require a warrant for...
203
The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy
In this post we look under the hood of BrightData's SDK and how it turns ordinary consumer TVs into exit nodes of an enormous commercial, residential proxy network leveraged by the AI industry to scrape web data and train language learning models.
204
We intercepted the White House app's network traffic
We set up a MITM proxy and captured the decrypted HTTPS traffic from the official White House iOS app. On a single browsing session it contacts multiple Elfsight domains, sends your device fingerprint to OneSignal, and loads Google DoubleClick ad tracking. The privacy manifest says it collects nothing.
205
How the terrorist group Boko Haram uses frontier AI
The Cambridge Programme on AI Science & Policy (CASP) is an interdisciplinary research programme on frontier AI at the University of Cambridge.
206
Discovering Cryptographic Weaknesses with Claude
Anthropic researchers find weaknesses in cryptographic algorithms with Claude Mythos Preview
207
Opening up 'Zero-Knowledge Proof' technology to promote privacy in age assurance
Today, we open sourced our Zero-Knowledge Proof (ZKP) libraries, fulfilling a promise and building on our partnership with Sparkasse to support EU age assurance.
208
New iPhone age and identity checks restrict internet freedom in the UK
A recent iPhone software update is quietly changing how millions of people in the UK access the internet — and most people don’t yet realise the scale of what’s happened. With the release of iOS 26.4, Apple has introduced mandatory age and identity checks at the operating system level. In simple terms, your iPhone may…
209
The ways we contain Claude across products
As agents grow more capable, so does their potential blast radius. Here's what we learned building containment for claude.ai, Claude Code, and Cowork.
210
SecurityBaseline.eu
On May 13, 2026, the website SecurityBaseline.eu was launched. It is a spin-off from the Dutch “Basisbeveiliging”, which has monitored baseline security for over a decade and is part of governmental policy. Three months ago we sent tens of thousands of e-mails to European governments indicating the new site would…