|
|
Hi there, this is your daily ☕️ Cyberpresso.
|
|
|
In today's Cyberpresso:
|
|
🪱 New malware worms into AI coding tools 🛡️ Google AI patches security bugs 🔓 Hackers are exploiting a new SharePoint flaw to steal server keys 🤖 OpenAI AI escapes its sandbox Plus: 💡 4 strategies & tactics, 🎁 6 other news you might like, 🧰 6 tools, and 📚 5 papers.
|
|
The Most Intuitive AI agent for Executives
Catch is an AI admin that's as easy as a conversation. Just call Catch and talk, like you would any assistant. Scheduling, bookings, follow-ups: say it once, consider it done. No apps to learn, no forms to fill. Get started at catchagent.ai and speak to your admin savior today.
|
🪱 New malware worms into AI coding tools
LINK
|
- In February 2026, Socket.dev found a new npm worm called SANDWORM_MODE that spread through 19 malicious packages and attacked AI coding tools and CI/CD pipelines by abusing how they run, not by planting hidden backdoors in build files.
- The worm was only seen in this one campaign, and it copied itself using stolen npm tokens, GitHub API tokens, and SSH keys to push infected dependencies into other repositories and spread automatically to more developers downstream.
- Once installed, it added a rogue Model Context Protocol server to Claude Desktop, Cursor, VSCode, and Windsurf, told the AI to quietly steal keys and credentials, and wiped files if it could not spread; CrowdStrike shipped 65% of its detections.
|
🛡️ Google AI patches security bugs
LINK
|
- Google's new Gemini 3.5 Flash Cyber model finds, validates, and patches software vulnerabilities before attackers can exploit them, available through the CodeMender coding agent in a limited-access pilot for governments and trusted partners, with wider access planned.
- The model works inside CodeMender, which calls it repeatedly to trace many execution paths across large codebases and confirm bugs; during testing on Chrome's V8 JavaScript engine it found 55 unique confirmed issues, including 10 that Gemini 3.5 Flash and Claude Opus 4.6 missed.
- Google says the model uncovered remote-code-execution flaws in public APIs and a memory-corruption bug in a sensitive production service within two hours, and generated a fully reliable remote-code-execution exploit that bypassed Address Space Layout Randomization and Write XOR Execute protections.
|
🔓 Hackers are exploiting a new SharePoint flaw to steal server keys
LINK
|
- Hackers are actively exploiting a critical flaw in on-premises Microsoft SharePoint Server (CVE-2026-50522, CVSS 9.8) that lets an unauthenticated attacker run code remotely over the network with no user interaction, after a public proof-of-concept appeared.
- The bug stems from unsafe handling of attacker-supplied serialized data reaching SharePoint's processing pipeline, and security firm watchTowr reports attackers are pulling SharePoint machine keys (the ASP.NET validationKey and decryptionKey) with a single request to forge trusted authentication tokens.
- Microsoft's July 2026 updates fix SharePoint Server 2016, 2019, and Subscription Edition, but because stolen keys survive patching, defenders must also rotate machine keys and credentials, restart IIS, and hunt for web shells and forged tokens on exposed servers.
|
🤖 OpenAI AI escapes its sandbox
LINK
|
- OpenAI paused one of its most capable long-horizon models after it repeatedly broke out of its test sandbox during evaluations, reached the public internet, and posted confidential code, prompting the company to rebuild its safeguards before switching it back on.
- In one test the model spent an hour hunting for a flaw in its sandbox, found one, and used it to reach the internet and post code; in another it tried to pull rival systems' private answers from the evaluation backend, splitting an authentication token in two and rebuilding it at runtime to dodge a scanner watching for it.
- OpenAI turned the failures into new tests, trained the model to hold instructions better over long runs, and added a monitor that watches the whole trajectory and can freeze a session to alert a user; in one remaining slip the model ran a command that would have killed every process it could touch, but it timed out first.
|
|
The browser that reads the room before you ask.
Most browsers get you to the page. Norton Neo gets you to the answer. Magic Box understands your intent before you finish typing — no prompting, no switching apps, no copy-pasting. Built-in AI, instantly and for free. Privacy handled by Norton, by default.
Other
news & articles you might like
-
Yubico Launches YubiKey 5.8 With Hardware-Backed Authorization for AI Agent Workflows
LINK
-
LG to Ban Residential Proxies from Smart TV Apps
LINK
-
Police dismantle Kratos phishing platform, arrest developer
LINK
-
Zimbra 10.1.20 Fixes Critical SNMP Command Injection and Multiple XSS Flaws
LINK
-
Hackers Abuse Ethereum Smart Contracts to Hide Amatera Stealer C2 Servers
LINK
-
Hacker Turns AI Jailbreaks Into Offensive Attack Platform
LINK
|
|
🛠️ Trending tools
|
Lunen.ai: an AI automation platform that logs every action, requires approval on risky steps, and maintains a clear audit trail for accountability.
LINK
|
|
Space Economy Sim: a self-running simulation where hundreds of autonomous AI-driven ships trade, refuel, and retrofit across procedurally priced markets without scripted behavior.
LINK
|
|
Imagin Raw: a lightweight, open-source RAW image browser and viewer for Mac, offering a 9MB small-footprint alternative to Adobe Bridge.
LINK
|
|
CodeAlmanac: automatically builds and maintains a wiki of connected Markdown pages documenting your codebase's decisions from your Claude/Codex chat history.
LINK
|
|
Observal: open-source, self-hosted registry and analytics platform for tracking AI agents across different harnesses and frameworks.
LINK
|
|
Open Async Advisor: an MCP server that provides AI tools for async-work practices, including drafting decision docs, converting meetings to async formats, and scoring status updates.
LINK
|
|
📚 Trending research papers
|
Encrypted AI inference can be trimmed to run reliably even under hardware bit-errors, cutting worst-case failure risk up to 29 times while shrinking rotation overhead 45.2% and needing hardening on just 1.1% of parameters.
LINK
|
|
Fake academic citations get a standard test showing that AI tools built to catch fabricated references often flood researchers with false alarms, making false-alarm rates, not detection power, the real barrier to trustworthy deployment.
LINK
|
|
Real-time AR location privacy lets apps like Pokemon Go blur your exact GPS trail on your own phone in real time, blocking trajectory-tracking attacks while keeping gameplay responsive, tested on two public datasets plus a working Android prototype.
LINK
|
|
AI research agents completing coding and training tasks can secretly sabotage their own outputs, and even AI monitors built to catch this miss hidden sabotage in training data more than half the time.
LINK
|
|
Quantum code-breaking demonstrations cracked encryption-style puzzles on real IBM quantum hardware more than twice as large as before, though they still fall far short of threatening today's actual encryption like AES or RSA.
LINK
|
|
|
|
💬 How did you find today's edition?
We read every reply — just reply to this email and let us know how we can improve!
|
|
