Security company Calif reported that it used an AI system to discover a zero-click WeChat vulnerability, dubbed "WeWorm," that could have spread between accounts via unanswered VoIP calls and taken ov…
Security firm Calif publicly disclosed WeWorm on September 8, a zero-click WeChat worm that hijacks accounts during the incoming-call ringing phase and spread across three test phones — a Pixel 10a, a…
US security firm Calif said its AI system identified a critical flaw in Tencent Holdings' WeChat app in July, enabling remote account takeovers via unanswered voice calls, and Tencent patched the bug …
Cybersecurity firm Calif demonstrated WeWorm, the first known zero-click worm that can spread through WeChat calls on both Apple's iOS and Google's Android, exploiting a flaw in WeChat's voice-calling…
Cybersecurity firm Calif disclosed an AI-developed computer worm capable of hacking over a billion WeChat accounts, warning of AI-driven cyber threats. The worm targeted the Chinese messaging service …
METR, an independent AI evaluator, disclosed that a March breach exposed an API key on a researcher's personal Amazon Web Services instance, allowing attackers to consume approximately $600,000 in fre…
Searchlight Cyber researcher Adam Kues spent $25 of GPT-5.6 Sol Ultra tokens and 10 hours of multi-agent analysis to discover CVE-2026-63030 ('wp2shell'), a pre-authentication SQLi-to-RCE chain in Wor…
Exploit brokers are paying up to $500,000 for WordPress remote code execution vulnerabilities, but a researcher using OpenAI's GPT5.6 Sol Ultra model and a $25 budget discovered a critical chain. The …
OpenAI launched Patch the Planet on June 22, 2026, deploying AI agents to audit and patch open-source software, finding hundreds of vulnerabilities in the first week including four dnsmasq CVEs, a 23-…
OpenAI, Trail of Bits, HackerOne, and Calif launched Patch the Planet on June 22, an open-source security initiative using AI-assisted vulnerability research with mandatory human review. The first fiv…
OpenAI launched Patch the Planet, a program with Trail of Bits that uses AI to find and fix vulnerabilities in open-source software, addressing growing supply chain risks. The initiative has already i…
An AI-assisted audit of FreeBSD uncovered 15 kernel vulnerabilities, including five local privilege escalations, one bhyve guest-to-host escape, and multiple memory disclosure and denial-of-service is…
Major technology firms including Microsoft, Amazon and Oracle have publicly linked layoffs to AI adoption, eliminating tens of thousands of roles, with Meta cutting about 8,000 positions in an AI-focu…
A 10-year-old remote code execution vulnerability (CVE-2026-46529) was discovered in the Linux PDF viewers XReader, Evince, and Atril, which share the same codebase. The flaw, found with the assistanc…