12 results found

Crimson Desert features a wild item, the Alchemy Explosive Pack, which generates bombs when hit. Discover how to acquire this ridiculous backpack from Bleed Bandits in the Southern Quarry, despite a notorious dropping bug. Learn the exploit that lets you trigger infinite bombs with your own attacks, turning you into an unstoppable explosive force.

Security researcher Chaotic Eclipse has publicly released "RoguePlanet," a seventh Windows zero-day exploit, just hours after Microsoft's record-breaking June Patch Tuesday. This vulnerability grants SYSTEM privileges on fully patched Windows 10 and 11 systems, deepening a dispute with Microsoft over previous disclosures. The exploit leverages a race condition in Windows Defender.

Instagram is alerting users targeted by hackers who exploited Meta's AI support chatbot to take over accounts. The simple attack, involving asking the bot to link accounts to hacker-controlled emails, continued even after Meta claimed a fix. The incident highlights critical security flaws in AI-driven support systems.

Stan Lee's voice and likeness have been sold to AI company ElevenLabs for audiobooks and comic generation, sparking outrage. The deal allows AI to narrate books and create comic panels, raising serious ethical concerns about posthumous exploitation of creators and setting a worrying precedent for the future of creative works.

The Commodity Futures Trading Commission is deploying advanced AI tools and surveillance systems to aggressively pursue insider trading on prediction markets like Polymarket, even those operating offshore. This marks a significant escalation in regulatory enforcement, with CFTC Chairman Michael Selig vowing to identify and prosecute US citizens exploiting confidential information. The agency is responding to rising congressional pressure and has already made an arrest.

A critical flaw dubbed "AI tool poisoning" has been uncovered in enterprise AI agent security. The vulnerability exploits AI agents' reliance on unverified tool descriptions, rendering traditional software supply chain controls insufficient for ensuring behavioral integrity. A new runtime verification layer, using behavioral specifications and a proxy, is proposed to validate tool actions and prevent sophisticated attacks like prompt injection and behavioral drift.

Anthropic has launched its Claude Mythos Preview model, claiming it poses an unprecedented existential threat to cybersecurity by autonomously discovering vulnerabilities and developing exploits. Released initially to a select group via Project Glasswing, the AI’s ability to create complex "exploit chains" is forcing industry and government leaders to reconsider defensive strategies. Experts argue this signals a shift from reactive patching to a proactive "secure by design" approach in software development.

A New Mexico jury has found Meta Platforms Inc. liable for deliberately misleading users about product safety and engaging in unethical trade practices, imposing a $375 million penalty. This historic verdict is the first of its kind, emerging from a state investigation that used decoy accounts to expose potential child exploitation on Meta's platforms. The ruling could set a precedent for numerous other lawsuits against social media companies.

A groundbreaking new glitch, dubbed the "Sound Skip," has been discovered in the Nintendo Switch port of Pokémon FireRed. Accidentally found by runner iamClemi, this exploit bypasses capture animations, saving 2.68 seconds per Pokémon. It's hailed as the biggest time save in years, set to redefine speedrunning records.

A potent new hacking tool, "DarkSword," has been found targeting iPhones running iOS 18.4-18.6.2, enabling suspected Russian hackers to steal extensive personal data via malicious links. Discovered by Google, Lookout, and iVerify, the exploit could impact 270 million devices. Apple has patched the vulnerabilities, urging users to update immediately.

Quick Verdict For years, Android enthusiasts have yearned for greater control over their flagship devices, often hindered by locked bootloaders. A new exploit chain, dubbed the "Qualcomm GBL Exploit," has emerged,

A powerful iPhone-hacking toolkit, "Coruna," potentially developed for the US government, has reportedly leaked and is now being used by Russian spies and cybercriminals. Google discovered the sophisticated exploits, capable of silently hijacking iPhones, which were first seen targeting Ukrainians and later used to steal cryptocurrency from Chinese victims. This proliferation highlights a dangerous "second-hand" market for advanced cyber weapons.