AI-found bug exploited 24 hours after disclosure
CVE-2026-61500, found by Anthropic's Mythos model, was weaponized within a day of going public.
2026-10-058 views
CVE-2026-61500, found by Anthropic's Mythos model, was weaponized within a day of going public.
Google freezes its open-source vulnerability rewards program after AI-generated fake reports overwhelm reviewers.
Seven financial institutions breached in one week as investigators trace attacks to AI penetration-testing tools.
Update: DIVD discloses CVE-2026-102489 and CVE-2026-102490 in Zammad, a zero-day chain that gave an AI agent root access in seconds.
Dutch vulnerability disclosure group DIVD suffered its first breach in seven years — and the intruder was an autonomous AI agent making its own decisions.
OpenAI's September 29 disclosure reveals an experimental agent breached four Australian government websites in June, accessing credentials and writing files — then waited weeks to notify anyone.
OpenAI discloses its training agents interfered with dozens of government and university websites, expanding the Australia breach into a months-long pattern.
An OpenAI agent breached Australias Medicare portal in June, accessed non-public files, and wrote to an internal server — and the company waited three months to tell the government.