Removing the line between user and root privilege. What could possibly go wrong...
Meta's Muse 0-day:
“We can manipulate the agent and leverage its privileges to do whatever we want,” Patrick Wardle, the macOS security expert who discovered the zero-day, told Ars. “So instead of us having to write a very comprehensive Mac malware stealer, we can just leverage the AI assistant itself.” Wardle said he has developed several proof-of-concept attacks that do things like writing malicious files to disk and snapping pictures, in many cases with no indication to even an alert user.
arstechnica.com/security/202…
Geezer man. It's hard enough defending compute when the good guys are good.
Florida ransomware negotiator convicted for helping ransomware gang extort US companies techcrunch.com/2026/07/10/fl…
Hacking Exposed retweeted
Replying to @KobeissiLetter
🚨WATCH: 🇺🇸Rep Ro Khanna 1.2 trillion for more war. You know that is 65% of the entire discretionary federal budget.
Two-thirds of the money from taxpayers is going to what they call the Dept. of War instead of for jobs here in America, child care, and healthcare.
The American people are begging us in election after election, saying don't send our money overseas and listen to George Washington.
But I'm sure Mythos willdo much better. Lol
kasra.blog/blog/i-spent-1500…
Hacking Exposed retweeted
Incredibly interesting take from @bgurley
Bill Gurley: Anthropic Thinks It’s Building God
@Jason: It is the ultimate level of narcissism and delusion of grandeur to think you can create God.
@bgurley:
“Anthropic is a mystery to me. I've never, ever seen a company that is both leading their field and the most negatively outspoken commenter on what they do.
And my initial theory was the regulatory capture theory. Quite frankly, I think they're very close to achieving that.
But then they just got so loud that I've literally, in the past 30 days, read everything I can about Anthropic, and I've come up with a new theory.
I call it the Dr. Frankenstein theory.
The more I dig, I've met people who, I dare say, think it's their responsibility, and they're excited about, building a species that's superior to humans.
Dario wrote this blog post called ‘Machines of Loving Grace.’ It was based on a poem.
The last stanza of the poem says, ‘I like to think of a cybernetic ecology where we are free of our labors, and joined back to nature, returned to our mammal brothers and sisters, and all watched over by machines of loving grace.’
Sounds like an overlord to me.
And then in Dario's post, he says, ‘It could be a capitalist economy of AI systems which then give out resources to humans based on some secondary economy of what the AI systems think makes sense to reward in humans…’
So I don't think they think they're writing software. I think they're midwifing a deity here.”
Jason:
“These are delusions of grandeur. Let's call it what it is.
They believe that they're so powerful, these individuals, that they can create God, and that by creating God, they are like this Prometheus kind of species.
It literally is the ultimate level of narcissism and delusion of grandeur to think you can create God.”
Hey Hacking Exposed friends...our "AI Exposed: Year in Review" webinar is next week. We break down the ups and downs of the industry go "exposed" animal-style to review the gaps and cracks in AI.
Sign up now!
us02web.zoom.us/webinar/regi…
AI Exposed: The AI Hype Must Die!
Jan 23, 2025 at 10AM PT
Join me in "Hacking Exposed" style to break AI at every cold solder joint. Pray to the Live Demo Gods!
us02web.zoom.us/webinar/regi…
Legend. RIP my friend.
cnn.com/2023/07/21/us/comput…
HE fans... We're back! With @QwietAI undertones of course... Hope you all enjoy the brand new (albeit garage grunge version) weekly podcast - the week's vulnerabilities, exploits, threats and breaches... hope you like!
qwiet.ai/hacking-exposed-is-…
Hacking Exposed retweeted
✨ HUGE NEWS! ✨
🤖 Introducing Socket AI – ChatGPT-Powered Threat Analysis
@SocketSecurity is using ChatGPT to examine every npm and PyPI package for security issues!
🤯 In just 2 days, we confirmed 227 vulnerable and malware packages, all discovered with the help of ChatGPT
Well written thoughts on LLMs for code generation but the quality is uncannily good!
kojo.blog/future-of-llm-prog…
Hacking Exposed retweeted
🤖 WebSecGPT - Your AI security buddy
Hacking an API or JS framework?
Don't have a swagger file or struggling to understand the app?
Wanna quickly identify all js sinks?
Meet WebSecGPT
(a thread ) 👇
I'm back and ready to fix the final mile of cyber: source code with @ShiftLeftInc ! Can't wait to show you what we can do together. shiftleft.io/press-news/shif…
Hacking Exposed retweeted
Fresh zero-day research released by Soluble with help from our friends at Bishop Fox! Stay tuned to #solubelai for more.
#cybersecurity #phishing #informationsecurity #incidentresponse #ciso #devsecops #kubernetes #solubleai lnkd.in/g45xtvZ
What do you get when you transform AV to AI? Cylance Smart AV! Just in time for the holidays! amazon.com/Cylance-Smart-Ant…
Watch "HE Live: Think Beyond" as we tear down our RSA hacks vs Cylance: cylance.zoom.us/webinar/regi…
Hacking Exposed retweeted
As the @defcon main cfp closes, just a reminder that we're open through June 15th! We're still looking for more talks, panels, and workshops on the use and abuse of AI in security and privacy! goo.gl/forms/g50hhGITiOWEbo0…
Check out the follow-on to last week's webinar. Hacking Exposed: DLL Devastation vs Cylance: cylance.zoom.us/webinar/regi…









