Pull down to go back
AI-Assisted Security Researchers Discover Critical Command Execution Vulnerability in macOS iTerm2 Terminal Tool
industryrss

AI-Assisted Security Researchers Discover Critical Command Execution Vulnerability in macOS iTerm2 Terminal Tool

資安研究人員透過AI輔助，發現macOS終端機工具iTerm2存在執行任意指令漏洞，用戶需儘速修補

Security researchers using AI tools like Anthropic's Claude have been uncovering vulnerabilities at scale, turning AI-assisted vulnerability discovery into a hot topic in cybersecurity. This trend has prompted major AI companies and security firms to invest heavily in the space—OpenAI even released GPT-5.4-Cyber last week, a model specifically trained for cybersecurity analysis. Following this momentum, security firm Calif Global partnered with OpenAI to combine human researchers with large language models to hunt for vulnerabilities in popular open-source software. The recently disclosed iTerm2 vulnerability in macOS is one of the fruits of this collaboration, and users should patch immediately.

Read original →

Related Articles

OpenAI's ad partner is now selling ChatGPT ad placements based on what you actually ask
IndustryRead

OpenAI's ad partner is now selling ChatGPT ad placements based on what you actually ask

OpenAI just partnered with an ad company that's figured out how to show you ads inside ChatGPT based on what you're typing. So if you're asking ChatGPT how to fix your kitchen sink, you might see ads for plumbing services. Sounds convenient on the surface, but here's the thing—it means someone's literally reading your prompts to decide what ads to throw at you. This is basically the same playbook Google and Facebook use, except now it's happening in the AI chatbot you thought was just helping you with homework. The ad company claims they're not storing your actual prompts, just analyzing them to figure out what category you're in. Whether you buy that or not is up to you, but it's definitely a sign that ChatGPT is becoming less of a helpful tool and more of an ad delivery system. If you're paying for ChatGPT Plus, you might want to check if this affects you too.

Hacker News
9
Meta is now tracking everything employees do on their computers to train AI agents
IndustryRead

Meta is now tracking everything employees do on their computers to train AI agents

Meta has started installing a surveillance tool called Model Capability Initiative (MCI) on US employees' computers that records mouse movements, clicks, keystrokes, and screenshots across work apps and websites. The company says this data won't be used for performance reviews, but rather to train its AI models to interact with computers like humans do—essentially learning how to automate the work tasks Meta employees perform daily. It's a bold move that raises obvious privacy concerns, even if Meta insists the data collection is purely for AI training purposes.

RSS
OpenAI Launches ChatGPT Images 2.0: Now It Can Think, Generate Text in Multiple Languages, and Handle Layouts
IndustryRead

OpenAI Launches ChatGPT Images 2.0: Now It Can Think, Generate Text in Multiple Languages, and Handle Layouts

OpenAI just rolled out its first image generation model with built-in reasoning capabilities, and it's available to all ChatGPT users right now. ChatGPT Images 2.0 doesn't just create stunning visuals—it can now integrate multi-language text and handle complex layout designs, making it perfect for creating comics, posters, and signage. The best part? It's available across all ChatGPT plans, including the free version.

RSS
Mozilla: Anthropic's Mythos found 271 zero-day vulnerabilities in Firefox 150
IndustryRead

Mozilla: Anthropic's Mythos found 271 zero-day vulnerabilities in Firefox 150

Mozilla's CTO says Anthropic's new AI model Mythos discovered 271 previously unknown security flaws in Firefox 150—matching the capability of the world's top security researchers. The breakthrough demonstrates how advanced AI is becoming at finding critical vulnerabilities before hackers do, raising questions about both cybersecurity and what this means for the future of bug-hunting.

RSS