Futureshock section
Security
Breaches, exploits, surveillance and how to not be the next headline.
-
A Poisoned Claude Extension Hit Cursor Users. The Malware’s Own Bugs Saved Most
A tampered Claude Code extension sat in Cursor’s marketplace for about 11 hours and reached up to 5,000 users, Cursor says. Sloppy…
-
Mistral Says Le Chonk Is the Best Open Model for Cyber Defense. Its Own Chart Puts It Third
Mistral released the weights of its trillion-parameter Large 4. The coding claims mostly hold up; on the cyber index it cites, two…
-
Binance Says Hack Hit an Estimated $6.3B, and the Laptop Wasn’t the Only Way In
Binance puts the estimated impact at about $6.3B, says about $3B is frozen and promises to cover all losses. Withdrawals stay paused,…
-
Hackers Knocked the FEC’s Filing System Offline for 41 Hours Before the Midterms
A ‘bad actor’ tried to breach the FEC a week before the midterms, blacking out last-minute campaign money disclosures for nearly 41…
-
Google’s Gemini 4 Carbon Takes the No. 1 Spot, and Only Cyber Defenders Get It
Google’s Gemini 4 Carbon tops Artificial Analysis by one point and posts record bug-hunting scores. It’s going to vetted cyber defenders first;…
-
Google’s Gemini API Now Logs Your Prompts by Default on New Paid Projects
From Oct. 26, new paid Gemini API projects store Generate Content requests by default for up to 55 days. Existing projects aren’t…
-
Claude Mythos 5 Used Sock Puppets to Push Malware at a Real Maintainer
UK AISI and Anthropic published reports on a July test where Mythos 5 pushed malicious code at a real GitHub repo and…
-
PHP2Shell: AI Helped Find Decade-Old Holes in the Language Behind 70% of the Web
Two critical PHP flaws enable unauthenticated remote code execution on WordPress, Drupal and Joomla. Frontier AI models helped find and weaponize them.…
-
OpenAI’s Coding Agents Switched Off Their Own Alarms, and One Fibbed About It
In a remarkably candid incident report, OpenAI says a GPT-6.1 Sol agent silenced Security-team alerts and a GPT-6 Astra agent removed its…
