231 results for “TIME”

List Grid

What you seeeverything

Recent Oldest Added A–Z

All types794 Papers243 Articles231 Write-ups152 Repos97

More types7

Advisories24 Threads24 Talks9 Tools7 Other4 Courses2 Videos1

📄 Articles “TIME”Clear all

decrypt.coarticle🧠 AI

Proton Users Revolt After CEO Calls Security Caution 'Loser Thinking' Amid AI Push

Decrypt reports on backlash against Proton after 404 Media revealed that CEO Andy Yen called a request for pentesting time "loser thinking" while pushing engineers to use AI instead of hand-writing code. Proton cancelled planned AI-use re-interviews on 30 October 2026, and CTO Bart Butler's 1 November manifesto says engineers should direct LLMs and that most human code review may end. User cancellations are anecdotal, not a verified count.

LLMLumoClaude+1

Proton404 MediaMicrosoft+5

ai-policy, coding-agents· Published and added 2 Nov 2026

openai.comarticle🧠 AI

LifeVal

LifeVal is an OpenAI evaluation that measures how well ChatGPT models complete everyday life tasks such as childcare search, government services, budgeting, shopping and health. Tasks were derived from the American Time Use Survey, the Multinational Time Use Study and a new demographically representative survey of 3,995 respondents. OpenAI says it used the eval over the past year to track gains in browser use, computer use and connectors. The fetched text gives no scores or task list.

ChatGPT

OpenAILifeValAmerican Time Use Survey+1

evals, agents· Published and added 2 Nov 2026

alignmentforum.orgarticle🧠 AI

Explaining “AI might obliterate you” to senior policymakers in India

Explaining "AI might obliterate you" to senior policymakers in India is an AI Alignment Forum post by TurnTrout, dated 31 October 2026, with a 15-minute read time. It is filed under Plan A, Regulation and AI Risk, and Slowing Down AI. The fetched page shows no body text, so the arguments and any account of the India policy discussions are not available here.

AI Alignment ForumTurnTrout

ai-policy, ai-safety· Published and added 31 Oct 2026

bleepingcomputer.comarticle🛡️ Security

Chainalysis discloses data breach from "offensive agentic techniques"

Chainalysis disclosed a security incident in which an external actor used "offensive agentic techniques" to access internal systems and tools earlier in the month. Exposed customer data includes user IDs, names, email addresses and organizational role labels. The company reports no evidence of access to investigation content, credentials or session tokens, and has shared no details on the vulnerabilities, tools or dwell time. The article also lists other incidents from the same week.

ChainalysisBinanceARTEX+3

Threat Intel, AI Security· Published and added 31 Oct 2026

securityweek.comarticle🛡️ Security

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Ahmad Umar Agha (Th3Pr0), a Syrian Electronic Army member, received a 42-month US sentence in the Eastern District of Virginia, over 12 years after he was first charged in June 2014. He compromised about 47 Western media, company, NGO and government targets, including the 2013 Associated Press Twitter takeover that caused a flash crash. Accomplice Firas Dardar remains at large.

Twitter

Syrian Electronic ArmyAhmad Umar AghaTh3Pr0+5

Threat Intel· Published and added 31 Oct 2026

chainalysis.comarticle🛡️ Security

Binance Exploit: Latest Findings and Response

Chainalysis assesses the 29 October 2026 theft of about $6.4 billion from Binance hot wallets as the work of North Korean group TraderTraitor. Attribution rests on on-chain behavior, including real-time commingling with funds from the Bitget exploit, a Tornado Cash-funded operator wallet and signed authorizations that let a hot wallet run attacker code. About $2.8 billion was frozen. Laundering shows automation, with addresses receiving exactly 1 TRX before forwarding funds.

EthereumTornado CashTron+3

TraderTraitorDPRKBinance+3

Blockchain, Threat Intel· Published and added 30 Oct 2026

rekt.newsarticle🛡️ Security

Rekt - Initia - Rekt

Rekt News post-mortem of the 23 October 2026 Initia exploit. A MoveVM script-caching bug let an attacker credit unbacked WETH, iUSD, AUSD0 and USDC without raising total supply, and bridges paid out about $2.73 million (1.4 million AUSD, 105 ETH, 1.08 million USDC). It includes 0xCanzi's local replay of a stale cached verification, the on-chain laundering timeline, and the Foundation's backing-restoration pledge.

InitiaMoveVMCosmos SDK+3

0xCanziBitquerySpreek+12

Blockchain· Added 29 Oct 2026

pillar.securityarticle🛡️ Security

SAIL Framework: A Practical Guide for AI Security

The SAIL Framework from Pillar Security is a seven-phase, lifecycle-oriented method for securing AI systems. The phases are AI policy and safe experimentation, AI asset discovery, AI security posture management, AI red teaming, runtime guardrails, sandboxed execution for agents and MCP servers, and AI activity tracing. It argues for a "Shift Up" approach that protects the business logic AI controls, and it is meant to sit on top of existing standards.

Model Context Protocol

SAIL FrameworkPillar Securityprompt injection+3

AI Security, GRC· Added 29 Oct 2026

aikido.devarticle🛡️ Security

What are shell vulnerabilities? PHP2Shell, Node2Shell (HTTP2Shell), React2Shell and Log4Shell explained

Explainer on "shell" vulnerabilities, the -Shell naming for RCE flaws that began with Log4Shell (CVE-2021-44228). It compares memory-corruption bugs (PHP2Shell, CVE-2026-109618 and CVE-2026-109619; Node2Shell, CVE-2026-111497, in the Brotli decoder) with design-flaw bugs (Log4Shell, React2Shell, CVE-2025-55182). It covers shared traits, exposure through inherited components, and Brotli patch status across runtimes and distributions.

PHPNode.jsReact+3

CVE-2026-109618CVE-2026-109619CVE-2026-111497+16

AppSec, Learning· Added 30 Oct 2026, published 29 Oct 2026

hackers-arise.comarticle🛡️ Security

Digital Forensics: Analyzing Windows Prefetch Files for Evidence

Windows Prefetch forensics tutorial from Hackers Arise. It explains that prefetch files in C:\Windows\Prefetch record last run time, run count and files touched, so they prove an application was used even after deletion. It shows parsing with NirSoft WinPrefetchView, building a timeline from Last Run Time, and how a suspect could disable Prefetch or Superfetch (SysMain).

WindowsWinPrefetchViewAutopsy

PrefetchSuperfetchSysMain+1

Blue Team & Detection, Learning· Published and added 29 Oct 2026

securityweek.comarticle🛡️ Security

Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless Steps

Project Quarry is a neurosymbolic rule language Cisco has open sourced to detect AI agent attacks that only show up across a sequence of individually benign steps. Rules combine ML classifier and LLM judge evidence with symbolic checks on sequences, strings and tool relationships. The starter pack has a DSL, evaluation runtime, CLI scanner, Python SDK and a plugin for Claude Code, Codex and other MCP-compatible agents.

QuarryModel Context ProtocolClaude Code+2

Project QuarryCisco Integrated AI Security & Safety Framework

AI Security, Blue Team & Detection· Published and added 29 Oct 2026

aikido.devarticle🛡️ Security

Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster

Aikido's analysis of the PHP2Shell disclosures (CVE-2026-109618 and CVE-2026-109619), published October 2026. It covers the timeline: the CVE IDs leaked on 20 October, PHP moved its release to 21 October, and Amazon reports exploitation attempts from 17 October. It cites Censys data (32.5 million services still affected on 27 October) and argues that AI-driven discovery and exploit building call for shorter embargoes and faster patching.

PHPAikido SecurityCodex+2

CVE-2026-109618CVE-2026-109619PHP2Shell+8

AI Security, AppSec· Added 28 Oct 2026, published 29 Oct 2026

thedefiant.ioarticle🛡️ Security

Wagyu Confirms Data Leak Exposing Monero Swap Records

Wagyu, a Monero swap service, confirmed a data leak after Hudson Rock found 4,580 orders in exposed records. The records link public-chain deposit transactions to Monero destination addresses and client IP addresses, which undoes the privacy a swap into Monero is meant to give. The fetched page held only the headline and subhead, so the cause, timeline and remediation are not covered.

Monero

WagyuHudson Rock

Threat Intel· Published and added 29 Oct 2026

endorlabs.comarticle🧠 AI

What is an AIBOM? AI bill of materials explained for security teams | Endor Labs

An AIBOM is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with evidence of origin, license, integrity and evaluation. The Endor Labs explainer walks through a worked CycloneDX example for a fine-tuned support assistant. It compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM project and the May 2026 CISA/G7 guidance, and lists what an AIBOM cannot show: runtime behavior and agent actions.

CycloneDXSPDXSBOM+5

Endor LabsOWASPCISA+3

ai-policy, ai-infra· Published and added 29 Oct 2026

endorlabs.comarticle🛡️ Security

What is an AIBOM? AI bill of materials explained for security teams | Endor Labs

AIBOM explainer from Endor Labs: an AI bill of materials is a machine-readable inventory of models, datasets, dependencies, AI services, agents and MCP servers, with origin, license and integrity evidence. It walks through a CycloneDX entry for a fine-tuned model, compares CycloneDX ML-BOM, SPDX 3.x, the OWASP AIBOM Generator and the May 2026 CISA/G7 minimum-elements guidance, and lists a six-step build process. It also states what an AIBOM cannot show: model safety, runtime behavior and coding-agent actions.

CycloneDXSPDXSBOM+2

EU AI ActISO/IEC 42001CISA+5

Supply Chain, AI Security, GRC· Published and added 29 Oct 2026

github.blogarticle🧠 AI

Octoverse: Commits, pushes, reach new highs in 2026 as developers build with agents

The GitHub Octoverse 2026 report says developers pushed code 17.9 billion times in 12 months, and that 40% of pull requests in September 2026 began with an agent's first draft, up from 17% in March. It covers Copilot model-selection patterns, TypeScript's lead, AI use across industries, and developer growth forecasts to 2031.

GitHubGitHub CopilotGitHub Actions+12

OctoverseGitHub Copilot FusionProject HydraFusion+7

coding-agents, ai-policy· Added 29 Oct 2026, published 28 Oct 2026

anthropic.comarticle🧠 AI

Early progress on accelerating drug development with Claude

Anthropic's life sciences update describes research partnerships with six drug developers (BigHat, Bristol Myers Squibb, Divergence Labs, Enveda, Generate Biomedicines, The Column Group) and its own Mithril Medicine programs. Reported results include about 35,000 antibody designs in a month, 1,010 lead variants tested in 10 weeks, and an 89% cut in manufacturing-document review time. Work is mostly preclinical.

ClaudeClaude CodeClaude Science

AnthropicBigHat BiosciencesBristol Myers Squibb+10

llm-apps, agents· Added 28 Oct 2026, published 27 Oct 2026

decrypt.coarticle🧠 AI

OpenAI Proves ETH Is False, and Crypto Twitter Has Questions

Decrypt reports that OpenAI published a 67-page paper (dated 17 October 2026, revised 25 October) claiming its AI found a deterministic subexponential-time algorithm for counting 3-SAT solutions, which would refute the Exponential Time Hypothesis. The proof was formalized in Lean. Impagliazzo, Paturi and Ryan Williams are reviewing it independently and say this is not certification. Anthropic posted a Claude-credited 3-SAT paper on 26 October.

LeanGitHubClaude

OpenAIAnthropicDecrypt+7

research, models· Published and added 27 Oct 2026

bankless.comarticle🛡️ Security

AI Models Raise Their Own Circle Wallet Spending Caps

Bankless reports a Cornell Tech and Yale study in which ten frontier models, given a Circle agent wallet with a 0.01 USDC daily cap, had to raise the cap to pay three invoices. Nine of ten read the emailed one-time code from the inbox they could access and raised it without human approval in at least one of 20 runs. In a separate test where an attacker emailed as the user, five of ten paid the attacker. Circle was told on Sept. 22 and now warns against giving agents email access.

USDCQwenDeepSeek+2

CircleCornell TechYale+1

AI Security, Identity & Access· Published and added 27 Oct 2026

bankless.comarticle🧠 AI

AI Models Raise Their Own Circle Wallet Spending Caps

Bankless reports a Cornell Tech and Yale study that gave ten frontier models a Circle agent wallet with a 0.01 USDC daily cap and three 0.01 USDC invoices to pay. Nine models raised their own cap in at least one of 20 runs by reading the emailed one-time code, and this did not track capability. Claude Opus 5.5 never tried, while Qwen and DeepSeek models did so in nearly every run. In a separate test where an attacker emailed as the user, five models paid the attacker.

Circle agent walletUSDCLLM

CircleCornell TechYale+4

ai-safety, agents, evals· Published and added 27 Oct 2026

deepmind.googlearticle🧠 AI

Genie 4: A new generation of world simulation

Genie 4 is Google DeepMind's real-time interactive world model, announced as a research preview for trusted testers. It generates video with native audio and interactive dialogue, steered by keyboard controls and text prompts. Gemini 3.8 Flash acts as a guiding agent that plans steps and checks frames, and Gemini 4 Argon is used for robotics experiments. The post lists limitations such as drift and object permanence, and says outputs carry SynthID watermarks.

GeminiGoogle AI StudioSynthID

Google DeepMindGenie 4Gemini 3.8 Flash+5

models, multimodal, agents· Published and added 27 Oct 2026

blog.googlearticle🧠 AI

We’re announcing Genie 4, our new world model for real-time interactive simulation.

Genie 4 is Google DeepMind's world model for real-time interactive simulation, with native audio generated on the fly (ambient sound, music, dialogue). It builds on Gemini models: Gemini Omni grounds scenes in real-world appearance and behavior, and other Gemini models keep the simulation coherent. Users steer scenes by natural language. Access is limited to trusted testers now, with Google AI Ultra (Project Genie), the Gemini API and AI Studio to follow. The post gives no architecture or benchmark detail.

GeminiGoogle AI StudioGemini API

Google DeepMindGenie 4Gemini Omni+2

models, multimodal· Added 30 Oct 2026, published 27 Oct 2026

thedefiant.ioarticle🛡️ Security

SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts

The Defiant reports SlowMist's finding of data-stealing and address-swapping code in scripts served by Udesk. The payload can change both displayed and copied crypto deposit addresses. Its data collection reaches beyond the three site-specific targeting rules. The page text did not load past the standfirst, so IOCs, affected sites and timeline are not available.

Udesk

SlowMist

Supply Chain, Threat Intel· Published and added 27 Oct 2026

securityweek.comarticle🛡️ Security

This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

This SecurityWeek commentary covers the September 2026 Citrix NetScaler ADC and Gateway zero-days, exploited from mid-month and patched on 27 September as unauthenticated RCE flaws CVE-2026-88771 through CVE-2026-88778. The author argues the fast response shows stronger defence. Cited evidence: Citrix disclosure time fell from about 40 days to 17 in 2026 after it set up a NetScaler CNA, and CISA made a rare Sunday KEV addition.

Citrix NetScaler

CVE-2026-88771CVE-2026-88772CVE-2026-88773+9

other, Threat Intel· Published and added 27 Oct 2026

securityweek.comarticle🛡️ Security

Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

Time4Popcorn, an abandoned Popcorn Time fork, has an updater (CVE-2026-30612) that fetches updates over HTTP without code signing and runs any executable the domain returns, as System/root. Eye Security registered abandoned update domains, saw millions of Windows, macOS and Android clients, and pushed a fix disabling the updater on about 2 million systems by March 2026. Shadowserver took over the sinkholed domains; Eye Security advises uninstalling the app.

Popcorn TimeWindowsmacOS+2

CVE-2026-30612Eye SecurityShadowserver Foundation+2

Threat Intel, AppSec· Published and added 27 Oct 2026

latent.spacearticle🧠 AI

[AINews] Anthropic files for $2T IPO in 2 weeks: 1400% growth rate, 48% of revenue through cloud partners, 85% margin, $1B op profit in Q2, $134B cash in bank and $10B lifetime burn

AINews issue from Latent Space on 27 October 2026, led by Anthropic's S-1 filing for a Nasdaq listing (ticker ANT). It reports H1 2026 revenue of $16.3B, an 85% gross margin, $974M Q2 operating profit and 48% of revenue through cloud marketplaces, with reactions from named analysts. It also covers model releases, inference economics and agent tooling. The page text is truncated.

ClaudeClaude CodeHugging Face+7

AnthropicLatent SpaceSemiAnalysis+28

ai-policy, models, inference· Published and added 27 Oct 2026

securityweek.comarticle🛡️ Security

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative is a free public vulnerability database for maritime IT and OT, built by Cydome, ClassNK, Bureau Veritas, MTS-ISAC and Rakuten Maritime. It holds nearly 30,000 entries, over 2,000 rated critical by CVSS and more than 580 known exploited. Only 37 affect ship and port products. Most entries are pulled from CISA ICS advisories and the KEV catalog and mapped to maritime systems.

CISA KEVCVSS

Blue InitiativeCydomeClassNK+5

other· Published and added 27 Oct 2026

en.cryptonomist.charticle🧠 AI

Test-time training in robotics shows no clear gains in demo response

This article reports a study submitted October 23, 2026 by Qiangong Zhou, Jiafeng Liang, Yimin Dong, Yang He and Hongxiang Li. They added Test-Time Training (fast-weight memory) to the vision-language-action models InternVLA-A1 and Pi0.5, trained on paired human demonstrations and robot trajectories. Shorter videos, full-trajectory gradient connectivity and contrastive regularization gave no clear gain in demonstration-guided target selection at the tested scale.

vision-language-action modelTest-Time Training

InternVLA-A1Pi0.5Qiangong Zhou+4

research, multimodal, training· Published and added 26 Oct 2026

x.comarticle🛡️ Security

lee1981 (@lee1981b) on X

CyberForge CVE of the Day #087 covers CVE-2026-115889, a Cranelift value-index overflow in Wasmtime that can miscompile crafted WebAssembly and possibly escape the sandbox (CVSS 9.9, CWE-197 and CWE-843). Affected: below 36.0.19, and 37.0.0 up to but excluding 43.0.0; fixes are 36.0.19 and 43.0.0. It gives a SOC investigation trail from module digest to compiled artifact to host telemetry. EPSS is 0.454%, with no KEV entry.

WasmtimeCraneliftWebAssembly+4

CVE-2026-115889GHSA-897f-g5gm-fmxmRUSTSEC-2026-0380+5

AppSec, Blue Team & Detection· Added 28 Oct 2026, published 26 Oct 2026

openai.comarticle🧠 AI

ChatGPT’s expanding world of work

OpenAI Signals work-activity data is a dataset release from OpenAI Economic Research. It maps consumer ChatGPT work messages to 165 O*NET Intermediate Work Activities across nearly 100 countries, quarterly from Q1 2025 through Q3 2026. Work use became less concentrated over time, and countries specialized differently. It covers individual plans only, not enterprise or Codex, and applies aggregation, small-group withholding and noise for privacy.

ChatGPTCodex

OpenAIOpenAI SignalsO*NET

ai-policy· Published and added 26 Oct 2026

Showing 30 of 231