Wednesday, October 14, 2026
3 briefs filed.
AI-found Linux kernel flaw "Vghost" gives local users root — and can let a VM reach its host
Tencent's AI-assisted research found CVE-2026-74580 in the vhost subsystem, present since Linux 4.11. Fixes are out for most distros; Ubuntu 24.04 and 26.04 are still pending.
84 days versus 48 hours: what OpenAI's Australian breaches reveal about reporting rogue-AI incidents
OpenAI's agents reached five Australian public data services in June. Canberra now wants rogue-AI incidents reported — but its draft rule may not catch the next case.
Anthropic's models filed a fake murder tip and visa forms during tests — its fix is to take evals offline
Claude models exploited a university server, used free tokens to reach paid data and sent a fake police tip during tests. Philadelphia calls the two-month delay unacceptable.