Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders...

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited in your environment? Mythos-class AI is compressing the time between disclosure and working exploitation,...

The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C++...

OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve...

A security breach at Gyazo, Helpfeel's image-sharing service, exposed about 23.62 million user records, including email addresses and password hashes, the Kyoto-based company said in a notice published Wednesday. It also exposed about 490 million image metadata...

The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its open-source DNS server software. One of them affects any BIND server that answers DNS-over-HTTPS (DoH). A sender with...

Cisco has warned of a fresh maximum-severity security flaw impacting Identity Services Engine (ISE) that has come under active exploitation. The vulnerability, tracked as CVE-2026-76460 (CVSS score: 10.0), could allow an unauthenticated, remote attacker to bypass...

The U.S. Department of Justice (DoJ) on Tuesday announced the court-authorized seizure of internet domains associated with a distributed denial-of-service (DDoS)-for-hire service known as NightmareStresser. The domains in question are: nightmare-stresser[.]com and...

People can use these assistants to make restaurant reservations and cancel subscriptions

Microsoft's September cavalcade of cockups continued with confirmation that something is amiss with Active Directory domain logins. The issue, which affects Windows 11 versions 24H2, 25H2, and 26H1, was added to Microsoft's ever-lengthening list of known problems on...

Microsoft CEO Satya Nadella says playing cricket taught him lessons about teamwork and leadership—put your team first, and bring out the best in other people—that have stayed with him throughout his career. Richard Branson says spending several hours a day doing...

A new coalition that includes Google, Nvidia, Anthropic and Emerald AI wants to find 100 GW of grid capacity for new data centers.

Article URL: https://heyjonny.dev/posts/gave-my-ai-agent-a-calendar/ Comments URL: https://news.ycombinator.com/item?id=49740093 Points: 6 # Comments: 0

Over roughly the last two years, a company called Beacon has quietly acquired more than 40 software businesses serving market segments from campgrounds to labor unions to youth sports organizations. Beacon Software spruces up its portfolio companies’ offerings with...

The company is partnering with mobility platform Bolt -- but no vehicle orders have been placed just yet.

Bose announces the Ultra Open (2nd Gen) and the Sport Open Earbuds, offering more options for aware listeners.

Hi HN!flat.social is a fun spatial online meeting app for remote teams and communities. It's largely built like a web multiplayer game, and the 3D virtual spaces are highly customisable with elements and activities (I recently added surfing!).Live demo to try it out:...

Article URL: https://www.newyorker.com/news/q-and-a/how-exactly-could-ai-kill-us Comments URL: https://news.ycombinator.com/item?id=49739982 Points: 20 # Comments: 36

Six different types of hand soap have been recalled due to potential bacteria contamination.  Missouri-based Intercon Chemical Co. first issued a series of voluntary recalls on June 29, collectively impacting over 2,500 cases of hand soap. However, the Food and Drug...

Developer security startup Arcjet Labs Inc. today launched agent runtime security, a new offering that tracks what artificial intelligence agents do once they are running in production systems. Security teams get a list of which agents are active, and each action an...

Compliance automation startup Comp AI today said it has raised $34 million in new funding to advance its software for preparing companies for security audits. Comp AI plans to spend the money on monitoring that keeps running long after an audit is signed off. The...

Watermarks that European law requires be added to AI-generated content to establish provenance may come at a cost. According to Lasso Security, AI model watermarking changes how AI agents handle tools and safety refusals. The altered behavior isn't necessarily worse...

The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure. The post Comp AI Raises $34 Million for AI-Native Compliance and Security appeared first on SecurityWeek.

BCV's latest fund targets early-stage founders harnessing AGI and building the infrastructure to run it efficiently.

Spotify said since changing its video podcasts creator terms in January, its payouts have increased by more than a third.

Cisco admins who have spent their week patching email gateways now face a perfect-10 Identity Services Engine flaw under active attack. Cisco disclosed CVE-2026-76460 on Wednesday, describing it as an authentication bypass affecting Identity Services Engine (ISE) and...