AI
The AI Review Framework Is Done. You Can't Read It.
The pre-release review framework from Trump's June AI order is finished. The labs have seen it; the public never will — much of it is classified.
Cybersecurity
Healthcare IT
AnMed Cyberattack Day 5: The Clinics Are Open, Imaging Isn't
On day five, 93 of AnMed's 107 listed locations are open. Almost every closure left on the board is a diagnostic service, and the pattern is the lesson.
AI
The White House Puts AI Bug-Hunters and Hospitals in One Room
The AI cybersecurity clearinghouse ordered in June is now a standing coordination group: AI developers and critical-infrastructure operators — hospitals included — sharing the vulnerabilities AI finds. The six weeks between the order and the table showed exactly why it exists.
Technology
JadePuffer: The First Ransomware Attack Run Entirely by AI
JadePuffer is the first ransomware attack run end-to-end by an AI agent, with no human operator. The break-in techniques were old; the operator wasn't.
Technology
FortiBleed Leak Hits 74,000 Fortinet Firewalls: What to Do
A leaked database of working Fortinet VPN and admin credentials — CISA counts roughly 74,000 affected devices — is being used to break into networks. Upgrading FortiOS doesn't retroactively fix the weak password hashes; here's what to check and do.
AI
Anthropic Releases Fable 5, With Opus as the Backstop
Anthropic's most powerful public model matches or beats Opus across the board — then quietly hands its riskiest queries back to Opus to keep them safe.
AI
An AI Probably Approved Me to Research Vulnerabilities
Claude blocked a routine web search about an npm vulnerability and pointed me to Anthropic's Cyber Verification Program. I applied out of curiosity — and the approval came back so fast that a human almost certainly never read it.
AI
Trump's New AI Order Wants a Look, Not a License
Trump signed an order asking AI companies to voluntarily hand the government a 30-day look at their most powerful models before release. It explicitly bars any mandatory licensing — making the whole thing a request, not a rule.
Technology
Meta's AI Support Bot Reset Instagram Passwords for Strangers
An attacker took over Instagram accounts by asking Meta's AI support assistant to add an email and issue a password reset — no phishing, no breach. The damage was small. The mechanism is the warning.
Technology
Dirty Frag's Patch Spawned Fragnesia, a New Linux Root Bug
The patch for a Linux root exploit called Dirty Frag turned out to hide a second one. Fragnesia was found by an AI auditing tool — a clean illustration of why the page-cache-write bug class keeps outrunning the people patching it.