Encryption, Spyware, and Now Mythos: Why Cyber Export Controls Don't Work
TechCrunch AI38 days agoCommentaryThree decades of failed attempts to restrict cybersecurity software exports — from encryption to spyware — anchor TechCrunch's skeptical take on controlling AI tools. Anthropic's Mythos, a model trained specifically for cybersecurity tasks, has renewed the policy debate. The article argues export controls are structurally ill-suited to dual-use technologies and will prove as ineffective with AI as they did with their predecessors.
Cloudflare Marks 12 Years of Project Galileo With First Civil Society Cyberattack Report
Cloudflare Blog40 days agoBusinessCloudflare is celebrating the 12th anniversary of Project Galileo, its program delivering free enterprise-grade cybersecurity to at-risk civil society organizations worldwide. To commemorate the milestone, the company has published its first comprehensive report analyzing cyberattacks targeting nonprofits, journalists, human rights groups, and similar organizations. The report offers rare, systematic visibility into the threat landscape facing civil society infrastructure, a segment chronically underrepresented in mainstream security research.
"Dangerous" AI Models Are Coming No Matter What
Ars Technica AI40 days agoCommentaryA June 2026 Ars Technica commentary argues that AI models with advanced hacking capabilities are not a distant or preventable future — they are an imminent norm. The piece challenges the implicit optimism behind regulatory frameworks and voluntary industry commitments, suggesting these safeguards are insufficient to halt the trajectory. For developers, security practitioners, and policymakers, the framing is a call to plan for a world where dangerous AI capabilities are widespread, not to prevent it from arriving.
FIFA World Cup Broadcast System Had Critical Access Control Flaw Letting Anyone Take Over
INSIDE 硬塞 AI41 days agoIncidentA security researcher disclosed a critical broken access control vulnerability in FIFA's internal World Cup broadcast system. Because the backend API performed no authorization verification, any registered user could gain full administrative access to the live broadcast backend. This would have allowed modification of real-time video streams and match data; FIFA says the flaw has since been patched.
Cybersecurity Vets Protest 'Dangerous' US Export Ban on Anthropic's Fable and Mythos
TechCrunch AI42 days agoRegulationA coalition of cybersecurity professionals has formally protested a US government export control ban on Anthropic's most capable models — Fable and Mythos — calling it 'dangerous.' The experts argue the restrictions will hamper defenders' ability to secure critical software and products. The letter signals growing practitioner pushback against AI export policies that critics say create asymmetric disadvantages for those working to defend against sophisticated cyber threats.
Defending Against Frontier Cyber Models: Cloudflare's Project Glasswing Architecture★ 70
Cloudflare Blog49 days agoCommentaryCloudflare introduces its defense architecture under Project Glasswing, arguing that robust architectural defense around vulnerabilities is more critical than patching speed. By acting as its own "customer zero," Cloudflare demonstrates how to mitigate autonomous frontier cyber models through edge-based isolation, zero-trust principles, and proactive traffic filtering.
Turning Cloudflare’s threat indicators into real-time WAF rules
Cloudflare Blog50 days agoReleaseCloudflare customers can now apply Cloudforce One threat intelligence inside the WAF to block high-risk traffic. New cf.intel fields let security teams automate protections based on specific threat actors and targeted industries. The update turns threat indicators into real-time enforcement signals, reducing the gap between intelligence and active blocking.
U.S. Military Turned GPS into a Global "Numbers Station"
Hacker News (AI keywords)52 days agoCommentaryAccording to investigative outlet 404 Media, evidence suggests the U.S. military has repurposed the Global Positioning System (GPS) into a modern "numbers station." By embedding encrypted data within standard GPS broadcasts, the military can securely transmit covert messages to agents or assets worldwide. This technique leverages existing satellite infrastructure to achieve global coverage with near-perfect receiver anonymity.
Trend Micro Joins Anthropic Project Glasswing to Defend Taiwan’s AI Supply Chain★ 72
INSIDE 硬塞 AI53 days agoBusinessAnthropic introduced Project Glasswing after Claude Mythos Preview showed the ability to rapidly find high-risk vulnerabilities and generate connected attack commands. Trend Micro’s TrendAI has joined the framework, becoming the first Taiwanese cybersecurity vendor to do so. The article frames the move around Taiwan’s strategic AI hardware role and a new defensive logic: using AI to counter malicious AI.
Cyera eyes $12B valuation at 80x ARR multiple despite operating losses
TechCrunch AI55 days agoBusinessTechCrunch reports that cybersecurity company Cyera is nearing a $300 million funding round led by Evolution Equity Partners. The deal could value the company at around $12 billion, or roughly 80 times ARR. The report highlights that this high valuation is being pursued despite operating losses, underscoring investor appetite for fast-growing cybersecurity businesses.
Trump Signs Executive Order to Review AI Models Before Release★ 76
The Verge AI55 days agoRegulationPresident Donald Trump signed an executive order establishing a voluntary framework for AI companies. Companies may share frontier models with the federal government before public release. The order frames the initiative as a way to promote secure innovation and strengthen cybersecurity for critical infrastructure, while avoiding measures that stifle the US AI industry.
Anthropic scales Claude Mythos to critical infrastructure in 15+ countries★ 72
TechCrunch AI55 days agoBusinessAnthropic is expanding its Project Glasswing security vulnerability program and access to Mythos. The rollout covers 150 organizations across 15 countries, focusing on power, water, healthcare, and communications infrastructure. The company is targeting sectors where a cyberattack could affect as many as 100 million people, although implementation details and participating organizations were not disclosed in the provided text.
From Map Data to National Security: A Deep Dive into Amap Risks in Taiwan★ 74
INSIDE 硬塞 AI60 days agoRegulationINSIDE examines how China’s Amap has become controversial in Taiwan beyond ordinary mapping or navigation use. The article says its service relies on user data and AI-based inference rather than full official data integrations. That model could send movement traces and behavioral signals back to China, creating risks for hybrid warfare intelligence, influence operations, and Taiwan’s broader governance of map data and digital infrastructure.
Import AI 457：AI 版 Stuxnet 震網病毒、神祕的 Muon 優化器，以及積極對齊（Positive Alignment）★ 78
Import AI (Jack Clark)71 days agoCommentaryThis issue of Import AI 457, written by Jack Clark, delves into three forward-looking and stylistically distinct topics in the field of artificial…
漏洞賞金計劃遭大量「AI 垃圾報告」轟炸，企業安全團隊不堪重負★ 70
Ars Technica AI71 days agoIncidentAccording to a report by Ars Technica, corporate bug bounty programs are currently being bombarded with an "endless" stream of AI-generated junk reports (AI…
AI 與網路安全的未來：為什麼「開放」至關重要★ 75
Hugging Face Blog98 days agoOpinionAs artificial intelligence (AI) technology undergoes explosive growth, cybersecurity has become a focal point of concern for governments and enterprises…
Import AI 452：網路戰的縮放定律、AI 自動化浪潮與 GDP 預測之謎★ 75
Import AI (Jack Clark)113 days agoCommentaryThis issue of Import AI 452, written by Jack Clark, takes a deep dive into the far-reaching impact of artificial intelligence on three major areas: national…
Import AI 450：中國電子戰 AI 模型、受創傷的 LLM 與網路攻擊的規模法則★ 75
Import AI (Jack Clark)127 days agoCommentaryIn this issue of Import AI 450, author Jack Clark explores three key topics with profound implications for the future of technology, security, and geopolitics…
Import AI 442：AI 經濟中的贏家與輸家、數學證明自動化，以及網路間諜活動的工業化★ 75
Import AI (Jack Clark)183 days agoCommentaryIn this issue of Import AI 442, Jack Clark raises a core fundamental question: "Will the arrival of superintelligence be an instantaneous 'phase change,' or a…
Import AI 438：無聲的警報，為我們所有人閃爍（網路安全能力過剩與對話隱私）★ 75
Import AI (Jack Clark)218 days agoCommentaryIn this issue of Import AI 438, Jack Clark examines two key issues concerning AI security and privacy: **1. You Are Your LLM History** As large language models…