Hackerone
PulseAugur coverage of Hackerone — every cluster mentioning Hackerone across labs, papers, and developer communities, ranked by signal.
4 day(s) with sentiment data
-
AI-generated 'slop' overwhelms bug bounty programs, shifting scarcity to analyst time
Bug bounty programs are facing a significant challenge due to the rise of AI-generated "slop" in security vulnerability reports. While AI has increased the volume of submissions, it has also made it harder for security …
-
Cloudflare GLM-5.3 model leaked tenant KV cache data due to SGLang bug
Cloudflare experienced a data leak between August and September 2026, where fragments of one tenant's KV cache state were exposed in 155 responses from its GLM-5.3 model on Workers AI. This occurred due to a combination…
-
Cloudflare Workers AI leaks customer data due to GLM-5.3 KV cache bug
A critical bug in Cloudflare Workers AI, affecting the GLM-5.3 model, led to the leakage of 155 customer responses between August 27 and September 9. The issue stemmed from the inference engine serving stale KV cache pa…
-
Cloudflare GLM-5.3 model leaked customer data due to KV cache flaw
Cloudflare experienced a security incident where a tenant isolation flaw in its GLM-5.3 model, hosted on Workers AI, allowed prompts longer than 681,280 tokens to return data from other customers' sessions. The issue st…
-
AI-assisted PS5 exploit discovery prevents GTA 6 piracy, divides hackers
A recent hypervisor exploit discovered for the PlayStation 5, reportedly found with the assistance of AI, has created a divide within the homebrew community. While this exploit could have allowed for the pirating of Gra…
-
China's 'Open Weight' AI showcased in hacking competition
A recent hacking competition highlighted the capabilities of China's "open weight" AI models, demonstrating their potential for both innovation and security challenges. The event, organized by Hackerone, showcased how t…
-
Hackers compromise OpenAI employee accounts via forum vulnerability
Hackers successfully exploited two critical vulnerabilities to gain access to multiple OpenAI employees' ChatGPT and Codex accounts on July 25, 2026. This access allowed them to view internal OpenAI repositories, and th…
-
Anthropic's Claude Code vulnerable to Git sandbox escape (CVE-2026-55607)
A critical sandbox escape vulnerability (CVE-2026-55607) has been discovered in Anthropic's Claude Code, allowing malicious repositories to execute arbitrary code on a user's system. The vulnerability, reported by secur…
-
AI agents revolutionize security testing, discovering thousands of vulnerabilities
AI-driven agents are revolutionizing security testing, moving from auxiliary tools to autonomous hunters. Systems like XBOW have topped bug bounty leaderboards, discovering thousands of vulnerabilities at a fraction of …
-
Claude Code Windows Config Vulnerability Patched by Anthropic
A security vulnerability, CVE-2026-35603, has been identified in Claude Code on Windows, allowing local users to potentially execute arbitrary code. The issue stemmed from Claude Code loading its configuration file from…
-
Autonomous AI systems now complete complex projects without human oversight · 1 source tracked
Autonomous AI systems are evolving beyond traditional agents, capable of completing complex tasks over extended periods without human intervention. Companies like Blitzy are using this technology to modernize legacy cod…
-
AI cybersecurity agents offer SMBs enhanced defense against escalating threats
Small and medium-sized businesses (SMBs) are disproportionately targeted by cyberattacks, with AI-powered threats exacerbating the problem. A significant majority of ransomware attacks and cybercrimes now affect SMBs du…
-
HackerOne pivots to AI security, shifting focus from bug bounties
HackerOne, once a pioneer in bug bounty hunting, has evolved into a broader AI security platform. While still facilitating bug submissions, the company's focus has shifted towards automated security workflows, including…
-
HackerOne's market share and influence decline
HackerOne, a prominent bug bounty platform, appears to be facing significant challenges, with its market share and influence diminishing. The article suggests that while HackerOne was once a leader in the cybersecurity …
-
Anthropic details Fable 5 jailbreak severity scale and safety measures
Anthropic has detailed its new Cyber Jailbreak Severity (CJS) scale for its Fable 5 model, introducing a four-tiered system to classify and score jailbreak attempts. This scale, ranging from 0 to 4, evaluates the seriou…
-
Anthropic proposes AI jailbreak severity scale modeled on CVEs
Anthropic has introduced a new framework called the Cyber Jailbreak Severity (CJS) scale, designed to classify the danger of AI jailbreaks similarly to how CVEs grade software vulnerabilities. This system ranges from CJ…
-
Anthropic unveils Cyber Jailbreak Severity scale and classifier taxonomy
Anthropic has released a new framework for classifying and rating AI jailbreaks, called the Cyber Jailbreak Severity (CJS) scale. This scale categorizes jailbreaks from CJS-0 to CJS-4 based on factors like capability ga…
-
Anthropic redeploys Fable 5 model with tiered access and security program
Anthropic is redeploying its Fable 5 model across its platforms, including Claude.ai, Claude Code, and Claude Cowork. Through July 7th, Pro, Max, Team, and some Enterprise users will receive Fable 5 access as part of th…
-
AI agents to automate security training based on real-time vulnerability detection
The article proposes an integrated approach to security training for developers, moving beyond traditional compliance-focused methods. It suggests using AI agents, specifically within platforms like HackEDU and integrat…
-
OpenAI launches GPT-5.5-Cyber and Daybreak for automated security patching · 8 sources tracked
OpenAI has launched a new cybersecurity initiative called Daybreak, featuring its most advanced cyber model, GPT-5.5-Cyber. This initiative aims to automate the patching of software vulnerabilities, particularly within …