Pulse

An AI system has successfully solved a long-standing mathematical problem posed by Paul Erdős, specifically the "Happy Ending Problem" in Euclidean geometry. This achievement has prompted mathematicians and AI experts to call for the development of ethical guidelines and safety measures for AI in scientific research. The concern is that AI could potentially solve complex problems faster than humans, raising questions about the future role of human researchers and the need for responsible AI deployment in academia. AI

A community bank has revealed a significant data breach that was not caused by external hackers but by an employee using an unauthorized AI tool. The employee fed sensitive customer data into the AI, leading to a material cybersecurity incident. This event highlights the risks associated with employees using unapproved AI applications in the financial sector. AI

A new benchmark called ExpertQA, developed in 2024, evaluates Large Language Models by having 484 experts pose questions within their specialized fields. These experts then meticulously grade the LLM-generated answers, assessing each claim for support and reliability. The benchmark revealed that even well-written answers often contain unsupported claims, and in the medical domain, approximately half of the cited sources were deemed unreliable by experts. AI

Aether is a new on-device AI agent for Android, developed by Zhou-Shilin. It prioritizes user privacy by processing data locally, avoiding cloud transfers. The project aims for versatility, capable of tasks ranging from organizing information to generating content. AI

Collabora has launched CODE 26.04, an update to its LibreOffice-based online suite that includes optional AI features and enhanced collaboration tools. This release aims to boost document interoperability and Markdown support, positioning itself within Europe's drive for digital sovereignty. Meanwhile, Meta has removed facial-recognition code from its smart glasses app following public backlash over privacy concerns. AI

Google is implementing AI-driven scam detection to combat deepfake voice impersonation in calls. This new system aims to identify and block fraudulent calls before they can harm users. Ombra is also contributing to this effort with its Face1st technology, which enhances facial recognition security by detecting spoofing attempts. AI

BT Group has partnered with Anthropic to integrate the Claude Mythos Preview AI model into its operations. This collaboration, part of Anthropic's Project Glasswing, aims to enhance BT's internal security measures and its services offered to commercial clients. The deployment will leverage Claude Mythos for improved cybersecurity and other enterprise AI applications within the telecommunications giant. AI

Anthropic's Claude AI has been used to rapidly generate exploits for known software vulnerabilities, significantly reducing the time from vulnerability disclosure to weaponization. This advancement poses a serious threat to cybersecurity by compressing the already tight patch windows for critical vulnerabilities. The ability to quickly create working exploits means that the gap between a patch being available and it being deployed by organizations is now under immense pressure. AI

A North Korean hacking group, FAMOUS CHOLLIMA, is responsible for nearly half of all state-sponsored cyberattacks targeting technology companies. This unit employs AI-generated deepfakes to impersonate individuals during remote job interviews. Their ultimate goal is to infiltrate companies and steal cryptocurrency from within. AI

Meta has confirmed that a flaw in its AI-powered support chatbot led to the compromise of over 20,000 Instagram accounts. The issue allowed unauthorized access to user accounts, highlighting potential security vulnerabilities in AI integration. This incident raises concerns about the security implications of deploying AI chatbots for customer support. AI

ArgusRed has developed a post-trained AI model capable of performing penetration tests on code, a departure from models that typically refuse to analyze potentially vulnerable code. This new model aims to proactively identify security flaws rather than simply rejecting code that might be risky. The development focuses on enhancing code security through automated vulnerability assessment. AI

A security breach at Microsoft has led to the distribution of malware targeting users of AI models like Claude and Gemini. This incident highlights the growing risks associated with AI-powered tools and the platforms that host them. Separately, concerns are rising over the misuse of AI for creating deepfakes, particularly impacting K-pop idols, and the broader implications for identity control in the age of AI agents. AI

Microsoft's cloud infrastructure was compromised, allowing threat actors to distribute malware to users of AI services like Anthropic's Claude and Google's Gemini. The attackers exploited a misconfiguration in Microsoft's systems, which inadvertently exposed credentials. This breach highlights the security risks associated with the growing reliance on AI platforms. AI

A new analysis reveals that readily available social media photos, combined with facial recognition technology, can create a powerful surveillance tool. Researchers demonstrated that by using images from platforms like Instagram and Mastodon, they could identify individuals and build extensive facial databases. This "homemade" facial recognition system, leveraging over 412,000 faces, raises significant privacy concerns. AI

Atsign has launched a new platform called AI Architect that uses cryptographic invisibility to secure AI-driven applications. This technology aims to protect AI agents and their associated applications from unauthorized access and manipulation. The platform is designed to enhance the security posture of AI systems by embedding cryptographic protections directly into their architecture. AI

A professor from Tohoku University, Naoki Kuramoto, has raised concerns about the necessity of strict identity verification methods, such as facial or fingerprint recognition, for fair university entrance exams. This discussion is prompted by an incident where AI-generated photos bypassed initial identity checks at Kindai University. The situation highlights the growing challenge of preventing impersonation in academic settings due to advancements in AI technology. AI

Microsoft has disabled 73 GitHub repositories due to a malware attack that targeted AI users. The malware was designed to steal user credentials, compromising accounts that interacted with AI-related tools. This incident highlights the security risks associated with AI development and usage. AI

Hackers have exploited Meta's AI support assistant to gain unauthorized access to Instagram accounts. The attackers used a VPN to mask their location, then initiated a password reset and interacted with the AI chatbot to complete the process. This method allowed them to seize control of user accounts. AI

Meta's AI customer support chatbot was recently tricked into helping users reset their Instagram account access. While AI offers benefits like 24/7 availability, this incident highlights its naivety in handling sensitive processes. The AI's susceptibility to social engineering suggests caution when deploying it for critical functions like identity verification or account access. AI

Deno has released ClawPatrol, an open-source security firewall designed to protect AI agents. This tool acts as an intermediary, inspecting traffic and enforcing custom rules to prevent unauthorized actions. ClawPatrol addresses the risk of API key exposure and accidental or malicious modifications to production environments by parsing agent communications. AI

OpenAI has introduced a new "Lockdown Mode" feature aimed at preventing its AI models from generating harmful or inappropriate content. This feature is designed to address concerns about the potential misuse of AI and to ensure safer interactions with the technology. The move comes as AI safety and responsible development remain critical areas of focus for the company and the broader industry. AI

Microsoft has temporarily disabled dozens of its open-source projects on GitHub following a security breach. Hackers reportedly injected malware into these tools, which are used by AI developers, to steal user passwords and credentials. This incident marks a second breach of Microsoft's open-source projects in recent weeks, raising concerns about the security of software supply chains. AI