
Attacker drained configs and root hashes from 996 Zyxel switches; CISA gives agencies until Thursday
CVE-2026-7273 was patched in June, but GreyNoise says exploitation began around August 17 across 48 countries.
Tuesday, September 22, 2026

A new group hosted at the Institute for Advanced Study can comment on results and go public with its views, but cannot slow the research it is reviewing.

CVE-2026-7273 was patched in June, but GreyNoise says exploitation began around August 17 across 48 countries.

Patrick Wardle says an undocumented dictation setting can be rewritten by any local process, redirecting a user's spoken audio to an attacker's server.

A larger base model and a longer reinforcement learning run leave the flagship mid-pack, and far back in agentic coding.

Co-chair Yoshua Bengio says a real deployed system combined a misaligned goal, the means to pursue it and a permissive environment for the first time.

Bessent's proposed notification mechanism for national-security AI incidents is now attached to a standing channel, with chip export controls left out of the talks.

The San Francisco-area facility moves the company's life sciences work off simulation, with human oversight retained for safety and no clinical trials planned.

The California package targets energy and water use and is aimed at keeping utility costs off residents' bills.