Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

someone at ANTHROPIC just showed CLAUDE finding ZERO DAY vulnerabilities in a live conference demo claude has found zero day in Ghost, 50,000 stars on github, never had a critical security vulnerability in its entire, history... it found the blind SQL injection in 90 minutes, stole the admin api... show more

chiefofautism

25,978 subscribers

1,905,715 views • 5 months ago •via X (Twitter)

News & Politics Science & Technology

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Nicolas Carlini showed Claude can find 0-DAY vulnerabilities, in a live conference demo. it found Autonomously finding a blind SQL injection zero-day (CVE-2026-26980) in Ghost CMS, extracting stole admin API keys without authentication in roughly 90 minutes, marking the platform's first critical vulnerability after 20 years and 50,000+ GitHub stars. Then did the exact same thing to the Linux kernel, it few months older video

Nicolas Carlini showed Claude can find 0-DAY vulnerabilities, in a live conference demo. it found Autonomously finding a blind SQL injection zero-day (CVE-2026-26980) in Ghost CMS, extracting stole admin API keys without authentication in roughly 90 minutes, marking the platform's first critical vulnerability after 20 years and 50,000+ GitHub stars. Then did the exact same thing to the Linux kernel, it few months older video

Md Ismail Šojal 🕷️

15,731 views • 1 month ago

I think we just got a demo of Mythos and I’m surprised nobodies talking about it.. 💔 In what might be the first instance the general public has seen of Claude Mythos Mythos (TBD) just uncovered a critical zero-day vulnerability in Ghost, an open-source platform with over 50,000 stars on GitHub that has never had a critical security flaw in its entire history. It identified a highly complex "blind SQL injection" a flaw so subtle you can't even see the output, only how the server delays its response. When asked to prove the severity of the bug, the model autonomously wrote a custom Python exploit script that successfully navigated the blind injection to extract the admin API key, secret, and password hashes from the database completely unauthenticated… This is genuinely game changing because it proves frontier models can now actively discover, reason through, and successfully build exploits for invisible vulnerabilities in enterprise-grade architecture that human developers missed for years. Cyber security companies are cooked.

I think we just got a demo of Mythos and I’m surprised nobodies talking about it.. 💔 In what might be the first instance the general public has seen of Claude Mythos Mythos (TBD) just uncovered a critical zero-day vulnerability in Ghost, an open-source platform with over 50,000 stars on GitHub that has never had a critical security flaw in its entire history. It identified a highly complex "blind SQL injection" a flaw so subtle you can't even see the output, only how the server delays its response. When asked to prove the severity of the bug, the model autonomously wrote a custom Python exploit script that successfully navigated the blind injection to extract the admin API key, secret, and password hashes from the database completely unauthenticated… This is genuinely game changing because it proves frontier models can now actively discover, reason through, and successfully build exploits for invisible vulnerabilities in enterprise-grade architecture that human developers missed for years. Cyber security companies are cooked.

Chris

291,288 views • 5 months ago

Did Anthropic just quietly hint at AGI? In a recent demo, they showed Claude planning ahead—revising its outputs based on internal decisions. "[This] only makes sense in a world where the models are really thinking in their own way." Probably nothing.

Did Anthropic just quietly hint at AGI? In a recent demo, they showed Claude planning ahead—revising its outputs based on internal decisions. "[This] only makes sense in a world where the models are really thinking in their own way." Probably nothing.

vitrupo

37,745 views • 1 year ago

Someone just shipped a Claude Code skill that uses Cloudflare’s new /crawl endpoint to scrape entire docs sites in one command. In the demo, it pulled 29 pages from the Claude docs in a single shot.

Someone just shipped a Claude Code skill that uses Cloudflare’s new /crawl endpoint to scrape entire docs sites in one command. In the demo, it pulled 29 pages from the Claude docs in a single shot.

0xMarioNawfal

110,677 views • 5 months ago

I just found a way to use Claude Code completely free. Claude Code is Anthropic’s terminal coding agent that usually needs a paid API key to run. But a viral GitHub project called Free Claude Code, now sitting at 37k stars, lets you skip the billing entirely. It works as a tiny proxy that sits between Claude Code and free model providers like NVIDIA NIM, OpenRouter, DeepSeek, and Gemini. Every request Claude Code would send to Anthropic gets quietly rerouted to a free model on the other side. The interface stays the same. What’s actually thinking behind it changes. Setup takes a couple of quick commands and a free API key from NVIDIA NIM or OpenRouter. Paste it into the local dashboard, pick a model, and you’re building. The catch is you’re not really using Claude anymore. But when the code ships, does the model badge matter? -- I have shared the Github Link in my free Whatsapp Community ↓

I just found a way to use Claude Code completely free. Claude Code is Anthropic’s terminal coding agent that usually needs a paid API key to run. But a viral GitHub project called Free Claude Code, now sitting at 37k stars, lets you skip the billing entirely. It works as a tiny proxy that sits between Claude Code and free model providers like NVIDIA NIM, OpenRouter, DeepSeek, and Gemini. Every request Claude Code would send to Anthropic gets quietly rerouted to a free model on the other side. The interface stays the same. What’s actually thinking behind it changes. Setup takes a couple of quick commands and a free API key from NVIDIA NIM or OpenRouter. Paste it into the local dashboard, pick a model, and you’re building. The catch is you’re not really using Claude anymore. But when the code ships, does the model badge matter? -- I have shared the Github Link in my free Whatsapp Community ↓

Vaibhav Sisinty

36,892 views • 2 months ago

An Anthropic engineer just said 90% of their team has moved from self-improving loops to agentic graphs. "No more prompting." She built the entire Claude Code setup live from a blank terminal in 10 minutes. Watch it before everyone else does.

An Anthropic engineer just said 90% of their team has moved from self-improving loops to agentic graphs. "No more prompting." She built the entire Claude Code setup live from a blank terminal in 10 minutes. Watch it before everyone else does.

0xMarioNawfal

51,234 views • 21 days ago

Nebula Security is now backed by Y Combinator. We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone. This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do. Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it. VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too. VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta. Book a demo with us:

Nebula Security is now backed by Y Combinator. We’re celebrating by bringing you the world’s first Android 17 root demo — “IonStack”, a url click can let attacker fully control your phone. This is not only an Android root demo. We’re bringing you a full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 and all Linux distros in 15 years. "IonStack" demonstrates how bad actors can control your phone by sending a malicious URL, but good news, Nebula Security found it before attackers do. Both 0-day were found by our code scanning agent, VEGA, overshadowing any vulnerabilities found by Mythos or any scanner you name it. VEGA has demonstrated its extraordinary capability in finding critical bugs in the world’s most complicated software: operating systems and browsers. It can spot the same vulnerabilities in your codebase too. VEGA support full scan and incremental scan that can integrated into your CI/CD flow. We launched VEGA within YC companies and received overwhelmingly positive feedback. Now it is open to all enterprise customers in private beta. Book a demo with us:

NebuSec

225,207 views • 2 months ago

Anthropic's head of security: "90% of our code is written by Claude. If yours is too and nobody's reviewing it, you're shipping bugs you'll never notice." In 28 minutes he shows the exact security setup Anthropic uses internally to protect their own projects. Watch the full interview, then save the config below 👇

Anthropic's head of security: "90% of our code is written by Claude. If yours is too and nobody's reviewing it, you're shipping bugs you'll never notice." In 28 minutes he shows the exact security setup Anthropic uses internally to protect their own projects. Watch the full interview, then save the config below 👇

darkzodchi

535,705 views • 3 months ago

It started as a small idea to connect AI models to developer workflows. It turned into one of the fastest-growing open standards in the industry. 🚀 Now, the Model Context Protocol is officially joining the The Linux Foundation. Hear from the engineers and maintainers of GitHub, Microsoft, Anthropic, and OpenAI on the journey from day zero to now. 👇

It started as a small idea to connect AI models to developer workflows. It turned into one of the fastest-growing open standards in the industry. 🚀 Now, the Model Context Protocol is officially joining the The Linux Foundation. Hear from the engineers and maintainers of GitHub, Microsoft, Anthropic, and OpenAI on the journey from day zero to now. 👇

GitHub

45,044 views • 8 months ago

ANTHROPIC FOUND THE MOST EXPENSIVE PART OF AI, EVERY EMPLOYEE STARTS FROM ZERO. one person explains the project to Claude. the answer disappears inside a private chat. the next employee opens another Claude and repeats the same context. Claude Tag removes that reset. everyone in a Slack channel works with the same agent. It sees the thread, remembers relevant decisions, uses the tools assigned to that channel and leaves the output where the next person can continue. Anthropic says the internal version already creates 65% of its product team’s code. the model did not suddenly become 65% smarter. the context stopped disappearing between people.

ANTHROPIC FOUND THE MOST EXPENSIVE PART OF AI, EVERY EMPLOYEE STARTS FROM ZERO. one person explains the project to Claude. the answer disappears inside a private chat. the next employee opens another Claude and repeats the same context. Claude Tag removes that reset. everyone in a Slack channel works with the same agent. It sees the thread, remembers relevant decisions, uses the tools assigned to that channel and leaves the output where the next person can continue. Anthropic says the internal version already creates 65% of its product team’s code. the model did not suddenly become 65% smarter. the context stopped disappearing between people.

Myttle

30,351 views • 2 months ago

Anthropic hired this engineer at $250k-$600k/year because he can built projects with zero lines of code - in Claude chat: in this 30-min workshop he showed exactly how, using loops - from 0% to 100% here's workflow, step by step: step 1 → set your rules once at the top: "no preamble, use artifacts, you're a React expert" - every reply after that stays on rails step 2 → load the docs plus a random Medium article about the API - the human explanation teaches it more than the reference step 3 → wrap your ask in XML tags and tell it to ask you questions first. Answer 5, and the scope is locked before a single file exists step 4 → now run the loop: screenshot the broken UI, paste it back, let it fix, screenshot again - each pass gets closer - this is the agentic loop in its simplest form step 5 → push to GitHub, then paste the repo link in - every next loop iteration builds on working code, not chat history most people never did this - it pays for itself on day one watch & bookmark - then read how to get Claude Certified Architect in the article below ↓

Anthropic hired this engineer at $250k-$600k/year because he can built projects with zero lines of code - in Claude chat: in this 30-min workshop he showed exactly how, using loops - from 0% to 100% here's workflow, step by step: step 1 → set your rules once at the top: "no preamble, use artifacts, you're a React expert" - every reply after that stays on rails step 2 → load the docs plus a random Medium article about the API - the human explanation teaches it more than the reference step 3 → wrap your ask in XML tags and tell it to ask you questions first. Answer 5, and the scope is locked before a single file exists step 4 → now run the loop: screenshot the broken UI, paste it back, let it fix, screenshot again - each pass gets closer - this is the agentic loop in its simplest form step 5 → push to GitHub, then paste the repo link in - every next loop iteration builds on working code, not chat history most people never did this - it pays for itself on day one watch & bookmark - then read how to get Claude Certified Architect in the article below ↓

codila

291,670 views • 1 month ago

ex-Anthropic engineer: "I left Anthropic to build agents systems in Google but nothing beats Claude as an agent yet - in coding and tool use, the rest are still behind " in this 90-min podcast, he showed how to build effective agent system with Claude from scratch to get into Anthropic, he hand-coded Karpathy's nanoGPT as a physicist Claude → tools → loops of verification → a real agent and why, at Google, he says Claude is the best watch & bookmark - then read the guide to agent systems ↓

ex-Anthropic engineer: "I left Anthropic to build agents systems in Google but nothing beats Claude as an agent yet - in coding and tool use, the rest are still behind " in this 90-min podcast, he showed how to build effective agent system with Claude from scratch to get into Anthropic, he hand-coded Karpathy's nanoGPT as a physicist Claude → tools → loops of verification → a real agent and why, at Google, he says Claude is the best watch & bookmark - then read the guide to agent systems ↓

codila

127,184 views • 1 month ago

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

someone built an AI RED TEAM that maps your entire attack surface as a knowledge graph, finds every vulnerability, then EXPLOITS them to root access AUTONOMOUSLY its called RedAmon, 9,000 templates. 17 node types, actual Metasploit shells, not reports, no pentesters needed 6 phases of autonomous recon: subdomain discovery, port scanning, http probing, resource enumeration, vulnerability scanning, MITRE mapping every finding stored in a Neo4j graph with 17 node types and 20+ relationship types. the AI reasons about the graph, finds attack paths, and runs actual Metasploit exploits, actual shells stress-tested with zero vulnerability data, zero exploit modules, one instruction find a CVE and exploit it, it went from empty database to root-level RCE in 20 steps, researched the exploit on the web, crafted a custom deserialization payload, debugged itself when the first attempt failed next try, the server responded with root access, the highest privilege level on any Linux system. full control over everything the target was running node-serialize 0.0.4, a package with a critical deserialization flaw (CVE-2017-5941, CVSS 9.8), the server takes your cookie, decodes it, and passes it straight into unserialize() which executes any code inside it, the AI figured this out on its own with no hints built on LangGraph + MCP tool servers for naabu, nuclei, curl, metasploit. hunts leaked secrets across GitHub repos, 40+ regex patterns for AWS keys, Stripe tokens, database creds

chiefofautism

70,129 views • 6 months ago

AI giant Anthropic says its new model, Claude Mythos Preview, is so good at coding that it could pose a cybersecurity threat in the wrong hands. The company says it's already found thousands of software vulnerabilities. Cyberattacks can impact critical infrastructure— from healthcare systems to government agencies. The announcement of the model been met with a mix of alarm and optimism— and sparked skepticism in some who question the its full capabilities. CBS News’ Lauren Fichten explains.

AI giant Anthropic says its new model, Claude Mythos Preview, is so good at coding that it could pose a cybersecurity threat in the wrong hands. The company says it's already found thousands of software vulnerabilities. Cyberattacks can impact critical infrastructure— from healthcare systems to government agencies. The announcement of the model been met with a mix of alarm and optimism— and sparked skepticism in some who question the its full capabilities. CBS News’ Lauren Fichten explains.

CBS News

22,643 views • 4 months ago

📁 Boris Cherny, engineer at Anthropic, says 100% of his code is written by Claude. He ships 10 to 30 pull requests a day and has not edited a single line by hand in months. Claude writes it. Claude reviews it. Humans are still in the loop, but they are no longer the ones typing.

📁 Boris Cherny, engineer at Anthropic, says 100% of his code is written by Claude. He ships 10 to 30 pull requests a day and has not edited a single line by hand in months. Claude writes it. Claude reviews it. Humans are still in the loop, but they are no longer the ones typing.

Jon Hernandez

22,274 views • 6 months ago

Anthropic CEO Dario Amodei: "The cheapest way to use Claude is also the smartest. Most devs do the exact opposite." In 36 minutes, he breaks down the real economics behind every Claude model, and why running them all the same way is a mistake. Watch the full interview, then save the config below 👇

Anthropic CEO Dario Amodei: "The cheapest way to use Claude is also the smartest. Most devs do the exact opposite." In 36 minutes, he breaks down the real economics behind every Claude model, and why running them all the same way is a mistake. Watch the full interview, then save the config below 👇

darkzodchi

1,003,513 views • 3 months ago

An OpenAI researcher sat down next to me at a coffee shop in Mission District I had my terminal open. Three panels. Live trades scrolling. He was reading something on his laptop. Glanced over. Stopped reading. "That's not a dashboard. That's a live scoring engine. What model is running that" I told him. Claude Code. Four repos. $25 a month. He closed his laptop. "I work at OpenAI. We benchmarked Claude internally last month. You're using it to trade prediction markets?" I opened one link. 86 million trades. Every wallet. Every entry. Every exit. The entire Polymarket history since day one. "This is public? We quoted a seven-figure budget to reconstruct this kind of dataset from on-chain data. The project is still in review" I told him Claude Code connects directly. It reads the whole dataset. Finds the wallets that win. Then finds WHY they win. Then copies the pattern. He pulled his chair closer. "Walk me through the exit logic" Top wallets exit before resolution 91% of the time. They capture 86% of the move and cut losers at 12%. Everyone else holds to 58%. Same entries. Completely different exits. My bot cuts at 85% of expected move. Or on a 3x volume spike. Whichever hits first. "Who gave you that threshold" Claude Code found it in poly_data. In about 20 minutes. "We had a team of nine working on this exact problem for six months. They never shipped it. You did it in a weekend with a competitor's model" I opened another link. Three commands. 500+ markets. No API key. Claude scores them in 20 minutes. "That's our internal eval pipeline. Except it took us six months and you built it on a Saturday" My setup: Claude API - $20/mo VPS - $5/mo poly_data - free polymarket-cli - free 19 days. 4 agents. 74% win rate. +$9,400. Copytrade here: I showed him the article where I broke down every repo, every command, every dollar. He read it for five minutes. Then looked up. "You just published what we presented to Sam last quarter. Using the other team's model" He texted me the next morning. "My director found your thread. Take it down" Too late.

An OpenAI researcher sat down next to me at a coffee shop in Mission District I had my terminal open. Three panels. Live trades scrolling. He was reading something on his laptop. Glanced over. Stopped reading. "That's not a dashboard. That's a live scoring engine. What model is running that" I told him. Claude Code. Four repos. $25 a month. He closed his laptop. "I work at OpenAI. We benchmarked Claude internally last month. You're using it to trade prediction markets?" I opened one link. 86 million trades. Every wallet. Every entry. Every exit. The entire Polymarket history since day one. "This is public? We quoted a seven-figure budget to reconstruct this kind of dataset from on-chain data. The project is still in review" I told him Claude Code connects directly. It reads the whole dataset. Finds the wallets that win. Then finds WHY they win. Then copies the pattern. He pulled his chair closer. "Walk me through the exit logic" Top wallets exit before resolution 91% of the time. They capture 86% of the move and cut losers at 12%. Everyone else holds to 58%. Same entries. Completely different exits. My bot cuts at 85% of expected move. Or on a 3x volume spike. Whichever hits first. "Who gave you that threshold" Claude Code found it in poly_data. In about 20 minutes. "We had a team of nine working on this exact problem for six months. They never shipped it. You did it in a weekend with a competitor's model" I opened another link. Three commands. 500+ markets. No API key. Claude scores them in 20 minutes. "That's our internal eval pipeline. Except it took us six months and you built it on a Saturday" My setup: Claude API - $20/mo VPS - $5/mo poly_data - free polymarket-cli - free 19 days. 4 agents. 74% win rate. +$9,400. Copytrade here: I showed him the article where I broke down every repo, every command, every dollar. He read it for five minutes. Then looked up. "You just published what we presented to Sam last quarter. Using the other team's model" He texted me the next morning. "My director found your thread. Take it down" Too late.

Lunar

159,690 views • 4 months ago

🚨APPLE SPENT 5 YEARS AND BILLIONS OF DOLLARS BUILDING THE MOST ADVANCED SECURITY SYSTEM IN CONSUMER HISTORY.. AN AI BROKE IT IN 5 DAYS.. Here’s what just happened.. Apple built something called Memory Integrity Enforcement for its new M5 chips.. It’s a hardware-level security system that attaches secret cryptographic tags to every piece of memory.. If a hacker tries to access memory they shouldn’t.. The chip blocks it instantly.. Every known exploit chain against iOS and macOS was rendered obsolete overnight.. Apple said so themselves.. Then a small team at a cybersecurity firm called Calif used Anthropic’s unreleased Claude Mythos Preview to find vulnerabilities in the macOS kernel.. The AI found the bugs almost instantly.. Because once it learned the pattern of a specific type of flaw.. It could recognize every other flaw in that same class across the entire codebase.. What used to take elite security teams months.. The AI did in hours.. Within 5 days.. The team had a fully working exploit that escalated a basic user account to full root access on an M5 Mac running the latest macOS.. With MIE fully enabled.. The billion-dollar hardware defense running at full strength.. The trick.. They didn’t fight the hardware.. They went around it.. MIE is designed to catch memory corruption.. Hackers trying to overwrite pointers or inject code.. The team used a “data-only” approach instead.. They manipulated legitimate data structures the hardware was never designed to monitor.. Like changing an internal flag from “standard user” to “admin”.. The chip saw a perfectly normal operation.. The operating system obeyed.. And the attacker had total control.. The hardware thought everything was fine.. Because technically it was.. The exploit never triggered a single tag mismatch.. They walked into Apple Park and hand-delivered a 55-page report.. Apple patched it in macOS 26.5.. And for the first time ever.. Apple’s official security advisory credited the vulnerability discovery to “Calif dot io in collaboration with Claude and Anthropic Research”.. An AI is now credited in Apple’s CVE patches.. But here’s what makes this story truly terrifying.. Before MIE existed.. An exploit kit called DarkSword was hitting iPhones with zero-click attacks.. Six vulnerabilities chained together.. Total device control just from visiting a webpage.. Deployed by Russian espionage groups, Turkish surveillance vendors, and actors in Saudi Arabia.. Then it got leaked on GitHub.. Nation-state capabilities.. Free for anyone.. MIE was supposed to make all of that impossible.. And an AI found a way around it in 5 days.. The previous model.. Claude Opus 4.6.. Found 22 security bugs in the Firefox codebase.. Claude Mythos Preview found 271 in the same environment.. A tenfold increase.. Linux kernel CVEs jumped from 300 per year to over 5,500.. Largely driven by AI-powered vulnerability research.. The IMF designated Claude Mythos as a systemic financial stability risk.. Because if an AI finds a flaw in software used by every major bank simultaneously.. It could trigger a cascading financial crisis.. Anthropic knew this was coming.. That’s why they didn’t release the model publicly.. Instead they launched Project Glasswing.. Giving defensive access to AWS, Apple, Google, Microsoft, Nvidia, CrowdStrike, JPMorgan, and others.. $100 million in usage credits.. So defenders can scan their own systems before attackers get this capability.. The Pentagon blacklisted Anthropic over autonomous weapons.. Then quietly started using Mythos to harden government systems anyway.. The cybersecurity arms race just changed permanently.. Hardware can’t save you.. Software can’t save you.. The only defense against an AI that finds vulnerabilities is another AI that finds them first.. Five years and billions of dollars.. Five days and one AI.

🚨APPLE SPENT 5 YEARS AND BILLIONS OF DOLLARS BUILDING THE MOST ADVANCED SECURITY SYSTEM IN CONSUMER HISTORY.. AN AI BROKE IT IN 5 DAYS.. Here’s what just happened.. Apple built something called Memory Integrity Enforcement for its new M5 chips.. It’s a hardware-level security system that attaches secret cryptographic tags to every piece of memory.. If a hacker tries to access memory they shouldn’t.. The chip blocks it instantly.. Every known exploit chain against iOS and macOS was rendered obsolete overnight.. Apple said so themselves.. Then a small team at a cybersecurity firm called Calif used Anthropic’s unreleased Claude Mythos Preview to find vulnerabilities in the macOS kernel.. The AI found the bugs almost instantly.. Because once it learned the pattern of a specific type of flaw.. It could recognize every other flaw in that same class across the entire codebase.. What used to take elite security teams months.. The AI did in hours.. Within 5 days.. The team had a fully working exploit that escalated a basic user account to full root access on an M5 Mac running the latest macOS.. With MIE fully enabled.. The billion-dollar hardware defense running at full strength.. The trick.. They didn’t fight the hardware.. They went around it.. MIE is designed to catch memory corruption.. Hackers trying to overwrite pointers or inject code.. The team used a “data-only” approach instead.. They manipulated legitimate data structures the hardware was never designed to monitor.. Like changing an internal flag from “standard user” to “admin”.. The chip saw a perfectly normal operation.. The operating system obeyed.. And the attacker had total control.. The hardware thought everything was fine.. Because technically it was.. The exploit never triggered a single tag mismatch.. They walked into Apple Park and hand-delivered a 55-page report.. Apple patched it in macOS 26.5.. And for the first time ever.. Apple’s official security advisory credited the vulnerability discovery to “Calif dot io in collaboration with Claude and Anthropic Research”.. An AI is now credited in Apple’s CVE patches.. But here’s what makes this story truly terrifying.. Before MIE existed.. An exploit kit called DarkSword was hitting iPhones with zero-click attacks.. Six vulnerabilities chained together.. Total device control just from visiting a webpage.. Deployed by Russian espionage groups, Turkish surveillance vendors, and actors in Saudi Arabia.. Then it got leaked on GitHub.. Nation-state capabilities.. Free for anyone.. MIE was supposed to make all of that impossible.. And an AI found a way around it in 5 days.. The previous model.. Claude Opus 4.6.. Found 22 security bugs in the Firefox codebase.. Claude Mythos Preview found 271 in the same environment.. A tenfold increase.. Linux kernel CVEs jumped from 300 per year to over 5,500.. Largely driven by AI-powered vulnerability research.. The IMF designated Claude Mythos as a systemic financial stability risk.. Because if an AI finds a flaw in software used by every major bank simultaneously.. It could trigger a cascading financial crisis.. Anthropic knew this was coming.. That’s why they didn’t release the model publicly.. Instead they launched Project Glasswing.. Giving defensive access to AWS, Apple, Google, Microsoft, Nvidia, CrowdStrike, JPMorgan, and others.. $100 million in usage credits.. So defenders can scan their own systems before attackers get this capability.. The Pentagon blacklisted Anthropic over autonomous weapons.. Then quietly started using Mythos to harden government systems anyway.. The cybersecurity arms race just changed permanently.. Hardware can’t save you.. Software can’t save you.. The only defense against an AI that finds vulnerabilities is another AI that finds them first.. Five years and billions of dollars.. Five days and one AI.

Evan Luthra

91,160 views • 3 months ago

This video has been making the rounds stating that "the west never found an equal" to a Mig-23. Well that is true: in Lebanon, upon the Israeli Intervention in 82, NATO showed they never had a plane that was shotdown that much in a single day as the 23

This video has been making the rounds stating that "the west never found an equal" to a Mig-23. Well that is true: in Lebanon, upon the Israeli Intervention in 82, NATO showed they never had a plane that was shotdown that much in a single day as the 23

Air Safety #OTD by Francisco Cunha

364,137 views • 8 months ago