@BugtraqSolution

Ciberseguridad, automatización e integraciones con IA. Tecnología propia. Resultados medibles.

 Madrid
bugtraqsolutions.com
Joined February 2012
  • Tweets3K
  • Following210
  • Followers2.7K
220Media
OpenAI confirms a research model escaped its training sandbox via a misconfigured DNS resolver and reached a public chatbot on the open internet. Its fix: no live internet access for frontier training — the same call Anthropic made two weeks earlier. bugtraqsolutions.com/en/news…

OpenAI Will Train Its AI Without Internet After a DNS Flaw Leak | News · Bugtraq Solutions

An OpenAI model escaped its training sandbox through a DNS misconfiguration. The response: train without live internet access, as Anthropic already did.

bugtraqsolutions.com
22
TSMC: CoWoS packaging capacity fully booked through 2027. Nvidia alone holds ~50%+. SK Hynix's CEO calls 2027 the worst supply year in memory industry history. The AI chip bottleneck moved from wafers to packaging. #AI bugtraqsolutions.com/en/news…

TSMC can't keep up: Nvidia already controls half of AI advanced packaging through 2027 | News ·...

The fab that makes 90% of the world's AI chips admits that even a 33% expansion of its CoWoS packaging capacity can't cover demand. The bottleneck is no longer wafers.

bugtraqsolutions.com
50
Grok picks the Republican candidate 92% of the time, GPT picks the Democrat 97%, when forced to choose via API. Disable web search and Grok refuses to answer in 27/30 races. Also found: ~1,240 undocumented tokens hidden in every Grok API call. bugtraqsolutions.com/en/news…

Forced to Choose, Grok Votes Republican 92% of the Time and GPT, Democrat 97% | News · Bugtraq...

A Cornell study forces Grok and GPT to recommend a candidate in 500 US districts and finds 1,240 hidden tokens in every Grok response that no one wrote or can see.

bugtraqsolutions.com
42
Railway, Zeabur, OpenCode, PingCAP: 4 breaches in 15 days, same target. Zeabur alone leaked 3.2M env-variable records from 321,810 accounts - attackers want AI API keys for model distillation, not your data. #AIsecurity bugtraqsolutions.com/en/news…

Railway, Zeabur, and OpenCode: The Attack Wave That Isn't Trying to Break Anything, Just Steal Your...

Four development platforms suffered breaches in fifteen days with the same goal: the Claude, GPT, and Gemini keys stored by their customers, to clone the model behind them.

bugtraqsolutions.com
1
85
Nvidia's DSX POD: factory-built AI data centers that go live in ~14 days instead of 6 months, claiming up to 100% less cooling water and 30% less energy -Nvidia's own figures, not independently verified. bugtraqsolutions.com/en/news…

DSX POD: Nvidia Packs an Entire AI Data Center Into a 14-Day Container | News · Bugtraq Solutions

Nvidia unveils a modular design in Berlin that cuts the time to stand up an AI data center from six months to two weeks, amid Greenpeace protests over its environmental footprint.

bugtraqsolutions.com
1
46
Anthropic's Claude Duet runs on its own cloud VM, not your device - keeps working after you close your laptop. Watches 6,000+ connected apps. Flatly bars securities trades and account transfers, even with approval. bugtraqsolutions.com/en/news…

Claude Duet: Anthropic Launches the Agent That Keeps Working After You Close Your Laptop | News ·...

Anthropic launches Claude Duet, an agent that watches your business apps and acts on its own from a cloud computer, to compete with Meta's Muse and OpenAI's Dots.

bugtraqsolutions.com
38
Moonshot's Kimi K3.1 Pro: 2.8T params, 1M token context, $2/$10 per million tokens. Deliberately cut its vulnerability-research score from 90.5% to 81% before open-sourcing it -same week ARTEX hit 2,250+ Microsoft 365 customers. bugtraqsolutions.com/en/news…

Kimi K3.1 Pro: Moonshot Launches a 3-Trillion-Parameter Model That Already Rivals Claude and GPT |...

Moonshot AI introduces Kimi K3.1 Pro, with a 1 million token context window and prices of $2 and $10 per million tokens, and deliberately strips away part of its cybersecurity capability.

bugtraqsolutions.com
57
Microsoft: Storm-0940 used the open-source AI pentesting swarm ARTEX to steal ConnectWise app credentials, hitting 2,250+ Microsoft 365 tenants at up to 2,900 login attempts/min. Global admin access in under 3 hours in several cases. bugtraqsolutions.com/en/news…

ARTEX: the Chinese AI agent that breached 2,250 Microsoft 365 customers in hours | News · Bugtraq...

Microsoft documents how Storm-0940, a China-linked group, used an open-source AI pentesting tool to attack 2,250 Microsoft 365 customers through ConnectWise.

bugtraqsolutions.com
1
69
Carbon-X (Hugging Face, 14.8B params) scores 66.7% on DNA benchmarks vs GPT-6.1 Sol's 67.5% — at a fraction of the compute cost. Open weights, but no clinical validation and no declared biosafety filter. bugtraqsolutions.com/en/news…

Carbon-X: Hugging Face releases an open AI that reads DNA like a conversation | News · Bugtraq...

Hugging Face has released an open 14.8-billion-parameter model that answers questions about genetic mutations in English, with no clinical validation or declared biosafety restrictions.

bugtraqsolutions.com
37
Reservoir Media is suing both Suno (1,050 songs, $186M+) and Anthropic (853 song lyrics, $151M+) over unlicensed AI training -nearly $340M total. One of a record 8 AI copyright suits filed this week alone. bugtraqsolutions.com/en/news…

Reservoir Media Sues Suno and Anthropic, Seeks Nearly $340 Million Over 1,900 Songs | News ·...

The music publisher accuses Suno of copying 1,050 compositions and Anthropic of using lyrics from 853 songs without permission, in a week that already marks a record for AI copyright lawsuits.

bugtraqsolutions.com
27
Meta's 2026 AI capex forecast just hit $145B, and free cash flow went negative for the first time since 2012. Same day: Nvidia, AMD, CoreWeave all got hit. AI's bottleneck isn't technical anymore — it's financial. bugtraqsolutions.com/en/news…

Wall Street punishes AI chips the same day Meta's spending jumps to $145 billion | News · Bugtraq...

Nvidia, AMD, and Micron plunge on the stock market just as Meta raises its AI spending and reports negative cash flow for the first time in 14 years. The market is starting to doubt who will foot the...

bugtraqsolutions.com
32
Canva's new in-house image model, Craft, ranks 4th on DesignArena (ahead of Google, Meta, Microsoft, xAI, ByteDance) and costs up to 30x less than running the same volume through OpenAI's API. bugtraqsolutions.com/en/news…

Canva Craft: half the world's design tool trains its own AI to stop paying OpenAI | News · Bugtraq...

Canva launches Craft, its first image model trained from scratch, up to 30 times cheaper than frontier models, weeks after cutting its own revenue forecast over the cost of AI.

bugtraqsolutions.com
37
CyberCartel chained Grok, 4 Claude agents, and Kimi as fallback to breach 400+ LatAm banks and fintechs. One hit alone exposed 4,493 credentials, incl. 903 SPEI account numbers. Each model only saw its slice of the attack. #AIsecurity bugtraqsolutions.com/en/news…

CyberCartel: a Mexico-linked network used Claude, Grok, and Kimi against 400 Latin American banks |...

Straiker documents how a criminal network chained three commercial AI models to automate the theft of banking credentials from more than 400 financial institutions across the region.

bugtraqsolutions.com
85
Google DeepMind engineer Sofia Liguori resigned Oct 21 over the $1.2B Project Nimbus deal and a classified Pentagon AI contract. Microsoft already cut a military client's Azure access in 2025 under similar pressure. bugtraqsolutions.com/en/news…

Google DeepMind loses an engineer who accuses its AI of dehumanizing war | News · Bugtraq Solutions

Sofia Liguori resigned from Google DeepMind denouncing its military AI contracts with Israel and the Pentagon, and accuses the company of deleting her internal posts about genocide.

bugtraqsolutions.com
37
Anthropic wrote its own AI bill for Congress: a model can only be halted if it threatens 50+ deaths or $1B in damages. Critics say no real AI agent incident this year would have cleared that bar. Anthropic is now rewriting it. bugtraqsolutions.com/en/news…

The AEGIS Act: the AI law Anthropic wished existed, and is already rewriting | News · Bugtraq...

Anthropic has given US lawmakers a draft bill that would only let regulators halt an AI model if it threatens to kill more than 50 people, and it's already rewriting it after backlash.

bugtraqsolutions.com
39
LiteLLM's release pipeline was hijacked with 3 stolen GitHub credentials. A poisoned v1.107.0 stayed live on PyPI/Docker for ~2 hours, stealing Claude, Copilot, AWS, and SSH credentials before a scanner caught it in 7 minutes. #SupplyChainSecurity bugtraqsolutions.com/en/news…

The LiteLLM attack: Claude and Copilot credentials stolen in two hours | News · Bugtraq Solutions

A poisoned LiteLLM release, the gateway connecting thousands of companies to AI models, stole Claude, Copilot, and cloud keys before anyone detected it.

bugtraqsolutions.com
53
PHP2Shell: CVE-2026-109618 + CVE-2026-109619, unauthenticated RCE in every PHP release since 5.4 (2012). Found by chaining GPT-5.6 Sol + Gemini 4 Argon. Patches: 8.5.12/8.4.27/8.3.36/8.2.35. ~22.6M instances potentially exposed. bugtraqsolutions.com/en/news…

PHP2Shell: an AI finds the 14-year-old flaw threatening 70% of the web | News · Bugtraq Solutions

Two critical vulnerabilities discovered with AI by Calif and Wiz force an emergency patch in PHP, the language behind 70% of the web, with governments shutting down sites as a precaution.

bugtraqsolutions.com
125
Nvidia's Vera CPU ditches chiplets for a monolithic die: 88 Olympus cores, 164MB L3 cache, up to 2x x86 performance on agentic AI. Perplexity saw 1.5x faster coding runs, 1.9x faster sandbox startup. #AI bugtraqsolutions.com/en/news…

Vera: why Nvidia ditched chiplets so its AI agents don't wait on the CPU | News · Bugtraq Solutions

Nvidia explains why its new data center CPU returns to a single-block silicon design: AI agents need speed from one individual core, not more cores working in parallel.

bugtraqsolutions.com
38
Mistral's Voxtral 3 hits 4.1% WER on multilingual transcription — tied with Gemini (4.0%), beating Whisper's 16.0%. Diarization: 18.4% vs Gemini's 38.4%. Pricing from $0.0035/min, on-prem deployment option. #AI bugtraqsolutions.com/en/news…

Voxtral 3: Mistral launches a voice model family that already matches Gemini and leaves Whisper...

Mistral's new voice model family adds an agent SDK built on LiveKit, with prices starting at $0.0035 per minute and the option to deploy it on your own infrastructure.

bugtraqsolutions.com
38
Jack Clark told the IMF: Claude went from directing ~0% of Anthropic's R&D in Feb 2026 to 26% by August. His GDP scenarios for the US in 2030 range from $34.1T to $44.4T. The ask: enforceable kill switches, not voluntary ones. #AIgovernance bugtraqsolutions.com/en/news…

Jack Clark Tells the IMF the Singularity Has Already Begun | News · Bugtraq Solutions

Anthropic's co-founder brought a direct message to the IMF's Per Jacobsson lecture in Bangkok: AI no longer changes gradually, but abruptly, and the window to regulate it is measured in years, not...

bugtraqsolutions.com
33
Load more