Meet Shapes, an app that brings humans and AI into the same group chat
Shapes, an app where humans and AI characters chat in shared group conversations, is emerging from stealth with $8 million in seed funding. Consider Discord. However, there are AI characters alongside humans. Shapes was founded in 2022 and has over 400,000 monthly active users. The app’s founders, Anushk Mittal and Nouri Dhingra, believe Shapes can […]
How to automate exposure verification at the speed of AI attacks
hacker newsApril 29, 2026Artificial intelligence/exposure verification In February 2026, researchers discovered a change that changed the situation forever. Attackers are using custom AI setups to automate attacks directly into the kill chain. We’re no longer just talking about AI creating better phishing emails. We’re talking about an autonomous agent that maps Active Directory and retrieves […]
Divine, the Jack Dorsey-backed Vine reboot, is now available to the public
A new project that brings back Vine’s 6-second loop videos is now available for download on the App Store and Google Play. This Vine reboot is called Divine and will provide access to an archive of approximately 500,000 Vine videos restored from the original service’s backups and allow creators to post new Vines again. Divine […]
What to look for in an exposure management platform (and what most of it is wrong with)
Every security team has a version of the same story. The quarter ends with hundreds of vulnerabilities resolved. The dashboard is full of green. Then someone in the leadership council asks, “So are we actually safer now?” Crickets. The room falls silent because honest answers require context. Patch counts and CVSS scores are not designed […]
Colby Adcock’s Scout AI raises $100 million to train models for war. we visited the boot camp
At a U.S. military base in central California, a four-seater all-terrain vehicle roams a hillside path. This is training, but not for the people in the vehicle. An effort to train AI models to enter conflict zones. The autonomous military ATV is operated by Scout AI, a startup founded in 2024 by Colby Adcock and […]
A critical cPanel authentication vulnerability has been identified – please update your servers immediately
Ravi LakshmananApril 29, 2026Vulnerabilities / Web Hosting cPanel has released a security update to address security issues affecting various authentication paths that could allow an attacker to gain access to the control panel software. According to an alert released by cPanel on Tuesday, the issue affects all currently supported versions. This issue has been resolved […]
CISA adds actively exploited ConnectWise and Windows flaws to KEV
Ravi LakshmananApril 29, 2026Vulnerability/Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws affecting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog based on evidence of active exploitation. The vulnerabilities are listed below. CVE-2024-1708 (CVSS Score: 8.4) – A path traversal vulnerability in ConnectWise ScreenConnect […]
LiteLLM CVE-2026-42208 SQL injection can be exploited within 36 hours of publication.
Ravi LakshmananApril 29, 2026Vulnerability / Cloud Security In yet another example of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI’s LiteLLM Python package was actively exploited in the wild within 36 hours of the bug becoming public knowledge. This vulnerability, tracked as CVE-2026-42208 (CVSS score: 9.3), is […]
Researchers have discovered a critical GitHub CVE-2026-3854 RCE flaw that can be exploited via a single Git push
Ravi LakshmananApril 28, 2026Vulnerabilities/Software Security Cybersecurity researchers have detailed a critical security vulnerability affecting GitHub.com and GitHub Enterprise Server. This vulnerability could allow an authenticated user to execute remote code with a single “git push” command. This flaw, tracked as CVE-2026-3854 (CVSS score: 8.7), is a case of command injection that could allow an attacker […]
Google expands access to Pentagon AI after Anthropic rejection
According to multiple reports, Google has given the U.S. Department of Defense access to its AI for sensitive networks, allowing virtually all lawful uses. The deal follows Anthropic’s public stance against the Trump administration after the model maker refused to give the same terms to the Pentagon. The Pentagon wanted unrestricted use of AI, but […]