Seoul: human hackers vs AI agents competition - offense meets offense
Competition, a real-world test of human/agent offensive parity - no surprise on the outcome, but the first truly calibrated signal.
Jul 24, 2026 at 09:33 8 8
A researcher finds a WordPress RCE for $500,000 with GPT-5.6 for $25
The marginal cost of discovering a critical exploit falls below the threshold of an evening of research - the discovery/reward market ratio explodes.
Jul 20, 2026 at 16:39 19 14
TP-Link Kasa cameras leaked home GPS for six years via unauthenticated UDP
A vulnerability researcher documents six years of unauthenticated UDP replies from TP-Link Kasa EC71 cameras that returned the device's GPS coordinates on request - a textbook IoT trust-boundary failure.
Jul 18, 2026 at 11:11 34 8
Memory Heist: The persistent memory of an AI assistant becomes a stable attack surface
After the product bricks MCP around agent memory, the security counterpart arrives: a ticket promoted to the front page of HN documents exfiltration via the memory layer. The conceptual flaw is not in the model, it is in the product layer.
Jul 15, 2026 at 12:34 8 11
Eight jailbreaks, the entire industry, almost no response
A researcher documents eight techniques that bypass the safeguards of ChatGPT, Claude, Gemini, Llama, Grok, Qwen, and the like. The most worrying aspect isn't the vulnerability—it's the silence that followed the disclosure.
Jul 14, 2026 at 22:30 30 8
State of MCP Security 2026: the attack surface of agents becomes a standalone topic
The first dedicated report on MCP security catalogs a debt that is growing faster than the ecosystem itself.
Jul 13, 2026 at 02:18 7 8