Anthropic found that the unexplained seeds of NIST's P-192 to P-521 curves, supplied by the NSA, came from the lrand48 generator seeded with 1997 and 1998 timestamps. Cryptographer Filippo Valsorda confirmed the finding and puts the remaining freedom at about 30 bits, too little for a backdoor, so distrust of P-256 no longer justifies migrating away from it.
PostgreSQL has patched 44 vulnerabilities so far in 2026, up from 7 in 2025, 28 of them in the 13 August update alone. Committer Peter Eisentraut says version 19, due 19 November, will lose 8 to 10 major features, partly because of LLM-assisted code review and developers being pulled onto security fixes; at curl, 18 of 24 flaws disclosed on 14 October were credited to Aisle Research.
In a lab, Claroty had a researcher guide a mainstream AI model to build an exploit for Danfoss AK-SM 800A controllers from three flaws disclosed and patched in 2025, taking 28 minutes and about $6. The agent initially failed at bypassing authentication and needed redirecting; Claroty does not link the test to the October attacks on French supermarkets, and CERT-FR advises taking these controllers off the internet.
Elon Musk said he had experienced several episodes of 'AI psychosis', a term that is not a recognised medical diagnosis. Some specialists warn that chatbot interactions may feed delusions, even as Silicon Valley executives use the phrase as a joke.
After MI5 chief Ken McCallum warned that AI could change the stakes on bioweapons, the Guardian's science podcast asks Tom Inglesby of the Johns Hopkins Center for Health Security why governments are worried. He discusses what measures could reduce the risks.
Several attacks on Japanese companies were carried out with Artex, an AI-powered cybersecurity tool. Its Chinese developer has already shut off access to the source code.