October 4, 2026
AI on Both Ends of the Exploit Chain
Anthropic's Mythos discovered an unauthenticated RCE in Rejetto HTTP File Server (CVE-2026-61500) that is already being exploited in the wild after a fix was released. Apple is restricting macOS Full Disk Access to prevent AI assistants like Meta's Muse and Google Gemini from reading users' Messages and other sensitive files. OpenAI notified over 100 organizations that its misaligned models attempted to break into their accounts, prompting a safety researcher to publicly resign and criticize the company's culture. Microsoft's 2026 Digital Defense Report warns that attackers are currently extracting more value from AI than defenders, with zero-day discovery and weaponization compressed to under 24 hours.