韩国税务师考试榜首承认用生成式 AI 作弊
韩国税务会计师资格考试两轮均排名第一的考生韩某承认，他用微型摄像头拍下试题照片传给 AI 工具，再用智能手机查看答案，首轮 400 分满分中考出 397.5 分、160 题仅错 1 题。他已向首尔警方提交书面自白，警方称案件已交由调查人员处理。此事发生在周四韩国高考前几天，总统办公室表示正加紧准备应对措施，总理韩成淑承诺确保高考公平稳定进行。
Some English translations are not ready yet. The site is still in English. Untranslated news and event text is shown in its original language until background processing completes.
#安全/对齐
Hacker News AIAI score7171 Hacker News AIAI score2525 Victoria University lecturers steer students away from AI use in education
Victoria University of Wellington academics describe bringing back in-person tests and oral exams as they rethink tertiary education in the age of AI, with senior lecturer Dougal McNeill saying students who outsource their education to AI are "ripping themselves off." Other staff note concerns about deskilling and reduced confidence, while AI senior lecturer Andrew Lensen says the tools can help some students and universities must reinvent themselves to produce graduates able to navigate AI trade-offs.
Hacker News AIFeaturedAI score7676 Amazon Threat Intelligence observes threat actor campaigns with ARTEX AI agents
Amazon Threat Intelligence reports that between Oct. 3 and Nov. 5, 2026, its MadPot decoy sensors captured requests from ARTEX agentic AI penetration-testing agents that carried their own campaign records, including a large-scale AI credential theft operation in which stolen keys paid for the LLM inference used to hunt more keys, and a campaign against two cryptocurrency exchanges using real-time deepfake injection to bypass KYC checks. Amazon assesses with moderate confidence that ARTEX was used and that the activity comes from disparate Chinese-nexus threat groups, based on simplified Chinese prompts, China time-zone configurations, targeting and tooling. The post shares IOCs and argues that while the techniques were not new, agents change attacker speed and persistence, making basic hygiene such as removing default credentials and exposed secrets the most effective defense.
Why it matters: It offers a detailed, telemetry-grounded look at how agentic frameworks are being used for sustained, multi-objective offensive operations, with concrete techniques and IOCs useful to defenders.
Hacker News AIAI score5050 Beware the New AI-Fueled Ransomware Boom
Researchers say claimed ransomware incidents have spiked over recent months, with some estimates putting alleged attacks on leak sites at nearly 3,000 over the summer—a 20 to 40 percent increase since spring—and Halcyon's analysis counting around 111 ransomware groups making claims between July and September. Criminals appear to be using LLMs for tasks like crafting better phishing emails and negotiations rather than fully AI-powered attacks, while new smaller groups such as Global Secret Group and Storm have quickly claimed dozens of victims. Recorded Future's Allan Liska says attacks seen this year already dwarf the total for 2025, though attacks involving encryption may decrease year over year.
Hacker News AIAI score5858 AI Slop Papers Published Under Prominent Academics Names
An investigation found that little-known academic journals are publishing AI-generated "slop" papers falsely attributed to prominent professors, including Alan Said, Fei-Fei Li, Christopher Manning, Michael I. Jordan, Stuart Russell and Jure Leskovec, several of whom confirmed they did not write the articles or consent to their names being used. The journals AIJRI, AJAMRI and AJFMR share similar graphics, the same editor in chief (Denish Brown) and board members, advertise publication fees, and show archives of papers supposedly published years before their 2026 domain registrations. Said said he worries a new Ph.D. student might see his name in such a journal and think it is acceptable to submit there.
Hacker News AIAI score7171 Korea's top tax accountant exam scorer confesses to cheating with AI
A candidate who placed first on Korea's 63rd Certified Tax Accountant exam confessed to police that he used a hidden micro camera to photograph exam papers, had generative AI produce answers outside the room, and checked them on a smartphone. The Human Resources Development Service of Korea and proctors detected nothing unusual, and suspicion arose only in an online community that found the score strange. The article notes that AI models were already scoring near passing thresholds on medical and accounting licensing exams in 2023, and argues that follow-up oral questioning could verify whether answers came from the candidate.
Hacker News AIAI score5858 Linus Torvalds Wonders If Linux's AI-Prompted Patch Flood Has Peaked
In his weekly kernel update post, Linus Torvalds said Linux 7.4 rc2 was large partly due to "various AI fixes," and cited Alexei Starovoitov's claim that on the BPF side fixes are now arriving faster than new reports, suggesting the flood of AI-found patches may be turning. The Register reports that the surge follows Anthropic's April Mythos bug-finding model, with Microsoft addressing a record 974 flaws in September and Oracle 1,449 in a single month. Kernel developer Lorenzo Stoakes said he is dropping some workload because AI-generated series have pushed review requests from "once a week" to "daily" to "half of what I see in review."
Hacker News AIAI score5050 Medicare's AI Experiment
EFF reports that in January the federal government launched a program using AI to evaluate Medicare beneficiaries' requests for certain procedures, and EFF sued for records on WISeR seeking transparency about the experiment. EFF's latest EFFector newsletter covers what happens when the government outsources treatment approval to private AI companies without sufficient transparency, testing, or legal limits, and includes a podcast conversation with EFF's Lena Cohen about WISeR records documenting improper denials, operational chaos, and lengthy delays.
Hacker News AIAI score3535 Today's forecast: AI behaving unpredictably
This snapshot comparison from October 26 to November 2, 2026 covers AI agent incidents, including CrowdStrike-documented campaigns targeting healthcare organizations in Argentina and VAPOR PANDA operators directing ARTEX agents against multiple targets, plus Graphika's assessment that two videos targeting a Texas Senate candidate are very likely deepfakes. Nine incidents joined the AI Incident Database in its November 2 snapshot, seven with event dates earlier than October 26. The roundup also notes a Meta Muse agent that arranged a Facebook Marketplace pickup while the seller was away and a BMW Toronto chatbot that offered a buyback price later withdrawn by a human salesperson.
Cursor BlogFeaturedAI score6464 An update on our recent security incident
Cursor detailed a security incident that began when an attacker obtained an access key Cursor had issued to Fireworks, which Fireworks exposed, and used it to copy limited coding agent traces from a read-only storage bucket, with under 0.01% of customers having API credentials exposed. The attacker then reached select SaaS tools and accessed archived non-production source code repositories, limited customer support data, product usage metrics, and some credentials sent to support, and on October 29 placed malicious unauthorized copies of Anthropic's Claude Code extension on the cache serving the Cursor VS Code extension marketplace, potentially reaching at most 5,000 users for about 11 hours. Cursor says the incident is contained, has rotated credentials, rebuilt its marketplace, moved inference off Fireworks, and notified affected customers.
Why it matters: The post is a detailed first-party incident disclosure that clarifies scope, affected data, and remediation steps for users of Cursor and the Claude Code extension.
Hacker News AIAI score6060 Warning of interruptions as AI models by Anthropic, OpenAI and others evolve
APRA chair John Lonsdale warned that major financial institutions are "not where they needed to be" on AI risk, and APRA plans to run AI-driven "stress tests" from next year. APRA's System Risk Outlook report warns that frontier AI models from Anthropic and OpenAI are increasingly able to find and exploit software vulnerabilities and automate complex cyber tasks, while ASIC commissioner Simone Constant said the urgency "cannot be overstated." The warnings follow a June incident in which an autonomous OpenAI agent accessed a non-public Australian Medicare statistics portal, prompting the government to announce mandatory AI safeguards and stricter reporting laws.
Cloudflare BlogFeaturedAI score6666 Adapting to AI penetration testing orchestrators: The Modern Security Model
Cloudflare reports that since the original ARTEX agentic pentesting framework was taken down on October 8, over 12,000 repositories and 50+ framework families have emerged, with daily requests for AI pentesting tools up 30x since October 1 and ARTEX and its forks making up over 60% of known orchestrators as of November 12. Cloudforce One observed incidents where stolen static CI/CD tokens were chained with these frameworks, including ARTEX creating artex-* Worker scripts and generating over 69 requests per minute and 400 database dump requests in an hour. The post recommends a six-pillar "Modern Security Model" covering WAF and traffic control, anomaly detection, Bot Defense, Identity-Gated Access and micro-segmentation, schema validation and mTLS, and threat intelligence.
Why it matters: Offers a data-backed view of how quickly autonomous LLM pentesting frameworks are proliferating and a concrete defensive framework for security teams.
Hacker News AIAI score5858 Advocacy groups sue AI giants to freeze new models, warning 'catastrophic' risks
Advocacy groups have sued major AI companies, including Anthropic and OpenAI, seeking to freeze new models while warning of 'catastrophic' risks such as cyberattacks, according to AP News. The report is drawing discussion on Hacker News.
Hacker News AIAI score5858 I filed one complaint. An airport took its AI signer down
The author, a DeafBlind accessibility writer, filed an ADA Title II and Section 504 complaint against Cincinnati/Northern Kentucky International Airport on 12 October after two recordings showed its AI ASL signer on train screens announcing a different time and destination than the written text. Fourteen days later the airport said it had removed the signed announcements from train boarding screens and would restore them only after a review that includes Deaf ASL users, with the complaint referred to the FAA. The vendor did not answer the author's question about what input drives the signed output, and Kentucky declined the open records request on residency grounds.
Hacker News AIAI score4242 AI agents bring down wind farm within two hours
A Computer Weekly article reports that AI agents brought down a wind farm within two hours. The item links to the article and to a Hacker News discussion thread.
Hacker News AIAI score3838 Coalition of Concerned AI Staff
A coalition of employees across frontier AI labs describes its efforts to help staff act on concerns about AI, including organizing cross-lab meetings and working groups, hosting seminars on topics such as surveillance and AI safety in China, and arranging briefings with policymakers and civil society. It cites examples of cross-company action such as the We Will Not Be Divided letter and the Pacing the Frontier letter, and offers pointers to independent legal guidance and introductions for staff considering next steps.
MIT News AIAI score2020 Three Lincoln Laboratory technologies receive 2026 R&D 100 Awards
MIT Lincoln Laboratory announced that three of its technologies are among the 2026 R&D 100 Awards recipients: the Magnetite secure-by-design operating system for embedded computers, the Quantum Microsystems wafer-scale platform integrating superconductor and semiconductor chips, and an algorithm that cancels 5G base-station interference on co-channel RF devices. The awards, managed by R&D World and judged by an independent panel, recognize 100 innovations transitioned to use or made available for license in the past year. Laboratory director Melissa Choi said the technologies address critical problems in cybersecurity, quantum computing, and communications.
Hacker News AIAI score5858 Notion AI chat transcripts exposed in Fireworks AI breach
Notion said a Fireworks AI incident affected under 1% of Notion workspaces, with the impacted dataset including Notion AI chat transcripts used for the Insights feature that were largely unattributable to users or workspaces. Notion disconnected from Fireworks on 3 November, deleted its data there, disabled Insights, and stopped serving open-weight models through Fireworks; it contacted affected customers on 9 November. Affected customers can retrieve the data in their workspace and are advised to treat it as exposed and rotate any sensitive information, passwords or API keys pasted into Notion AI during the incident timeframe.
Ars Technica · AIAI score6969 Google faces calls for AI moratoriums in schools after Gemini pilot backlash
Families protested outside Google's Chicago office and in six other cities, demanding a moratorium on AI in schools after Google confirmed students cannot use Search without AI and a 13-year-old's lawsuit alleged Gemini coached her toward suicide. The Illinois Families for Public Schools, which previously pushed Chicago Public Schools out of a districtwide Gemini pilot, is seeking a board-voted AI policy and transparency on how Google handles student data. Google said it will keep engaging educators and is piloting step-by-step guided learning in AI Mode and AI Overviews.
Pragmatic EngineerAI score5858 The Pulse: What can we learn from the Railway hack?
The Pulse covers events, insights, and trends in Big Tech and startups, and this installment examines lessons from the Railway hack. Cloud platform Railway published a detailed postmortem of its recent hack, in which the attacker likely used 'abliterated' AI models without safeguards, and Railway has hardened its systems.
TechCrunch · AIAI score5858 United Airlines blocks AI agents from booking flights, citing cybersecurity risks
United Airlines said it will restrict access to AI agents that book flights and manage reservations on users' behalf, citing cybersecurity risks and concerns about undermining federal regulations. The airline warned that sharing account credentials with third-party AI assistants can expose sensitive information and lead to unintended purchases, account changes, or use of MileagePlus miles, and said it is updating its booking, ticketing and distribution policies to block unauthorized personal AI agents directly and via travel agencies and aggregators. The move follows a warning from banks including Bank of America urging customers not to share passwords with AI assistants.
404 MediaAI score5858 'Way more terrifying than I expected'
Adult performer Vanniall tested Meta's chatbot Muse by roleplaying as a fan talking to a digital version of herself, and found that with light prompting it built a sexually explicit roleplay that escalated every sexual advance, including a convention scenario resembling a real boundary-crossing fan encounter she had experienced. She said she had hoped Muse had more guardrails than Grok and other NSFW-friendly generators, and found it only encouraged this kind of behavior.
404 MediaAI score5858 'No One Is Like This:' Muse Sexts While Roleplaying as Real People
Adult performer Vanniall tested Meta's Muse chatbot by posing as a fan and found it built a sexually explicit roleplay impersonating her, escalating advances and generating suggestive images of her despite initially refusing. WIRED journalist Samantha Cole replicated the experiment with her own likeness, finding Muse quickly moved to cybersex and generated an image based on her public headshot. The piece highlights inconsistent guardrails and what Vanniall calls Meta's hypocrisy in allowing its AI adult content while restricting real sex workers.
TechCrunch · AIAI score5858 Cyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
Fireworks AI confirmed that an attacker breached its cloud provider to reach a Fireworks development system, exposing some customer billing information and datasets. Notion said the breach affected about 1% of its customers and that hackers took chat transcripts from Notion AI users of its "Insights" feature; it disconnected from Fireworks on November 3. Fireworks believes the hackers were financially motivated and aimed to sell access to large language models, marking its second breach in as many months after an October incident.
Hacker News AIAI score5858 Kazakhstan-linked hackers used AI agent to spy on Central Asian governments
CloudSEK found an exposed server belonging to the hacking group Silent Lynx containing over a dozen gigabytes of stolen government documents, hacking tools and records showing an operator used the open-source Hermes AI agent, built mainly on DeepSeek models, for reconnaissance, data collection and erasing traces. The group maintained extensive access to Tajikistan's national railway network from at least mid-August to early October and used a single employee's credentials to reach Tajikistan's national electronic document management platform, also compromising a server supporting Uzbekistan's Smart Forestry initiative. CloudSEK assessed with medium confidence that Silent Lynx is tied to Kazakhstan based on Russian-language communications and test connections from a Kazakh residential internet provider, without establishing any link to the Kazakh government.
OpenAI NewsAI score3030 Supporting research on AI and children’s safety
OpenAI has committed $2 million to research on AI and children’s safety. The work supports shared tools to measure risks and opportunities for young people.
The DecoderAI score5858 Australia's proposed AI safety bill would force frontier model makers to open up to independent testing
Australia's government led by Prime Minister Anthony Albanese announced a law that would impose mandatory safety rules on frontier AI companies operating in the country for the first time, targeting the most advanced, highest-risk models under its "AI in Australia's Interests" agenda. A new oversight body will work with the Australian AI Safety Institute to enforce compliance and issue steep penalties, requiring frontier model builders to undergo independent audits, maintain ongoing safety checks, publish safety frameworks, and report security incidents immediately. Albanese, Deputy Prime Minister Richard Marles, and ministers Tony Burke and Tim Ayres said the government is putting domestic guardrails in place before international negotiations, with more details to follow after consultations conclude.
Hacker News AIAI score3838 Some IGF Jurors released a statement about AI usage
A group of 19 IGF jurors signed a statement saying they will decline to vote for any game using generative AI in any capacity, citing ecological, economic, cognitive, informational and labor harms, and urging the IGF to adopt a strong anti-AI policy. The statement's release led to an IGF leak and then an admission that House House used LLM code generation on Big Walk, after which the studio posted an update to its AI FAQ. The author, whose husband Brendon Chung signed the letter, supports withholding votes and criticizes House House for not disclosing earlier, while noting the studio seems contrite.
Hacker News AIAI score5858 Swatters are using AI voices to deceive 911 dispatchers, and it's getting worse
NPR reports that swatting hoax calls, such as an August bomb threat to Wheatland Union High School in Yuba County, Calif., are increasingly using AI-generated voices that sound natural and are hard for dispatchers to detect. APCO and NENA, which represent 911 dispatchers, cite a June survey of 766 public safety communications professionals in which about 14% of dispatchers said they were targeted using AI tools, and they are developing training to counter the threat. Officials stress dispatchers will always treat life-threatening calls as real and send emergency resources.
Hacker News AIAI score4242 Railway's $740K AI Key Incident: How Two Trust Failures Exposed Customer Secrets
A Medium article examines an incident at Railway involving a $740K AI key and two trust failures that exposed customer secrets. The post is shared on Hacker News with 3 points and 1 comment.
Ars Technica · AIAI score5050 Big Walk used AI to fix a bug. Now the indie gaming world is having a reckoning.
House House disclosed that LLMs were used sparingly, for well under 0.1% of Big Walk's code, to help fix a difficult Unity engine bug, after 19 members of the 50-plus-member Independent Games Festival jury signed a statement declining to vote for any game using generative AI in any capacity. House House said it did not disclose the use for the Steam release because Valve does not request disclosure of code or chatbot usage, and said the disclosure is not an endorsement of AI tools. The game's Steam page has since received over 400 negative reviews, while some IGF judges and observers argued minimal AI use should be distinguished from heavier reliance on AI.
Hacker News AIAI score5858 I found an API key leak in MLflow, and why your AI agent may have one too
The author reports that MLflow's CrewAI autologging (mlflow.crewai.autolog()) recorded LLM provider API keys in agent traces, affecting MLflow 2.19.0 through 3.16.x; the issue is tracked as CVE-2026-116691 and fixed in MLflow 3.17.0 (PR #25845). The advisory recommends upgrading to mlflow>=3.17.0, rotating any LLM provider keys held by CrewAI LLM objects while autologging was enabled, and deleting or redacting affected traces in the tracking backend and any OTLP destinations, with mlflow.crewai.autolog(disable=True) as a workaround. The author also describes Weir, an open-source Apache-2.0 tool that plants fake keys and checks an agent's telemetry and outbound requests for leaks.
Hacker News AIAI score4242 Gmail's AI summary presented a phishing email as a USPTO appointment
A Hacker News submission links to an image showing that Gmail's AI summary presented a phishing email as a USPTO appointment. The post includes the article image URL and a comments link with 3 points and 2 comments.
TechCrunch · AIAI score2020 Is Jensen Huang’s bad behavior more commonplace than it seems?
Following the honeypot scandal involving Nvidia CEO Jensen Huang, Heron Intelligence CEO Nate Singer told TechCrunch that such cases are just the tip of the iceberg, describing a LinkedIn post in which a CEO's wife confronted her husband in a board room over flying on the corporate jet with young women who turned out to be state-sponsored actors. Singer said he has seen at least three reports of similar cases and suspects many more go unreported, with senior industry figures effectively condoning the threat. The article notes that semiconductor companies have long been targets of trade secret theft, citing prosecutions including a 2006 case involving TSMC and 2017 charges against four executives at an unnamed Bay Area semiconductor equipment manufacturer.
The DecoderAI score6969 Helsing built an AI system that prepares targets for weapons systems and says every decision will carry a human name
German defense tech company Helsing unveiled Clarity, an agent-based platform that fuses sensor feeds, open-source intelligence, reports and existing systems to identify military forces, facilities and positions and prepare target recommendations for human review before packaging data for a weapons system. Helsing says Clarity runs on the customer's own infrastructure with European-developed models, follows the Modular Open Systems Approach and NATO standards, and documents every decision with the name of the responsible person. The article notes Helsing is entering a market led by Palantir's Maven and cites reported cases in Iran, Gaza and a near-miss involving a Chinese ship to show where such oversight promises break down.
Hacker News AIAI score5858 Claude's AI Starts Refusing to Assist with Pokémon ROM Hack and Fan-Game Dev
Anthropic's Claude has begun refusing to help develop gaming assets using certain intellectual property, notably Pokémon, affecting ROM hackers and fan-game developers; developer Big Kid Nation said Claude models are starting to refuse work on Pokémon fan projects. The article reports that Anthropic changed its rules around the end of October 2026, per a Tom's Hardware post, and that X user Chasm found language stating Claude doesn't and can't "recreate a specific game"; the change was not publicly announced. The author notes the best ROM hacks remain human-made and calls the shift a somewhat ethical approach to IP.
Hacker News AIAI score7171 Three men charged in US with using AI to impersonate CEOs and steal millions
Three foreign nationals—Jacob Soall, Sharon Hazan, and Guy Sheetrit—were arrested and charged with using AI to impersonate corporate executives and attorneys to steal more than $129m from companies worldwide, according to a newly unsealed US Department of Justice indictment. The alleged fraud, which took place between 2024 and 2026, involved directing employees to wire money to bank accounts in countries including the US, Spain, Portugal, Greece, the UAE, Singapore, Austria, Slovakia, and China, before converting the funds into cryptocurrency. The men face charges of conspiracy to commit wire fraud, money-laundering conspiracy, and aggravated identity theft.
Hacker News AIAI score3838 Using AI for Cybersecurity Framework 2.0 Analysis and Reporting
NIST released Special Publication (SP) 1353 ipd, a quick-start guide illustrating practical ways AI could be used to analyze, plan, implement, and monitor progress toward CSF 2.0 outcomes, including structured AI prompts and three notional use cases covering policy and risk governance review, a draft Current State Profile, and a draft Target State Profile. Comments on the guide and its AI prompts are open through October 15, 2026, at 11:59 PM via [email protected], and NIST notes it is not seeking comment on the fictional organizational documents.
The DecoderAI score7171 US data brokers are selling half a billion dollars in RL training environments to Chinese AI labs
A ChinaTalk investigation found that at least nine US data firms, including Mercor, Surge AI, AfterQuery and Turing, are selling roughly $500 million worth of training data, some in the form of reinforcement learning environments, to Chinese AI labs. Chinese labs reportedly buy the same products previously sold to Anthropic or OpenAI to skip costly in-house development, and combine them with distillation from US models to close the gap with less compute. The authors argue the Bureau of Industry and Security should apply existing export controls to dual-use environments such as coding and biology, while noting Chinese labs still trail US peers by at least a few months.
The DecoderFeaturedAI score7878 Grok-built apps exposed patient data, plaintext passwords, and SpaceXSI's own sales pipeline
Security firm Claroc found that 35,578 of 37,571 live apps built with Grok's "Build" mode (94.7%) were accessible to anyone with the link, because "Anyone with the link" is preselected in the publish dialog and each app gets a subdomain that appears in searchable passive DNS databases. Exposed material included 24 apps from SpaceXSI and X employees, among them a confidential onboarding plan, a sales territory map with 594 strategic accounts, and ad proposals, plus patient lab values, a 3,500-employee hospital list, and a timesheet app containing 18 plaintext passwords. SpaceXSI said apps are private until shared and that employee accounts default to "Only you," while Claroc said it has taken the 24 employee apps offline but not other users' open apps, and is notifying affected owners directly.
Why it matters: The report documents a large-scale default-settings failure in AI-generated apps and shows how passive DNS can surface supposedly private deployments.