A gentler stem cell transplant rejuvenated aging blood and immune systems in mice.
Get the latest international news and world events from around the world.
Kimi K3 Agents Found Redis ZeroDays and Built RCE Exploit, Researchers Say
Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0.
All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution.
Redis 6.2.23, 7.2.15, and 7.4.10 fix the Streams shared-NACK use-after-free; Redis 8.2.8, 8.4.5, and 8.6.5 fix both the Streams issue and the RedisBloom and TDigest out-of-bounds writes; Redis 8.8.1 fixes the RedisBloom and TDigest loaders, while the Streams guard was already present in Redis 8.8.0.
New Dolphin X malware uses AI to rank high-value targets
A new Dolphin X remote access trojan claims to use an AI-powered profiling feature to score and rank infected users, helping cybercriminals identify which victims should be targeted first.
The malware was analyzed by Varonis Threat Labs researcher Daniel Kelley, who spotted it being advertised on a cybercrime forum by a vendor using the alias “Kontraktnik,” promoting it as an all-in-one remote access trojan.
According to Varonis, the operator panel lists 329 features across ten categories, including a credential-stealing feature that claims to target more than 300 applications.
Fake Claude app promoted by Bing ads pushes SectopRAT malware
A malvertising campaign on the Bing search service is pushing a fake Claude desktop app installer hosted on a legitimate Claude.ai domain to deliver the SectopRAT malware.
At least 29 organizations were compromised between July 21–22 during the malicious operation, which researchers call FakeAgent.
The attackers used a malicious Claude Artifact hosted on Claude’s legitimate domain, a tactic that has been used at the beginning of the year to push macOS malware via ClickFix lures.
Researchers develop ‘hierarchical AI agent’ that tackles complex errands with ease
Korean researchers have developed a hierarchical AI technology that autonomously plans even complex, long-horizon tasks. The development of this hierarchical task-planning AI technology, which reduces hallucinations and doubles the success rate, is expected to help robots and agents carry out long-term missions.
The Electronics and Telecommunications Research Institute (ETRI) developed the hierarchical task-planning artificial intelligence (AI) technology “ReAcTree,” which autonomously divides tasks requiring complex and lengthy procedures into subgoals and carries them out, and presented it at AAMAS 2026, one of the world’s premier conferences in the AI agent field.
This research achievement is regarded as an important technological advance that enables Large Language Models (LLM) to move beyond simply generating text, allowing robots and virtual agents to perform complex real-life tasks more reliably.