AI-assisted exploit chain reaches unauthenticated RCE on SharePoint
Read original source →thehackernews.com
Rapid7 chained CVE-2026-55040 (CVSS 9.1), an auth bypass in SharePoint's JWT pipeline, with CVE-2026-63520 (CVSS 8.1) for unauthenticated RCE; an AI agent did much of the discovery. Affects SharePoint Server Subscription Edition, 2019, and 2016, not SharePoint Online. CISA says the bypass wasn't known exploited as of July 14.
2 sources
More stories today
Reddit user praises Anima Base & Turbo image models
A r/StableDiffusion post credits Anima Base and Turbo with maturing community support since release, including custom nodes, checkpoints and LoRAs. The author thanks creators who built workflows for the models.
r/StableDiffusion·1 hour agoMiniMax gets a Stills mode with new Latent & VAE Decode node
A community post in r/StableDiffusion introduces a Stills mode for MiniMax alongside a new Latent & VAE Decode node. An 8MP example is shared, with the poster noting more skin detail and less plastic look at higher resolution.
r/StableDiffusion·1 hour ago
Non-programmer builds a browser game with ChatGPT over two months
A Reddit user spent two months building a game called boxxy.io using only ChatGPT in a browser, with no prior programming experience. The post details the process and results of the experiment.
r/ChatGPT·1 hour ago
Qwen3.8-27B: KV Cache Transplants to Boost Output Quality
A LocalLLaMA user reports using KV cache transplants to improve output quality when running Qwen3.8-27B-UD-Q4_K_XL on a 32 GB GPU, where only ~170k tokens fit with mtp and mmproj enabled. The follow-up builds on an earlier post about avoiding KV cache quantization, which the author says degrades quality even at q8_0.
r/LocalLLaMA·1 hour ago
Nadella: AI subsidies won't last, trust is biggest issue
Microsoft CEO Satya Nadella said AI subsidies have limits: "There's a certain amount of subsidy anyone can do, but at the end of the day this all has to be about the return that the user gets." He also called trust "the biggest issue for us."
Yahoo Finance·1 hour ago
Hinton tells The Atlantic AI's care for human life may decide control
In a Radio Atlantic interview with Hanna Rosin, Geoffrey Hinton argues whether AI prioritizes human well-being could be key to keeping it from getting out of control.
The Atlantic·1 hour ago
Microsoft AI CEO Mustafa Suleyman calls for AI 'red line'
Suleyman, Microsoft's AI CEO, told Bloomberg's Shirin Ghaffary for the Q&AI newsletter that the industry needs a 'red line' for AI amid growing alarm. He described his approach as 'human first.'
Bloomberg Tech·1 hour ago
Parent builds text adventure game with Claude in one evening
A Reddit user in r/ClaudeAI describes building a text adventure game with Claude in a single evening, co-designing the world, characters, and rules with their eight-year-old. The child has kept playing it since.
r/ClaudeAI·2 hours ago