Clara Vásquez

A Searchlight Cyber researcher spent $25 on GPT-5.6 Sol Ultra to find a chain of vulnerabilities that allows remote code execution on WordPress without prior authentication. In the exploit market, a finding like this sells for up to $500,000.

The U.S. House of Representatives’ Science Committee advanced a measure to create a federal AI security center. The proposal arrives as the country still lacks a comprehensive federal law on artificial intelligence. The article compares the center to the European AI Act and details the legislative steps still needed for it to become law.

zkao, zkSecurity’s AI auditor, found a critical soundness bug in the openvm-pairing library of the OpenVM zkVM after nine and a half hours of scanning. The flaw, cataloged as CVE-2026-46669, allowed a malicious prover to forge any pairing equality and has already been fixed in OpenVM 1.6.0.