Cyber

The Ethical AI Company Billed You for Using Competitor Tools

Topics: Anthropic, Claude Code, AI Ethics, Billing, Vendor Trust Anthropic’s detection logic found “hermes.md” in a user’s git commit history. The user was on the $200/month Claude Max plan with 86% of their usage allocation untouched and no active session running. Anthropic billed $200.98 in extra charges. When the user reported it, support acknowledged the billing error three times and refused the refund. The post reached 1.4 million views. Anthropic then issued the refund plus one month of credit. ...

An empty hospital emergency triage station at night, medical monitors showing vital signs, a diagnostic computer terminal on the desk, dim clinical lighting, no people present.

AI Outperformed ER Doctors in a Harvard Trial

Topics: AI, Healthcare, Clinical Trials, Emergency Medicine Listen to this article Harvard ran a controlled trial of AI performance in emergency triage and published the results this week. The AI outperformed emergency physicians on diagnostic accuracy. Most of the conversations that follow a result like this focus immediately on liability. That conversation is worth having. It is not the most important one. What Emergency Triage Actually Tests Emergency triage is decision-making under a specific set of conditions: incomplete information, time pressure, high consequence, and compounding cognitive load from case volume. A physician who has seen 40 patients in a shift is making probabilistic judgments under fatigue in a way that a physician at the start of a shift is not. ...

Dark terminal screen showing a root shell prompt, with kernel source code diff on a second monitor, lit only by cold monitor glow.

CVE-2026-31431: The Optimization That Opened Root

A 732-byte Python script dropped today gives any unprivileged user a root shell on every mainstream Linux distribution running a kernel built after 2017. No race condition. No kernel-specific offsets. A straight logic flaw in code that has been shipping on your servers, your CI/CD runners, and your cloud instances for eight years. The vulnerability is CVE-2026-31431. The researchers named it Copy Fail. Here is what happened. The AF_ALG Interface In 2003, the Linux kernel crypto API grew a socket interface: AF_ALG. The idea was sound — expose kernel crypto primitives to userland without requiring applications to link against third-party crypto libraries. You open an AF_ALG socket, set the algorithm, feed it data, get results back. Clean separation between userland and kernel. ...