Cory Solovewicz receives more unwanted emails than you. Seriously—it’s a lot more. Since December 2024, one of the domains at which the security researcher receives email has registered 401,796 messages—by his calculations that’s an average of 699.99 pings per day.

This deluge isn’t the regular flood of spam, newsletters, and unwanted deals that fill many people’s inboxes. Instead, companies and other organizations are inadvertently sending Solovewicz other people’s private information and company secrets. Over the last few years, he’s received injury reports from a city government, confirmation of people’s pizza orders, and account setup emails from a school platform. “I get service orders for people that need repairs. I get lots of test platform credentials,” says Solovewicz, a security researcher and consultant.

Solovewicz is receiving the avalanche of messages as he’s the owner of the domains noreply.us and noreply.net, which he purchased in 2020 and 2024, respectively. After originally planning to use the noreply.us domain as a catch-all email—which receives mail sent to any @ address on that domain—to filter messages and enhance his privacy, the researcher quickly noticed that other systems were sending mail to @noreply.us addresses. “I created an accidental honeypot,” Solovewicz tells WIRED. “I had no idea it was going to turn into this.”

Read full article

Comments

In October 2025, a storm brewed over the Caribbean Sea. Weather models differed on its trajectory. Would it remain weak and end up in Haiti, or would it intensify and head to Jamaica? Artificial intelligence model WeatherNext, developed by Google’s DeepMind and Google Research, went with the latter. Five days before landfall, it predicted with 80 percent confidence that the storm system would hit Jamaica as a Category 5 hurricane.

Hurricane Melissa was catastrophic, causing flooding and landslides across Jamaica. But the AI model helped forecasters give an earlier warning to communities in its path, so they could better prepare.

In a paper published on Thursday in Nature, researchers show that the WeatherNext AI model can predict cyclones with unprecedented accuracy. On average, it gives forecasters a day more lead time than existing models; this means its predictions three days out are as accurate as previous models’ predictions two days out. On the ground, that extra day can mean a lot.

Read full article

Comments

It’s been a longtime feature of the annual Defcon hacker conference that attendees come away not only with knowledge of new software vulnerabilities and hacking techniques but also an elaborately designed conference badge—often electronic masterpieces embedded with intricate puzzles, complex crypto challenges, hidden Easter eggs, and even the mechanical gear trains of a watch.

Each year’s badge creator endeavors to top previous designs and blow the minds of hard-to-impress hackers. But this year’s badges take a different tack. Instead of the badge designs being the star, it’s what is inside the hardware that will really stand out.

This year, Defcon asked legendary hardware hacker Andrew “bunnie” Huang to create the badges—revealed here for the first time—and they include an innovative open source chip that Huang designed and that aims to do no less than advance the state of security, transparency, and trustworthiness in computing.

Read full article

Comments

The notion that scammers can use AI to sharpen their deceptions, polish their language, and lubricate their banter with victims is now a reality for anyone fighting the fraud operations that steal tens of billions of dollars a year worldwide. But can AI fully replace a human scammer, autonomously building the web of deception leading up to the fake investment that defrauds the mark? One study's experiment suggests that it can—and may even be able to carry out the majority of that long con more effectively than humans.

Researchers from four universities—Amrita Vishwa Vidyapeetham in India, Foscari University of Venice, the University of Melbourne, and Ben Gurion University of the Negev—carried out a broad study on the use and potential of generative AI chatbots in the growing scam industry centered around a form of fraud known as “pig butchering,” text-based romance scams that eventually shift to fake crypto investments that steal as much as six-figure sums from victims. In their study, the researchers pitted AI chatbots directly against humans in a simulation of the scamming process—or more specifically, the long, trust-building conversations that eventually lead up to soliciting a fake investment from the scam’s target.

They found that for the relationship-establishing stages of the scam—the stage that in real-world scams typically represents the longest part of the interactions with the victim, often stretching to months—an AI chatbot performed remarkably effectively, successfully impersonating a human and by some measures outperforming the real human “scammers” in their experiment.

Read full article

Comments

In the final weeks before Romania’s presidential vote in November 2024, TikTok accounts that had previously spent years posting about manicures or fashion suddenly started promoting a little-known politician named Calin Georgescu.

His posts, espousing hard-line views on immigration and anti-Semitic tropes, were viewed 120 million times before the vote. Georgescu, who had previously been polling in the single digits, stunned observers by winning the election’s first round with 23 percent of the vote.

In the Netherlands, Adriana Iamnitchi was watching closely. As chair of computational social sciences at Maastricht University, she leads the research into disinformation campaigns. She wanted to know how pro-Georgescu content was being monetized on TikTok through hidden influencer marketing and livestreamed political content.

Read full article

Comments

The Trump administration is quietly considering a rule change that could make it easier for polluters to build facilities—including certain gas plants and diesel generators that power data centers—with little to no notice to the public.

On Wednesday, the Environmental Protection Agency held a public hearing on a proposed rule change that would hand the power to states to decide how the public participates in the permitting process for certain new sources of air pollution. The proposed rollback comes as data centers face greater pushbackacross the US, with many communities using the permitting process to try to slow down development. Any changes could have major consequences for how ordinary people are given notice about new or expanded polluting facilities coming into their neighborhoods.

“As someone actively working in communities with data centers, I know this to be fundamentally true: People want to have a say,” Vanessa Lynch, a Pennsylvania organizer with Moms Clean Air Force, said at the EPA hearing.

Read full article

Comments

Forget the sale of the century. The auction house Sotheby’s has geared up for the sale of the epoch. On July 14 it opened live bidding on assorted fossils, but the pièce de résistance is lot 20, a rare 67-million-year-old Tyrannosaurus rex skeleton.

The specimen—dubbed Gus—is billed as one of the largest, most complete T. rexes ever found. Gus is expected to fetch up to $30 million and will go to the highest bidder, whether public museum or private collector. The latter have played an increasingly prominent role in buying fossils, with auction houses, according to paleontologists, contributing to the trend by building hype. But when private collectors swoop in and buy fossils at auction as luxury assets, those pieces of history are effectively lost to science.

By nearly all accounts, Gus is a big deal. In its description, Sotheby’s boasts that the specimen, which was discovered on a ranch in South Dakota, comprises “an incredible 183 fossil bone elements” making it “approximately 61% complete by bone count.” The fossil remains have been mounted in a custom steel armature along with replicas of the missing bones. The result is a reconstructed skeleton posed as if in hot pursuit, its mouth full of dagger teeth ready to tear into prey.

Read full article

Comments

Age verification is consuming the Internet. From social media bans in Australia to porn restrictions in half of US states, for many having to prove their age to access websites is becoming an everyday requirement. But one of the key technologies underpinning many of these age checks is about to seep into the offline world—with potentially life-changing consequences for people having their age predicted by AI.

Starting next year, the British government is planning to introduce facial age estimation—where AI scans your face and suggests how old you are—to help determine the age of asylum seekers arriving at the United Kingdom’s border. The move is believed to be the first time that a so-called facial age estimation (FAE) system has been used in this way. Many asylum seekers arriving in the UK will not have documents proving their age, and if children are incorrectly classed as adults, they can be stripped of some legal protections and placed in adult-only detention centers.

An investigation by WIRED and Lighthouse Reports, in collaboration with The Independent, has obtained an internal UK government report detailing its tests of FAE technologies. It shows how the systems regularly mistake children for adults and appear to contain serious bias problems, which directly impact the largest group of migrants subject to age assessments in 2025, according to data from the Home Office. The investigation raises questions about the effectiveness of the technology and whether it should be deployed in such high-stakes scenarios.

Read full article

Comments

Late last week, Anthropic took its new Claude Fable 5 and Mythos 5 AI models offline following a United States government export-control directive barring “any foreign national” from using the services. The company has been in talks with the White House since Friday but has yet to secure an agreement that would allow it to reinstate the offerings.

Since Mythos debuted in April, Anthropic has claimed—and warned—that the model has advanced capabilities for not only finding software vulnerabilities to help defenders patch them, but also figuring out ways to exploit them that could be used by bad actors. Anthropic itself noted this double-edged sword in its launch of Mythos 5 and Claude Fable 5. “A great deal of advanced usage of AI models is dual use: the same queries that are beneficial in the hands of cybersecurity professionals and biology researchers could be dangerous if available to malicious actors,” the company wrote in a blog post last week.

With this in mind, the company initially released a version called Mythos Preview to a select consortium as part of a working group known as Project Glasswing. Mythos 5 was also privately released to this group last week, while Claude Fable 5, which is a Mythos-grade model, was released to the general public with specific blocks on its ability to give responses to questions about biology and cybersecurity.

Read full article

Comments