LIVE FEED
AI-Accelerated WeChat Zero-Click Worm Spreads via RCE

AI-Accelerated WeChat Zero-Click Worm Spreads via RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Simon Willison

Calif Research has published details of WeWorm, a zero-click worm exploiting WeChat calls on iOS and Android that requires no user interaction to achieve remote code execution. The team reports that AI assistance compressed what would traditionally be months of work for a larger team into roughly nine days, dramatically lowering the barrier to sophisticated worm development. This represents a concrete, documented example of AI being used to accelerate offensive exploit development at scale.

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Apple patched over 30 vulnerabilities across iOS, macOS, and Safari, with four WebKit flaws credited to AI-assisted discovery by OpenAI Codex Security and Anthropic researchers using Claude. The disclosure marks a notable shift in AI's role in offensive and defensive security research, with Apple explicitly citing AI-accelerated exploit development as the reason for expediting its patch release timeline. This represents a concrete, documented instance of AI tooling being used to find memory corruption and use-after-free vulnerabilities in a major browser engine.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.