For decades, hip-hop artists have been invited into schools as guest speakers, workshop leaders and visiting performers. They’ve mentored young people after school; started nonprofits; taught music production, poetry, history and entrepreneurship; and helped generations of students find their voices.

Yet many of these artists lack the one credential schools still value most: a bachelor’s degree.

But what if these artists have been teaching all along?

A new partnership between College Unbound and the Hip-Hop Education Center aims to answer that question, not by teaching artists how to become educators but by recognizing the expertise they’ve developed through decades of community leadership, cultural work and mentorship.

The program — a Bachelor of Arts in organizational leadership and change designed specifically for hip-hop educators and cultural leaders — isn’t a separate degree or a simplified version of one. Students complete the same degree requirements as every other College Unbound student. “It’s the same degree,” says College Unbound President Adam Bush. “It’s simply lived differently.”

The program is about more than hip-hop. It asks a question that reaches far beyond music: Who gets to decide what expertise looks like?

A Degree Years in the Making

Although the bachelor’s degree officially launched this year, its roots stretch back decades.

Hip-hop emerged outside traditional institutions, often in response to systems that excluded Black and Brown communities. As hip-hop education gained legitimacy, educators wrestled with a difficult question: How can we preserve the authenticity of the hip-hop culture while creating pathways that allow practitioners to teach at schools and colleges?

Long before there was a curriculum at College Unbound, there were conversations between Bush, educator and author Sam Seidel, and Martha Diaz, founder of the Hip-Hop Education Center, who has spent nearly three decades helping to build the field of hip-hop education. These conversations focused on this central question.

For Seidel, who has spent much of his career documenting and advancing hip-hop education, the answer required finding the right institution.

“What was always important,” he says, “was making sure the people who created the culture and have been carrying it forward had a central seat at the table teaching the next generation.”

College Unbound proved to be an unusual fit. Rather than asking students to leave their experience at the classroom door, the college builds on it. Students develop projects rooted in the work they’re already doing, making professional experience, leadership and community knowledge part of the curriculum.

“This program opens opportunities for seasoned practitioners,” adds Diaz. “These are people who’ve spent decades mentoring young people, creating art and leading communities but haven’t always had access to the credentials that allow them to teach full-time.”

From the Stage to the Classroom

For Sebastien Elkouby, a hip-hop artist and educator, the degree feels less like a beginning than the fulfillment of a long-awaited opportunity.

Born in France, Elkouby spent years working in music before becoming a U.S. citizen, raising a family and earning a career and technical education credential. Today, he teaches Global Awareness Through Hip Hop Culture and Beatmaking classes at a public charter school in Los Angeles.

“When I found out about the College Unbound program, I thought, ‘Finally,’” he says. “I couldn’t have designed a better opportunity than going to college under the guise of hip-hop culture.”

His years as an emcee prepared him for the classroom in ways a traditional teacher preparation program might not have. Standing in front of students, he continues, isn’t much different from standing in front of an audience. “You have to capture their attention. You have to tell a story. Teaching is a performance.”

He sees similar parallels in curriculum design. The care he once devoted to writing lyrics with a beginning, middle and end now shapes the lessons he designs. His classes trace the historical roots of hip-hop, connecting music to social movements, politics and culture.

Asante Burks reached a similar conclusion while on a different path. Known professionally as Asante Amin, the rapper and member of Soul Science Lab believes that performing and teaching are two sides of the same coin. “On stage, I want to entertain, educate and inspire. In the classroom, I want to do exactly the same thing,” he says.

His teaching centers on the cypher, the circle where rappers, emcees and beatboxers share ideas, stories and experiences while learning from one another. In that setting, everyone becomes both teacher and learner. “It isn’t just me delivering knowledge. The collective mind is where real learning happens,” he adds.

That philosophy reflects one of hip-hop pedagogy’s central ideas: learning is participatory, communal and deeply connected to identity. It also challenges a persistent misconception. “People think hip-hop education is just playing rap music in class,” says Diaz. “It’s a culture, mentorship, history and community. It’s understanding students as whole people.”

Recognizing the Experts Already Among Us

A member of College Unbound’s first graduating class, Anjel Newmann now serves on the college’s faculty, leads the arts organization AS220 and serves on the school board in Providence, Rhode Island. She sees the bachelor’s degree as more than an academic credential.

“It’s helping people who have been teaching in the community move from guest speaker to lead teacher,” she says. “They know how to connect with young people who may have already tuned school out. They understand identity and community.”

College Unbound’s project-based model mirrors the way artists naturally work. “As artists, everything we do is project centered,” says Newmann. “You’re constantly researching, creating, revising and sharing your work. College Unbound allows every subject to connect to that bigger vision.”

For Newmann, the lesson extends beyond hip-hop. “There are experts in our communities who were blocked from credentials because of systemic barriers,” she says. “College Unbound didn’t ask them to become experts. It recognized that they already were.”

Rethinking Expertise

As colleges across the country search for new ways to serve adult learners and employers increasingly question what degrees actually measure, College Unbound offers one possible answer: Instead of asking students to prove they deserve admission, the institution begins by asking what they’ve already built.

Organizing communities, mentoring young people, leading nonprofits, creating art and solving real-world problems are acknowledged as evidence of learning. “We’re recognizing lived experience as the value that it is,” says Diaz.

Seidel hopes the program’s success ultimately will be measured by what graduates build together long after they leave. He imagines meeting them at a future gathering of hip-hop educators — that people who’ve built sustainable careers are supporting their families through education and the arts and remain connected years later. “I want to hear them telling stories about the work they’re doing together,” he adds.

The success of programs like this won’t be measured only by the diplomas students earn. It will be measured by whether colleges begin to recognize that expertise isn’t created the day someone receives a credential.

Burks believes that shift is inevitable.

“I think this educational process is the way of the future,” he says. “In order for education to remain meaningful and relevant, it’s going to have to implement experimental accreditation processes. It should be like music.”

Four years ago, Jony Ive left Apple, and joined OpenAI, yet he isn’t named in the intellectual property theft suit. The reasons for that are myriad, ranging from the personal to practical.

On July 10, Apple launched what looks to become a major lawsuit against OpenAI, accusing ex-Apple employees of stealing intellectual property. However, despite former Apple design chief’s links to OpenAI, he isn’t in the crosshairs of Apple’s lawyers.

In Sunday’s “Power On” newsletter for Bloomberg, Mark Gurman writes about the lawsuit and the oddity. He believes there are two big reasons for Apple not to implicate Ive in the lawsuit at all.

The first is relatively simple: He had little to do with it.

Though Ive is chiefly the face of OpenAI’s new hardware work, he is seemingly focusing on that product. While Tang Tan, one of the named targets of the lawsuit, does have more control over the hardware side of OpenAI as its chief hardware officer, Ive just does not.

Ive isn’t dealing with recruiting or operations at OpenAI. Since he doesn’t have much to do with that stuff, he wouldn’t have taken part in the activities in the lawsuit.

The lawsuit largely discusses the alleged actions of Tan, including problematic emails and encouraging potential hires from Apple to bring in prototypes and designs. Tan would’ve been in a position to carry out these actions, leaving Ive’s hands clean.

Relationships and axe-grinding

The other reason for not going after Ive is all about image. Gurman believes that Ive’s closeness to Laurene Powell Jobs, entrepreneur and widow of Steve Jobs, is insulating Apple’s ex-designer.

Powell Jobs is a supporter of Tim Cook and John Ternus, and she still has a close relationship to the company. The impact of Steve Jobs returning and saving the company means her approval is important to Apple as a whole.

Dragging Ive into the suit would make maintaining the relationship with Powell Jobs difficult.

On top of that, the optics of attacking Ive after his major role in the company’s history and his own close relationship to Steve Jobs would hurt the company.

If he had been named, Gurman proposes that Ive would’ve received sympathy while Apple would be criticized. That criticism would also be seen as Apple having an axe to grind following Ive’s decision to leave the company.

Ive left in 2019, but he was a consultant until 2022 under his design company, Love From. That period saw a number of Apple designers leave the company to rejoin their leader, Ive, at his new firm.

To Apple, Ive’s leaving and the subsequent departures may have been seen by Apple as Ive dismantling the design team while still under its payroll.

Whatever the reason for Apple avoiding Ive, it has led to him being almost completely absent in the lawsuit.

In the entire 40-page document, it refers to a group of “former Apple leaders,” which you’d expect includes Ive.

Apple can still do a lot of damage to OpenAI’s image and hardware work with its current lawsuit, going after Tang Tan. But by avoiding the temptation of tacking on Ive, Apple does so without causing itself that much reputational harm.

Engineers at Northwestern University have built a small flying machine that fades from view by rotating faster than eyes can follow. Phantom Twist earns its name through a constant twist that turns solid parts into a soft smear against the sky or ground below.

Standard drones attract attention since they essentially sit there with all of their weight focused in the center. Its four whirling blades lift it off the ground, but a giant still frame in the middle stands out like a sore thumb. People and animals can immediately recognize the motionless shape. A new version of this removes the “still” reference by relocating the entire assembly. In this unique design, a single motor drives only one propeller in one direction, but the rest of the system, including the batteries and control boards, spins in the opposite way and travels simultaneously. That way, you have a nice, smooth balance, and the entire piece does not hang in one spot. The only thing holding everything together are some support cables and a counterweight to keep it spinning smoothly.

Sale

DJI Neo, Mini Drone with 4K UHD Camera for Adults, 135g Self Flying Drone that Follows You, Palm Takeoff…

• Due to platform compatibility issue, the DJI Fly app has been removed from Google Play. DJI Neo must be activated in the DJI Fly App, to ensure a…
• Lightweight and Regulation Friendly – At just 135g, this drone with camera for adults 4K may be even lighter than your phone and does not require FAA…
• Palm Takeoff & Landing, Go Controller-Free [1] – Neo takes off from your hand with just a push of a button. The safe and easy operation of this drone…

When this drone is flying at top speeds of up to 25 revolutions per second, the human eye can only capture a fraction of a second. It only opens for a flash, just like a camera sensor. When you move so quickly, the image blurs and loses its clear edges. What’s left on the drone is a faint, hazy muddle that you scarcely see unless you look for it specifically. Using a human vision model, researchers evaluated the craft against a variety of backdrops, and it scored around 10 times lower on visibility than a normal quadcopter of similar size. Not because of any fancy colors or coatings, but simply because it moves so quickly that your eye doesn’t have time to lock onto it.

Before settling on the final design, a team led by Professor Michael Rubenstein used computers to experiment with almost 20,000 potential designs. Each one had its flight capabilities and stealth verified in simulation before the software eliminated the weaker designs and allowed the stronger ones to proceed to the production stage. He explained that the fundamental difference with this project was that instead of attempting to hide the drone to blend in with its surroundings, they were looking at how to construct the machine in such a manner that it tested the limits of human motion perception. Emma Alexander noted that human vision forms an image over time, and moving quickly enough prevents that picture from ever solidifying clearly. Essentially, the eye receives an averaged out image of the drone blended with its surroundings, which fuses into a beautiful soft haze.

Wildlife researchers will be the first to take advantage of this. You can use an invisible drone to film nesting birds or monitor animals in wetlands without disturbing or influencing their activity. You can have a guy standing on the ground evaluating bridges, towers, or pipelines while the drone hovers overhead, and he has no idea. However, there are certain limitations to this technology, such as the noise produced by spinning propellers and the tiny rods that nonetheless capture the eye in the correct light. For the time being, these factors preclude complete concealment. Future generations, however, attempt to close the gap by improving the plastics and motors. Each step should get us closer to a veil that is nearly undetectable.
[Source]

Shenzhen hosted the opening night of something that had never happened before. The Ultimate Robot Knock-out Legend, or URKL, brought together 32 teams from more than ten countries for full-sized humanoid robots to trade strikes inside a cage. Every team started with the same base machine from Chinese robotics company EngineAI. The T800 stands roughly five feet eight inches tall, weighs between 165 and 187 pounds, and carries 29 joints built for human-like motion. Teams then added their own armor plating and tuned the software that decides how each robot moves, balances, and reacts.

Fights followed fairly simple rules, with the emphasis on landing effective hits, staying on your feet, and avoiding being clobbered. The robots would hurl punches, try to launch kicks, and recover quickly after being knocked flat on their backsides. The judges monitored clean hits and overall machine expertise. People expected the robots to be tough from the outset, but there was still some doubt about how they would fare once the real suffering began. White Eagle and Matador’s early bout changed everything. The White Eagle robot found an opening and delivered a powerful high kick that smashed right into Matador’s cranium. The head jerked jarringly back and forth many times before just falling loose. As Matador descended, the head swung loose and then totally detached.

Unitree R1 Humanoid Robot (White, R1)

• Three models, one lightweight platform R1 Air (20 DOF, monocular camera), R1 (26 DOF, binocular camera, head+waist joints), and R1 Edu (26 DOF…
• Easy setup – no coding required for basic use Unbox, power on, and start. Manual teaching feature: physically pose the robot, and it replays the…
• More DOF = more expressive movement 26‑DOF models (R1 / R1 Edu) add head and waist articulation for smoother dance and running. For safety reasons…

The majority of the audience anticipated Matador to freeze up right there and then. The head holds all of the cameras and crucial sensors that let a machine to detect what is going on and react in a split second; without them, many robots would be walking dead, unable to track their opponents or stand upright. Nevertheless, Matador persisted.

Even with the head dangling from its cables, the black robot remained upright long enough to hurl a few more punches and kick out with its legs. There was no way the body would merely collapse into a heap. The torso and lower frame housed all of the control systems that kept the creature running, while the wide-angle radar and other body-mounted sensors provided the main computer with all of the information it need to keep going. A combination of super-strong posture control and shock-absorbing joints enables the machine to endure impacts while keeping its arms and legs in sync even after the head is removed. White Eagle saw an opportunity and seized it, winning when Matador eventually gave up and was unable to climb back up. The delighted robot then raised its arms in celebration, executing a brief victory dance that the audience enjoyed. Staff arrived to take the second robot from the ring.

The first thing I thought when I pulled the Razer Hammerhead V3 HyperSpeed gaming earbuds out of their box was “Wow, these are ugly.”

Not exactly the strongest first impression, but it’s unavoidable when each bud has a weird, bulbous design that gives them an appearance like a pair of obese AirPods. The shiny black plastic material looks cheap, as does the printed Razer logo on the outside, which (despite all the Razer Chroma branding on the box) is just a decal that doesn’t illuminate.

An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies.

Dubbed HelloNet, the campaign has been active since at least May, deploying a malicious payload that acts as a proxy and loader for additional malware.

According to Kaspersky researchers, HelloNet has impacted organizations in the government, energy, transport, education, and logistics sectors.

ViPNet update abuse

ViPNet is a family of Russian information-security products developed by InfoTeCS, providing VPN, endpoint, and network access protection, firewall, certificate management, centralized administration, and secure messaging and file transfer.

The tool is commonly used in Russia, where it is certified by the authorities for use in government and other regulated environments.

Due to its market reach in Russia, especially among high-value organizations, it has been targeted often by hackers. In April, 2025, Kaspersky reported that threat actors impersonated a ViPNet update in attacks.

In the latest campaign, attackers placed a malicious file (wtsapi32.dll, dubbed HelloInjector) inside the local ViPNet Update System directory to be sideloaded at system startup via the legitimate itcsrvup64.exe.

This DLL is the first-stage loader that injects into the svchost.exe process, granting next-stage payloads elevated privileges on Windows and persistence across reboots.

Kaspersky does not describe exactly how the attackers gained initial access to perform this file change, nor do they claim that ViPNet’s update infrastructure itself was compromised.

Malware toolset

HelloInjector runs its embedded payload, which Kaspersky named HelloProxy, in memory and contacts the command-and-control (C2) server to receive additional modules.

One of these modules is HelloExecutor, a backdoor that can execute commands and conduct network reconnaissance on the host.

A second one is HelloCleaner, a tool that removes ViPNet log data to hide the malicious activity.

Another implant called HelloBackdoor is Rust-based and supports uploading and downloading files, as well as command execution.

Kaspersky has tentatively attributed the campaign to an unidentified Chinese-speaking advanced persistent threat (APT) group.

However, the researchers stressed that the evidence is weak, relying primarily on an unused string referencing the Chinese website sina.com and a malware download mirror hosted by the University of Science and Technology of China.

As a result, they assign the attribution low confidence and do not rule out the possibility of a false flag operation.

The cybersecurity firm recommends thorough monitoring of systems running ViPNet software, particularly traffic passing through ports 5003, 5060 (HelloProxy), and 443 (HelloBackdoor).

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper

AI and ML

Researchers found confidence increased even as accuracy fell

In 2026, AI still “hallucinates” and gives you wrong answers a good chunk of the time. Nevertheless, academics from French and Italian universities have found that access to AI advice suppresses critical thinking, making people more likely to confidently parrot incorrect information that the bot provided.

“For humans, the capacity to say, ‘I don’t know,’ is very important because it represents the recognition of the limits of our own knowledge,” said Valerio Capraro, associate professor at the University of Milano-Bicocca, in a phone interview. 

“But now with AI, we can get an easy answer to virtually every question, so we wondered whether this would interfere with human capacity to say, ‘I don’t know,’ to suspend judgment.”

Capraro and co-authors Chiara Marcoccia (École Normale Supérieure) and Walter Quattrociocchi (Sapienza University of Rome) set out to see how access to AI advice affects people’s willingness to admit ignorance.

The title of their paper reveals their findings: “AI advice suppresses people’s willingness to say ‘I don’t know’, even when the advice is wrong and accuracy is incentivized.”

Capraro said that he and his colleagues designed a set of questions where large language models typically fail. In this instance, they asked study participants to answer questions about visual details in films, such as the color of the team’s uniform in Bend It Like Beckham or the vehicle Monica drives in Like a Cat on a Highway.

The researchers expected these sorts of details would be absent from most model training data, which was the case for the model used in the experiment (Step 3.5 Flash). They also tested recent frontier models (GPT-5.5, Claude Sonnet 4.6, Gemini 3.5 Flash), which missed the vehicle question but often got other details correct.

They used Step 3.5 Flash because it was usually wrong, as explained in the paper, so any reduction in judgment could not be explained away as sensible delegation to a reliable tool.

“We divided human participants into two groups,” explained Capraro. “One group had to answer these questions without AI advice, and another group could ask the AI for advice. What we found is that in the baseline, 44 percent of people responded that they didn’t know the answer, so they suspended judgment. With AI advice, only three percent did so. So the judgment suspension collapsed.”

Capraro said that even more interestingly, accuracy collapsed when AI help was available. In other words, they trusted AI’s answer more than their own.

“In the baseline, 27 percent of people gave the correct answer,” he said. “With AI advice, only nine percent of people gave the correct answer. So some would-be correct people asked for AI advice and became wrong.”  

Also, access to AI advice made people more confident that they were correct. The baseline level was 30 percent, he said, but with AI help, confidence rose to 76 percent. They believed the bots, despite the possibility of hallucinations.

“So basically people became much worse – the accuracy was only one third – but they were twice as confident,” he said.

The researchers also conducted the experiment with monetary incentives, which helped a bit. Willingness to suspend judgment and admit ignorance rose from 3 percent to 8 percent and accuracy rose from 9 percent to 16 percent but was still below the baseline of 44 percent and 27 percent respectively.

While the researchers chose questions about film trivia, they contend their findings can be generalized across other domains.

Capraro said that he believes this is an issue that needs to be dealt with at a societal level through AI literacy and education policy initiatives. “Of course model providers should try to help, but I would imagine that the incentives are not very much aligned,” he said. “A much more promising approach would be at the educational level.”

“I’m very much concerned for children, because adults have learned critical thinking. But for children who basically are born with these systems, the risk is that they don’t even learn the basic critical skills.” ®

Rumor mill: The RTX 5000 series is real – according to reports, an Nvidia board partner already has one of the cards in its possession. However, a familiar problem is preventing them from being released, one that will come as no surprise to anyone.

The latest RTX 5000 Super story, which comes from VideoCardz, claims that Nvidia has told the board partner holding onto the card that it can’t be released yet because of the price of 3GB GDDR7 memory components.

The publication’s sources say that a 3GB GDDR7 chip currently costs between $60 and $70, while a standard 2GB GDDR7 chip is just $20. Paying over three times more for a 50% memory boost is going to skyrocket the cards’ BOM cost.

At a time when components already cost a fortune as AI hyperscalers snap up all the DRAM and NAND manufacturing capacity, releasing RTX 5000 Super cards with comically high price tags isn’t going to prove popular.

Another issue is that since 2025, Nvidia has left it to board partners to source their own memory chips. If these companies are told by Nvidia that they have to sell the Super series at or close to MSRP, they’re likely not to make any cards at all, rather than take a huge loss on each one sold.

Using 3GB GDDR7 memory chips allows Nvidia to push up the cards’ memory capacity without changing the number of memory modules or altering the memory bus. But their high price is proving to be an issue.

Three RTX 5000 Super models are reportedly in the works: the GeForce RTX 5080 Super, RTX 5070 Ti Super and RTX 5070 Super. This aligns with previous rumors, which included some of those cards’ alleged specs.

Nvidia is also said to have an RTX 5050 9GB ready that uses the 3GB GDDR7 models. Like the Super series, its release date still hasn’t been decided because of the chips’ prohibitive price.

If Nvidia really is waiting for memory prices to drop before releasing the cards, it could be a while before we see them. SK Hynix predicts that 2027 will be the worst year ever for the industry from a supply perspective, and that demand will continue to outpace supply even beyond 2030.

This is the latest piece of RTX 5000 Super news we’ve heard recently. The RTX 5080 Super just appeared in Seasonic’s PSU calculator, joining the RTX 5070 Super and RTX 5070 Ti Super, which were added in September.

Renowned leaker MEGAsizeGPU, who has a good track record when it comes to Nvidia rumors, said last month that the RTX 5000 Super series could be released this year, but that’s looking increasingly less likely.

A flaw in Anthropic’s Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing it to abuse Claude’s access to connected services such as Gmail, Google Docs, Google Calendar, and Salesforce.

The issue was discovered by Ax Sharma of Manifold Security, who says it stems from how the Claude extension determines whether a user intentionally requested one of its built-in tasks.

Chrome extensions with permission to run on a website can inject JavaScript into the page, allowing them to read and modify its contents. This includes changing page elements, reading information displayed on a site, and generating click and keyboard events programmatically.

According to Manifold’s report, the Claude extension listens for click events on a specific page element that launches one of its built-in AI workflows. These workflows are predefined tasks that allow Claude to perform actions in connected services such as Gmail, Google Docs, Google Calendar, and Salesforce.

The supported workflows include:

• usecase-gmail: read recent Gmail, identify promotional emails, and click unsubscribe
• usecase-gdocs: open the user’s latest Google Doc, read all comments and feedback
• usecase-calendar: read Google Calendar, find free slots, create meetings
• usecase-salesforce: modify Salesforce leads, convert them to opportunities

The researchers found the extension accepted JavaScript-generated click events without verifying whether they originated from a real user.

When a browser generates an event from a real user action, such as a mouse click or key press, it marks it as trusted by setting the Event.isTrusted property to true. However, if JavaScript is used to generate the event, the browser automatically sets Event.isTrusted to false, allowing webpages and extensions to distinguish between real user interactions and events generated by JavaScript.

According to Manifold Security, the Claude browser extension did not verify that a click event originated from a real user by checking the browser’s Event.isTrusted property before executing one of its predefined workflows.

Instead, a malicious extension with permission to modify content on the ‘claude.ai’ domain could inject a page element containing one of nine supported task identifiers and generate a synthetic click event.

Although the browser correctly marked the event as untrusted, Sharma says the Claude extension treated it as a legitimate user click and executed the requested AI action.

The researcher notes that the flaw does not allow arbitrary prompt injection, but instead, the attack is limited to the nine predefined tasks built into the extension.

The attack also does not allow a website to compromise the Claude extension directly, but requires an attacker to trick a user into installing a malicious extension that can execute code on claude.ai.

That extension could then manipulate the webpage and trigger the Claude extension’s workflows.

While a malicious browser extension already has broad access to webpages it can run on, the researchers say this flaw allows it to abuse Claude’s authenticated access to various connected services.

The impact depends on the Claude extension’s configuration and whether users choose to approve sensitive actions or have Claude’s optional “Act without asking” setting enabled, which allows predefined workflows to execute automatically.

In a second finding, the researchers found an internal ‘skipPermissions=true‘ parameter that bypassed certain permission checks when launching the extension.

However, they acknowledged that the mechanism was not directly exploitable on its own and would require another vulnerability to create a specially crafted URL. 

The researchers reported both findings to Anthropic through the company’s bug bounty program. Anthropic acknowledged the reports and closed the synthetic-click report, stating they were already tracking it as a broader issue. The second flaw, involving the internal skipPermissions=true parameter, was classified as informational.

Manifold says the flaws are still exploitable in the latest version, 1.0.80, of the browser extension, released on July 7.

“Manifold verified July 7 that both findings remain reproducible in 1.0.80. The content script and side-panel handlers we cited are byte-identical to the v1.0.72 source,” reads the report.

Security teams log 54% of successful attacks and alert on just 14%. The rest move through your environment unseen.

The Picus whitepaper shows how breach and attack simulation tests your SIEM and EDR rules so threats stop slipping by detection.

Get the whitepaper