© Getty Images/cagkansayin
OpenBSD 8.0 is here, marking the project's 61st release and continuing its schedule of semiannual releases dating back to 1996. What started more than 30 years ago as a fork of NetBSD has grown into one of the most security-conscious operating systems in active development. In a post to the project's announcements mailing list, OpenBSD founder Theo de Raadt highlights a host of improvements included with the latest version and writes that the project remains "proud of OpenBSD's record of more than thirty years with only two remote holes in the default install."
The latest OpenBSD version brings new features and improvements across the board. These changes, particularly the new Intel Arc support and expanded virtual address space, should improve compatibility with modern graphics cards and allow the system to map more than 4GB of VRAM. Some of the major updates noted in the release newsletter are as follows:
The new OpenBSD also retires support for Loongson architecture after the port stopped working with the Clang 22 compiler. If you're interested in reading over all the changes that come with the new OpenBSD 8.0, you can take a look at the release announcement.
© OpenBSD
© Getty Images/iStockphoto/sasha85ru
Bellevue, Wash.-based hiring technology company Humanly has acquired CareerArc to merge its artificial intelligence screening tools with software that helps employers attract job applicants.
The deal announced Wednesday brings together Humanly’s automated chat and interview systems with CareerArc’s social media recruiting and career-site mapping platforms.
The transaction follows an aggressive M&A streak for Humanly, which includes its acquisition of employee engagement platform Anthill earlier this year and a trio of other recruiting tech acquisitions in 2025 — Sprockets, Qualifi, and HourWork.
Founded in 2018, Humanly builds software designed to automate candidate engagement, screening, and interviewing for high-volume employers.
“High volume employers have had to piece together their hiring process with a collection of disconnected tools,” Co-founder and CEO Prem Kumar said in a statement, noting that the deal helps bridge the gap by reaching candidates earlier in the search process.
Founded in 2009, Burbank, Calif.-based CareerArc provides recruitment marketing tools — including social recruiting software and interactive career-site mapping — to help employers reach and convert job seekers.
Its core offerings include HireSocial, a social media recruitment platform designed to automate job postings, and Job Maps, an interactive career-site tool that lets candidates explore open positions visually by location.
Humanly, which is No. 147 on the GeekWire 200 ranked index of the Pacific Northwest’s top startups, raised $25 million in Series B funding in April. The startup has raised $52 million to date.
Humanly counts Microsoft, Domino’s, Massage Envy, Worldwide Flight Services, and MGM Resorts and Casinos among its more than 120 customers.
Nine of CareerArc’s 13 employees are joining Humanly, which now employs 50 people.
Welcome back, aspiring cyberwarriors!
Some of you have already seen the headlines about malware calling out to AI APIs. Recently, Talos found a Windows implant called CLOSEDQUORUM that leaves its tactical command and control decisions to a panel of commercial LLMs while the operator sleeps. Malware like that doesn’t leave the traces we’re used to hunting. Now you find prompt templates, provider endpoints, API key prefixes, jailbreak wording and sometimes text written to talk an AI sandbox out of flagging the file. Talos calls these cognitive artifacts and developers who wire an LLM into their tooling leave some behind.
Cisco Talos built a free research tool called CAIRN. The name is a metaphor. A cairn is a pile of stones hikers leave on a trail so the next person can see where to go. CAIRN looks for the same kind of marker inside malware that talks to AI. It works from metadata, which means you never download the sample and you never run it. Keep in mind, it needs a VirusTotal API. It sorts what it finds into three tiers, from a simple AI string match, to behavior and families. It also clusters samples that look alike even when they don’t share an obvious string.
CAIRN is a research tool and not a live threat feed. It shows us where hackers are heading.
Let’s set it up and cover some basic commands.
We start by copying the repository and installing the python libraries.
Loginkali > git clone https://github.com/Cisco-Talos/Cognitive-Artifact-Intelligence-Research-Network.git
kali > cd Cognitive-Artifact-Intelligence-Research-Network
kali > python -m venv .venv
kali > source .venv/bin/activate
kali > pip install -e ".[dev]"
The env file needs VirusTotal API.
kali > cp .env.example .env
kali > nano .env
Once it’s there, you can start with some basic commands.
The first thing we do is open the YARA file that ships with CAIRN and check that it is readable and put together the way the tool expects. If it prints a rule count and says the pack is valid, the rulers are loaded. You run it after install or after you edit a rule, so you know the next hunt will not fail because the rule file is broken.
kali > cairn validate-rules
Next we print the list of saved VirusTotal searches that come with CAIRN. We will use these names in the following command. The command only reads a config file on disk.
kali > cairn filters
Each name on that list is a hunt idea you can use, like Python files that mention an LLM library, or files that mention a hosted API.
kali > cairn pull --filter python-ai-scripts --limit 10Next, you can summarize the findings. It reads only your database and tells you how many files you got and what rules were in use.
kali > cairn summarizeWe can then open the map.
kali > cairn explore
Here is how the clusters look like. Samples are grouped into clusters even when they share no obvious string overlap. These are semantic discoveries that analyze the meaning.
Let’s take a look at the new developments in malware that were published by Cisco Talos. Their team was analyzing CLOSEDQUORUM.
They say it’s the first publicly documented Windows implant to apply this model to tactical command and control (C2). After it’s deployed, it uses AI models to decide what to do next and then executes their collective decision to harvest user credentials and crypto wallets. It doesn’t need a human to be ruling over the process, as the AI does everything.
Traditional C2 architecture needs the hackers to have server infrastructure. That infrastructure is attributable and blockable. Instead of this, CLOSEDQUORUM calls up to four commercial LLM provider endpoints used by thousands of legitimate applications daily.
Here is how it looks decompiled.
You see the providers, models and prompts.
Hackers also may give detailed technical prompt templates. Here TARGET: %s is substituted at runtime.
The response is then deserialized into a Go struct.
Structure of the returned model’s decision.
Malware that calls out to AI is already here. There’s no server to attribute or block, since the traffic goes to provider endpoints that legitimate apps hit all day. Now we also hunt for cognitive artifacts like prompt templates, provider endpoints, API key prefixes and jailbreak wording. CAIRN helps with that by working from VirusTotal metadata, so you never download or run the sample. It groups findings by AI strings, behavior and families and clusters similar samples by meaning. It shows us where hackers are heading, and they’re heading toward AI doing the thinking for them.
If you like Malware Analysis and want to improve your skills in this field, sign up for our Reverse Engineering Malware training.
The post Malware Analysis: Analyzing AI-Backed Malware with CAIRN first appeared on Hackers Arise.
The Seattle-based video game developer behind the award-winning virtual reality adventure Moss has closed its doors.
The announcement was made via Polyarc Games’ LinkedIn page on Friday afternoon. No specific reason was offered for the studio’s closure.
“After nearly 12 years riding the joyous rollercoaster of emotions that is making video games, our time together has come to an end,” wrote an unnamed Polyarc representative. “Thank you to everyone at Polyarc. Our work is now finished.”
Twenty-nine employees will be dismissed due to the studio’s closure, including co-founders Chris Alderson, Danny Bulla, and CEO Tam Armstrong. Polyarc has posted a list of contact information and profiles for all affected employees, in an attempt to help them line up their next positions.
Polyarc’s first and best-known release was 2018’s Moss, where players helped guide a young mouse named Quill through a fantasy world on a journey to save her uncle. It was followed by 2022’s Moss: Book II, a direct sequel that continued Quill’s story, and the 2025 strategy spin-off Glassbreakers.
Polyarc’s most recent release was this year’s Moss: The Forgotten Relic for PC and console, which collected both Moss games into a single non-VR experience.
Armstrong, Bulla, and Alderson founded Polyarc as a startup in 2015. All three were former employees of Bungie in Bellevue, where they’d all worked in different capacities on Bungie’s online shooter Destiny.
Polyarc’s closure comes almost six months after its announcement in March that it’d had to significantly reduce the size of the company, and almost eight months after a wave of layoffs at Meta that forced a major reduction at Bellevue, Wash.-based VR studio Camouflaj (Republique, Batman: Arkham Shadow).
As noted in January, Meta is perhaps the largest current player in the virtual reality sector, largely off the ubiquity of its standalone Quest headsets. When Meta decided to deemphasize its VR efforts in January, reportedly in favor of wearable computing and AI research, it touched off a negative ripple effect throughout the virtual reality field.
There is a chance that Valve’s upcoming Steam Frame may serve as an effective bailout for the VR sector by reigniting consumer interest, but at time of writing, the Frame has no release date. It’s apparently imminent, as suggested by a big leak in August, but there’s nothing definite. If the Steam Machine’s release in June was any indication, however, we can assume the Steam Frame will launch without warning on some random Tuesday morning in the next two months. (Edit, 9/14: Or the following Monday after this was written.)
