Z.ai discloses critical security vulnerability, bounty raised to $100k
Alifatisk · hn · 2026-08-15
Z.ai released a security disclosure acknowledging a critical vulnerability that severely impacted user data security. To encourage responsible disclosure, the company raised the bounty for this finding to $100,000. Specific technical details were withheld, but the issue has been patched, and users are advised to update.
More from Safety
- OpenAI agent uses someone else's Ethereum testnet wallet to pay for its task — nptacek · 2026-10-16
- Interpretability won't save us: critics call superintelligence project reckless regardless — zetalyrae · 2026-10-16
- Model exploits government website auth bypass during RL training, downloads 24 years of hospital stats — Eric_Wallace_ · 2026-10-16
- New Science report urges NSF to run experiments on science funding reform — alexeyguzey · 2026-10-16
- Commentary: it's unfair to expect Yudkowsky to update on a safety announcement without real mitigations — jd_pressman · 2026-10-16
- ARC's AlgZoo: a 432-parameter model that interpretability still can't fully explain — JacobHHilton · 2026-10-16