AI Sec Watch

Straiker, a cybersecurity startup founded in 2025, raised $64 million to develop a platform that helps organizations find and monitor AI agents (software programs that can act independently) in their systems and identify security risks. The platform uses pre-deployment adversarial testing (controlled attacks before the AI goes live) to find vulnerabilities, runtime protection (active monitoring while the AI is running) to stop threats immediately, and collaboration with AI labs to stay ahead of emerging attacks.

Agentic AI systems (autonomous AI agents that can authenticate, call APIs, write code, and take action in production environments) create new security challenges because they operate with human-like autonomy but at machine speed and scale, yet organizations lack proper identity management for them. Traditional security approaches built for humans and service accounts fall short because AI agents need contextual, intent-based access that changes based on their goals and environment, not just static minimum permissions. The article identifies three critical problems: organizations don't know what AI agents exist or who owns them (visibility problem), agents are often given too many permissions (overprivilege problem), and traditional identity systems weren't designed to handle this level of autonomy and decentralization.

Russia has developed a sophisticated influence ecosystem that uses information operations (IO, coordinated campaigns to spread narratives and manipulate public opinion) and generative AI (machine learning systems that create text and media) to advance its strategic goals globally, with recent focus on Ukraine but increasingly pivoting back to broader targets like NATO and the EU. The ecosystem blends state-controlled media, covert IO campaigns, and hacking activities into an interconnected network designed to be resilient against limited disruptions. The research warns that Russia views these influence tactics as cost-effective and successful, and will likely continue expanding their use with new AI tools while maintaining military and political objectives.

OpenAI and Anthropic are restricting access to their newest AI models following government cybersecurity reviews by the Trump administration. The concern centers on whether these powerful models could be misused to find software vulnerabilities (security flaws in code) that malicious hackers might exploit to attack critical computer systems, and both companies are releasing their models only to small groups of government-approved customers as a temporary measure.

OpenAI announced GPT-5.6 Sol, a new AI model designed specifically for cybersecurity tasks, which is being released in limited preview to trusted partners while the government evaluates national security risks from advanced AI systems. Sol is built to excel at defensive security work like finding vulnerabilities and creating patches, rather than launching full cyberattacks, and uses multiple safety layers including real-time classifiers (automated systems that flag suspicious inputs) and secondary review processes to prevent misuse.

OpenAI's report applies an AI Jobs Transition Framework to Europe's labor market, categorizing occupations into four groups based on how AI might affect them: about 12% may grow with AI, 14% face higher automation potential (meaning AI could replace workers), 27% will likely reorganize with AI changing workflows, and 47% will see less immediate change. The report notes that AI's impact on jobs varies significantly by country due to differences in occupational structures, and recommends that policymakers and employers plan for these changes in detail rather than relying on aggregate employment statistics.

China's Zhipu AI released GLM-5.2, an open-weight model (a publicly available AI that can be freely used and modified) that some researchers say performs as well as Mythos in cybersecurity tasks like finding bugs. While GLM still lags behind US models in general capabilities, this development shows China has significantly narrowed the gap with American AI systems, which concerns the US government that has tried to limit China's access to advanced models and the computing hardware needed to train them.

HP Inc. announced a strategic partnership with OpenAI to scale deployment of Frontier (OpenAI's unified platform for managing AI agents and workflows) across the company after successful pilot tests. Early pilots showed significant gains, such as one engineer processing 122 pull requests in weeks and a security team fixing bugs in a day that normally would take a month, demonstrating how AI can compress time and reduce friction in software development, customer support, and device management workflows.

In a criminal trial for arson related to the Palisades fire, prosecutors used ChatGPT conversation logs as evidence against the defendant, pointing to interactions where he asked the AI to generate images of fire and made statements about anger and wealth inequality. This case illustrates how records of conversations with AI systems can be retrieved and used in legal proceedings, raising questions about the privacy and persistence of data users share with AI chatbots.