AI Sec Watch

OpenAI is improving how people can verify where AI-generated images and audio come from by using multiple approaches: adding C2PA conformance (a cross-industry standard using metadata and cryptographic signatures to attach source information to content), partnering with Google to embed invisible watermarks called SynthID into images, and releasing a public tool to verify if images came from OpenAI. These layered approaches help protect provenance information (details about content's origin and creation) even when it's edited, downloaded, or shared across different platforms.

Google's Gemini AI is being integrated into many Google apps and services at an increasing pace, similar to how Microsoft aggressively added Copilot to Windows 11. Users are experiencing fatigue from AI features appearing everywhere in their software, which is causing frustration.

MLflow version 3.9.0 has a vulnerability in its Assistant feature where /ajax-api endpoints don't properly validate the origin (the source website making a request). This allows an attacker on a malicious webpage to send cross-origin requests (requests from a different domain) to trick the MLflow Assistant running on a victim's computer, bypass security restrictions meant to only allow local access, and execute arbitrary commands (run any code they choose) through the Claude Code sub-agent.

Anthropic, an AI company, is suing the U.S. Department of Defense in federal court after the DOD labeled it a "supply chain risk" (a designation suggesting it threatens national security), which requires defense contractors to stop using Anthropic's Claude AI models in military work. The court judges questioned whether the DOD properly justified this blacklisting, with one judge calling it a "spectacular overreach," while the DOD argued it needed to act quickly to notify agencies about the risk.

The conflict between the U.S. and Iran is disrupting the supply chains that produce computer chips, which are essential for AI systems. Key materials like helium (a gas used in semiconductor manufacturing), bromine, and aluminum are becoming harder to get and more expensive, affecting companies like TSMC (the main manufacturer of Nvidia chips) and other chipmakers. Without a resolution to the conflict, these supply chain problems and rising costs could worsen throughout 2025 and impact the AI industry's growth.

Between November 2025 and February 2026, large language models (LLMs, AI systems trained on vast text data) underwent rapid advancement, with the 'best' model changing hands multiple times among major providers. The most significant development was that coding agents (AI systems that write software code) improved dramatically from often-working to mostly-working, becoming reliable enough for daily professional use after months of reinforcement learning from verifiable rewards (a technique where AI systems learn by receiving feedback on whether their outputs are correct). This progress sparked widespread experimentation and led to the emergence of 'Claws' (personal AI assistants), with OpenClaw becoming particularly popular by February.

A jury in Oakland, California ruled that Sam Altman and OpenAI did not break any laws or contracts with Elon Musk, rejecting his claims that they enriched themselves unfairly. This court victory removes legal obstacles to OpenAI's plans for continued growth and development.

A jury ruled that OpenAI CEO Sam Altman and president Greg Brockman are not liable for Elon Musk's claims that they broke a founding contract and unfairly profited from the company. This verdict ends a legal dispute between Musk and OpenAI's leadership over the terms under which OpenAI was originally established.

Security vulnerabilities called 'Claw Chain' were found in OpenClaw, a framework for building AI agents (programs that can perform tasks autonomously). These vulnerabilities allowed attackers to steal login credentials, gain higher-level access to systems, and stay hidden in compromised systems for extended periods. The vulnerabilities have now been patched.