AI Sec Watch

Codex, an AI coding assistant, is now available in the ChatGPT mobile app, allowing users to manage and guide AI-assisted coding work from their phones while Codex runs on their laptops or remote machines. The mobile app lets users review outputs, approve commands, answer questions, and provide direction to Codex in real time from anywhere, with a secure relay layer (an encrypted connection system) protecting machines from direct internet exposure while syncing updates between devices.

AI chatbots like Gemini are exposing people's private phone numbers by revealing personally identifiable information (personal details like names and contact info) that was present in their training data, making private contact information much easier for the public to find. Victims have little ability to stop these privacy breaches once their information is already in the AI system.

PraisonAI, an open-source framework for building multi-agent AI systems, has a critical authentication bypass vulnerability (CVE-2026-44338, a severity rating of 7.3 out of 10) where its default API server ships with authentication disabled, allowing anyone to access protected endpoints and trigger workflows without permission. Threat actors began exploiting this vulnerability within hours of its public disclosure, scanning internet-exposed instances to confirm they could access the vulnerable endpoints.

PraisonAI, an open-source AI orchestration framework (software that coordinates multiple AI components), had a critical flaw where authentication (verification of user identity) was disabled by default in its API server, allowing anyone on the internet to access AI workflows without permission. Attackers began scanning for vulnerable systems within less than four hours of the vulnerability being publicly disclosed, prompting urgent calls for affected organizations to update immediately.

AI hallucinations are confident but factually incorrect outputs that pose serious security risks, especially in cybersecurity where they can drive automated decisions. Since AI models generate responses based on statistical patterns rather than verified facts, they may cite nonexistent sources or fabricate data while sounding authoritative, potentially leading to missed threats, false alarms, or flawed security decisions. A 2025 benchmark found that most AI models tested were more likely to give a confident wrong answer than a correct one on difficult questions.

Modern AI systems like Anthropic's Claude Mythos Preview are becoming very good at finding software vulnerabilities (weaknesses in code that attackers can exploit), which creates both serious risks and benefits. Attackers could use these AI systems to automatically discover and exploit vulnerabilities in critical systems worldwide, but defenders can use the same technology to find and patch those vulnerabilities before attackers do, ultimately making software more secure long-term.

Elon Musk and Sam Altman, former cofounders of OpenAI, are in a legal dispute over whether Altman and another executive deceived Musk about converting the organization from non-profit to for-profit structure. The article argues that focusing on this personal conflict distracts from deeper problems with AI itself.

PraisonAI, a framework for deploying autonomous AI agents, had a critical authentication bypass vulnerability (CVE-2026-44338) in versions 2.5.6 to 4.6.33 where a legacy Flask API server shipped with authentication disabled by default, allowing unauthenticated attackers to access agent configurations and trigger workflows. Hackers began scanning for and testing this vulnerability within less than four hours of its public disclosure, demonstrating how quickly AI tools are enabling rapid exploitation of newly disclosed security flaws.

Deepfake pornography increasingly uses adult content creators' bodies without consent, either by placing other people's faces onto their bodies or by using their work as training data for AI-generated nude images (synthetic sexual imagery created by artificial intelligence). This practice threatens creators' livelihoods, mental health, and safety, as their digital doubles may perform sex acts they never agreed to or be used in scams, while society largely ignores the harm to the bodies being exploited.