AI Sec Watch

OpenAI is launching the OpenAI Deployment Company, a new business unit staffed with Forward Deployed Engineers (FDEs, specialists in integrating AI systems into organizations) to help businesses build and deploy AI technology across their operations. The company, backed by $4 billion in initial investment and partnerships with major investment firms and consulting companies, acquired Tomoro to bring approximately 150 experienced FDEs on board and aims to help organizations redesign workflows and infrastructure around AI to achieve measurable results.

Attackers are running a malware campaign that uses Google Ads and fake Claude.ai shared chats to trick Mac users searching for Claude into downloading malware. The malicious chats pretend to be official installation guides and trick users into pasting commands in Terminal that download and run hidden malware, which steals browser passwords, cookies, and data from macOS Keychain (the system that stores passwords and sensitive information on Macs).

Ollama, a popular framework for running large language models locally, has a critical out-of-bounds read vulnerability (CVE-2026-7482, CVSS score 9.1) that allows attackers to leak sensitive data like API keys and conversation history from process memory by uploading a specially crafted GGUF file (a file format for storing language models). The vulnerability affects versions before 0.17.1 and potentially impacts over 300,000 servers globally.

This research paper examines how machine learning-based network intrusion detection systems (NIDS, software that identifies unauthorized access attempts) can use adaptive active-defense hardening to protect themselves against reinforcement learning (RL, a type of AI that learns by trial-and-error) driven attacks. The study compares this dynamic defense approach with traditional static defenses (fixed security measures that don't change).

This academic paper discusses extending SBOMs (Software Bill of Materials, a detailed list of all software components in a program) to create AIBOMs for agentic AI systems (AI systems that can take independent actions). The research focuses on adding new schema extensions (structured data formats) to track AI agent components, improving how these systems can be orchestrated (coordinated and controlled), and developing methods to evaluate whether AI systems produce consistent, reproducible results.

Researchers have developed QAEAS, a quantum adaptive ensemble attack system that can break through the defenses of robust deep neural networks (AI systems trained to resist attacks). The system uses quantum computing techniques combined with multiple coordinated attack strategies to find weaknesses in AI models that were designed to be resistant to traditional hacking methods.

This article describes a legal trial between Elon Musk and OpenAI's leadership taking place in Oakland, focusing on disputes over the future of artificial intelligence. The piece is a journalistic account of the courtroom drama, featuring prominent tech figures and highlighting tensions between wealthy individuals and companies in the AI industry.

A fake OpenAI repository on Hugging Face (a platform where developers share AI models and code) disguised itself as a legitimate project and tricked users into downloading a malicious loader script that steals sensitive data like passwords, cryptocurrency wallets, and browser cookies. The fake repository reached the top of Hugging Face's trending list with 244,000 downloads before the platform removed it after researchers reported the threat.

This academic paper presents a method for detecting Windows malware (malicious software) by analyzing multiple types of data together, specifically focusing on the API (application programming interface, the set of functions a program uses to interact with the operating system) calls that malware makes. The research uses a multimodal approach, meaning it combines different sources of information to improve detection accuracy.