AI Sec Watch

This article describes a legal case where Elon Musk is suing OpenAI, claiming that the company's leaders broke their founding agreement by converting OpenAI from a non-profit (an organization that doesn't aim to make money for owners) to a for-profit business. Shivon Zilis, an executive at Musk's company Neuralink, testified in the case after serving on OpenAI's board. The article is about a business and legal dispute, not a technical AI security issue.

The Azure authentication extension in OpenTelemetry Collector has a critical flaw where it compares bearer tokens (credentials that prove you are who you claim to be) as plain text strings instead of validating them as JWTs (JSON Web Tokens, a standard secure token format). This allows attackers who obtain a valid Azure token to reuse it indefinitely by setting the correct Host header, bypassing authentication entirely.

Anthropic's CEO reported that the company experienced 80-fold growth in revenue and usage during the first quarter, far exceeding their planned 10-fold growth, which has created severe strain on their computing infrastructure. To address the shortage, Anthropic signed a deal with SpaceX to access over 300 megawatts of computing capacity from the Colossus 1 data center in Memphis, Tennessee, and is working to increase capacity through other agreements including a multibillion-dollar deal with Amazon.

A critical authentication bypass vulnerability in the `fast-jwt` library allows attackers to forge valid JSON Web Tokens (JWTs, a standard format for securely transmitting user information) when an asynchronous key resolver function returns an empty string. The library incorrectly accepts an empty HMAC (a cryptographic signature method) secret and allows attackers to compute valid signatures with the empty key, bypassing authentication entirely on versions up to 6.2.3.

Snap reported first-quarter earnings that met revenue expectations but provided cautious guidance for the next quarter, partly due to ending its $400 million partnership with Perplexity (a generative AI startup that creates search engines). The company also cited uncertainty from the geopolitical situation in the Middle East as a factor affecting its sales outlook.

PraisonAI contains an unauthenticated remote code execution (RCE, where an attacker can run arbitrary commands on a server) vulnerability in the `tool_override.py` file that was missed during a previous security patch (CVE-2026-40287). An attacker can trigger this by sending a POST request to `/v1/recipes/run` with a malicious recipe, causing the server to execute a `tools.py` file without any authentication or security checks. The vulnerability affects version 4.6.31 and other recent versions.

In vLLM versions 0.18.0 through 0.19.1, a bug in the `extract_hidden_states` speculative decoding proposer (a component that predicts tokens ahead of time to speed up AI inference) causes the server to crash when any request includes sampling penalty parameters like `repetition_penalty`. The crash happens because the proposer returns a tensor (multi-dimensional array) with the wrong shape after the first step, causing a shape mismatch error when penalties are applied.

Google has shut down Project Mariner, an experimental AI feature that could automatically perform tasks for users across the web, as of May 4th, 2026. The company stated that the technology has been integrated into other Google AI products, particularly Gemini Agent (an AI that can perform multiple actions autonomously). Project Mariner was originally announced in December 2024 and could handle up to 10 tasks at once before being discontinued.

AWS has released a compliance guide for ISO/IEC 42001:2023, which is an international standard for managing AI systems responsibly. The guide helps organizations design and operate an AI Management System (AIMS, a set of policies and controls for governing AI) on AWS by mapping the standard's requirements to specific AWS services and explaining how to collect evidence for compliance audits. While AWS provides secure infrastructure and tools, organizations remain responsible for defining their own AI governance scope, implementing the required controls, and proving they meet the standard during certification.