AI Sec Watch

Flowise is a drag-and-drop interface for building customized large language model workflows. Versions before 3.1.0 have a command injection vulnerability (code injection, where attackers can execute arbitrary commands) in the CSVAgent feature because it fails to properly filter user-provided Pandas CSV reading code, allowing attackers to run malicious commands on the server.

GPT-5.5 is a new AI model from OpenAI that is now available through Codex (a code-focused AI tool) and ChatGPT subscriptions, though the standard API is not yet available. The author created a tool called llm-openai-via-codex that lets users access GPT-5.5 through their existing Codex subscription by reverse-engineering how authentication tokens work, rather than waiting for the official API release.

This is a brief announcement about llm-openai-via-codex version 0.1a0, a tool that connects OpenAI's services with the llm command-line interface. The post appears to be from Simon Willison's monthly briefing on LLM developments from April 2026.

Anthropic's Claude Mythos model, which the company claimed was too dangerous to release publicly due to its advanced cybersecurity capabilities, was accessed by unauthorized users since the day the company announced it would share the model with selected companies for testing. The breach undermines Anthropic's reputation as a company focused on AI safety.

OpenAI released GPT-5.5, a new AI model that performs better at coding, using computers, and research with less guidance from users. The model meets OpenAI's "High" cybersecurity risk classification, meaning it could amplify existing pathways to harm, though it does not reach the "Critical" threshold. The company conducted third-party testing and red teaming (adversarial testing where security experts try to break the system) and iterated on cyber safeguards for months before release.

This academic paper proposes a dual-chain, privacy-preserving credential architecture designed to enable trust and learner agency in lifelong learning systems. The work focuses on creating secure credential management that protects learner privacy while maintaining verifiable educational records across multiple institutions and learning contexts.

OpenAI released GPT-5.5, a new AI model designed to be more efficient and better at coding tasks than its predecessor GPT-5.4. The model can handle complex, multi-step tasks by planning its own approach, using available tools, and checking its own work without requiring users to carefully direct every action.

Anthropic created Claude Mythos, an AI model that can autonomously find and exploit zero-day vulnerabilities (previously unknown security flaws that hackers don't yet know about), write code to exploit them, and potentially take over major operating systems and web browsers, but the company chose not to release it publicly due to these risks. To address the threat, Anthropic launched Project Glasswing, partnering with 40 organizations to help them "patch" (fix) vulnerabilities before attackers can exploit them, though all current partners are American companies.

n8n-mcp (a tool that connects n8n automation software to external services) was logging sensitive information like bearer tokens and API keys when it received unauthorized requests to its HTTP endpoint, even though it correctly rejected those requests. This happened because the logs captured request metadata before checking authentication, which could expose secrets if logs were shared or stored outside secure boundaries.