AI Sec Watch

GPT-Live is a new voice AI system that eliminates the need for separate turn detectors (models that decide when the AI should respond) by using a full-duplex voice model (one that can listen and speak simultaneously), making conversations feel more natural and responsive. Instead of the older turn-based approach where the AI had to wait for the user to finish speaking before responding, GPT-Live streams audio continuously in and out while handling complex reasoning asynchronously on a separate path. The system was built over six months with a new architecture optimized for low latency (minimal delay), streaming media directly through the model and keeping speech flowing smoothly from end to end.

Three high-severity security flaws were found in Hugging Face's Diffusers library (a Python package for generating images, videos, and audio) that could allow attackers to execute arbitrary code (running any commands they want) when loading model repositories, bypassing the trust_remote_code safeguard (a security check meant to prevent unreviewed code from running). These vulnerabilities, collectively called FaceHugger, exploit a timing weakness in how the library downloads and checks models in two separate steps instead of one atomic operation (a single indivisible action).

Circles, a telco technology company, built an AI Concierge using OpenAI's API to help telecom operators provide personalized, proactive customer support by combining customer data like usage and billing history into a single conversational interface. The system uses CareX, a multi-agent architecture (a system with multiple specialized AI agents working together), to autonomously resolve 65% of customer service requests without human help, while in Singapore it increased customer spending by 22% and reduced customer departures by 9%.

OpenAI has announced Astra, an upcoming AI model designed to handle complex, long-running tasks, after an internal version solved ten difficult math and computer science problems that had not seen progress for at least a decade. The model works by having human researchers prepare arguments, which Astra then converts into Lean certificates (formal mathematical proofs that can be verified by a computer). OpenAI has not yet decided whether to release Astra as GPT-5.7, GPT-6, or under a different name.

A vulnerability in Hugging Face Transformers (a library for working with AI models) versions 5.8.0 and earlier allows attackers to write files anywhere on a user's computer through path traversal (a technique where an attacker uses special characters like '../' to escape the intended directory). The flaw exists in the `save_pretrained()` methods, which don't properly validate dictionary keys before using them as filenames, allowing attackers to distribute malicious model configuration files that execute arbitrary writes when downloaded and saved by victims.

Illustrators have criticized generative AI (artificial intelligence systems that create new images or videos based on training data) startups for training their models on artists' work without permission, arguing this is theft. In response, some AI companies like Pippa are marketing themselves as more ethical alternatives, though this has also sparked legal disputes over whether AI developers should be allowed to use artists' work to improve their technology.

Keras (a machine learning library) versions 3.14.0 and earlier have a vulnerability where certain functions bypass safety checks and automatically follow ExternalLinks (references to files outside the main file) in HDF5 files (a format for storing large scientific data). An attacker can create a malicious Keras model file that tricks the library into reading sensitive data from anywhere on a victim's computer and either extracting it or loading it into the user's model.

Australian secondhand booksellers are concerned that rare and valuable books may be destroyed after being scanned as part of the process to collect training data for AI systems. The booksellers worry that physical books, which have value beyond just their content, are being treated as disposable materials in the AI supply chain.

This research paper proposes a new detection method using a Bayesian Intent Lattice to identify metamorphic malware (malware that changes its code structure to avoid detection while keeping the same harmful behavior). The approach aims to improve security by recognizing malware based on its underlying intent rather than just looking for known patterns.