AI Sec Watch

Two opposing camps have formed in the debate over AI safety and regulation. One camp, led by President Trump, Nvidia CEO Jensen Huang, and others, opposes AI regulation and calls for faster development to compete with China, while the other camp, including AI lab leaders like Dario Amodei and Sam Altman along with researchers, warns that AI poses existential risks (dangers to human survival) and calls for slowing AI model development. The disagreement centers on whether AI safety concerns justify regulation or whether such regulations would hamper innovation and America's competitiveness.

Nvidia CEO Jensen Huang criticized Anthropic's proposal for antitrust exemptions (legal exceptions that would allow competing companies to coordinate without violating competition laws) to let AI companies deliberately slow model development for safety testing. Huang argued that AI safety should be solved through engineering and testing rather than new laws, saying companies already have sufficient regulations governing product reliability and can independently ensure their products are safe before release.

Nvidia's CEO Jensen Huang argues that AI companies should self-regulate rather than face new laws, saying safety is an engineering problem that company leaders can manage by choosing not to release products they don't trust. This stance contrasts with other AI executives like Anthropic's Dario Amodei, who have called for slower AI development and government regulation due to concerns that advanced AI could pose serious risks to humanity.

The Australian government is considering easing copyright protections to allow AI companies like OpenAI to access and use Australian creative works by default for training their models (the process where an AI learns patterns from data). OpenAI met with government officials to argue that current Australian copyright laws are preventing them from developing AI systems locally.

At a San Francisco conference, leaders from major AI companies expressed differing views on AI development: Anthropic's CEO called for slowing down AI progress and reviewing safety practices (comparing it to how car companies respond to safety incidents), while Nvidia's CEO argued against slowing down and OpenAI's CEO emphasized the need for stronger security measures as AI systems become more powerful.

The @zereight/mcp-gitlab package, which connects GitLab to an AI agent, has five security flaws that bypass its safety controls (read-only mode, project allow-lists, and authentication). These flaws let attackers execute write operations through GraphQL, access the tool without credentials, perform DNS rebinding attacks, exhaust sessions with fake tokens, and inject malicious instructions through CI job logs.

Microsoft has agreed to adopt privacy and safety rules for its AI tools used in schools, negotiated with the American Federation of Teachers, including a commitment not to use student data to train AI systems and a ban on features designed to create emotional dependency. However, experts warn these protections will only be effective if other major tech companies like Google, OpenAI, and Anthropic adopt similar standards, and some question whether AI belongs in classrooms at all.

Oracle Coherence, a data management product in Oracle Fusion Middleware, has a vulnerability (CVE-2026-83416) that allows attackers with low-level network access to partially disable the service through a denial of service attack (DOS, where a system is made unavailable to legitimate users). The flaw affects several versions of the software and has a moderate severity rating of 4.3 out of 10.

A serious vulnerability exists in Oracle Coherence (a data management product used in Oracle Fusion Middleware) that allows an attacker with low-level network access to take complete control of the system. The flaw affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, and has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 8.8, indicating high risk to confidentiality, integrity, and availability of data.