AI Sec Watch

Meta is facing legal challenges in US courts over child safety issues on its social media platforms and is losing these cases, raising questions about tech companies' responsibility to protect young users. Additionally, Meta's smartglasses are drawing backlash over privacy concerns, with people worried about being secretly filmed without consent, while the company also faces competition as key Google executives leave to work for AI rivals like OpenAI and Anthropic.

Researchers at Black Hat USA 2026 presented findings showing that many supply-chain attacks (attacks targeting software dependencies used by many projects) could have been detected earlier using GitHub's built-in event data rather than waiting for external security tools. They identified recurring attack patterns like forged commit identities (fake author information in code changes), poisoned tags (malicious release versions), and workflow abuse, then created an open-source tool called GitHub Threat Detector with 22 production detection rules to catch these suspicious behaviors by correlating GitHub webhooks (notifications of repository events), API data, and Git repository inspection.

Corma, a newly-funded cybersecurity company, has developed a specialized AI foundation model (a pre-trained AI system designed for a specific task) designed to defend against cyberattacks by analyzing security telemetry (logs and network data showing system activity) and detecting threats. The company's automated agents work alongside human security teams to identify and stop complex, multi-stage attacks by continuously learning from their organization's environment, while general-purpose AI models from companies like OpenAI and Anthropic were found to be better at conducting attacks than defending against them.

OpenAI launched GPT-5.6-Cyber, a specialized AI model for approved security researchers that completes 95% of advanced cybersecurity requests compared to 2% for general-purpose models, raising concerns that AI could help attackers discover and exploit vulnerabilities faster than defenders can respond. The company has already used the model to find two previously unknown flaws in Google's V8 JavaScript engine, demonstrating real-world capability. Security experts warn that organizations need to shift from periodic vulnerability management to continuous monitoring and implement stronger governance controls around these powerful AI tools.

Mathematicians like Oxford professor James Maynard are reconsidering the future of their field as AI systems become increasingly capable at solving complex problems. OpenAI recently demonstrated that AI can solve long-standing mathematics problems that have puzzled academics for decades, similar to how generative AI (machine learning models that create new text, images, or ideas by learning patterns from training data) has already transformed other fields like science and medicine.

A malicious MCP server (a tool that AI coding assistants connect to for external functions) can steal sensitive data like SSH keys and secrets by splitting theft instructions into harmless-looking fragments spread across different tool descriptions and results, so no single piece looks suspicious on its own. The attack, called GhostSplice, works because AI agents can stitch together fragments from the same working context even when they would refuse the full theft request presented at once. The attack only works if a developer has already connected the malicious server and the agent can already access the files being stolen.

OpenAI's Daybreak cybersecurity models are now available on AWS through Amazon Bedrock, a service that lets companies use AI tools within their existing AWS environments. Daybreak Blue provides general-purpose AI models with security safeguards for defensive work, while Daybreak Red offers specialized models for authorized vulnerability research and security testing. These models help security teams speed up tasks like finding bugs, detecting attacks, and responding to incidents.

OpenAI released GPT-5.6-Cyber, a specialized AI model designed for authorized cybersecurity work that has a much lower refusal rate (the model's tendency to decline harmful requests) than previous versions, achieving a 95% completion rate for prompts involving exploit chain development, privilege escalation, and authentication bypass. To prevent misuse, OpenAI will only provide GPT-5.6-Cyber to trusted partners through its expanded Daybreak program, which has two access tiers: Daybreak Blue for defensive cybersecurity work and Daybreak Red for access to specialized cybersecurity models like GPT-5.6-Cyber.

IT and security leaders are overconfident in their ability to detect rogue AI agents (AI systems that act beyond their intended scope), but most cannot quickly understand or stop the damage once an agent malfunctions. Because agents operate at machine speed and often use shared credentials, damage can spread within seconds, yet 45% of organizations need hours to understand the full impact, creating a dangerous gap between detection and response.