AI Sec Watch

ChatGPT Work is a tool that helps data science teams quickly convert raw inputs like dashboards, metrics, and experiment notes into polished analysis documents. The tool generates first drafts complete with charts, explanations of limitations, source references, and questions for review, allowing teams to validate and share their work more efficiently.

ChatGPT Work is a tool that helps sales teams gather customer information from multiple sources (like CRM systems, emails, and Slack messages) and quickly create drafts of important documents such as meeting prep packets and account plans. The AI assembles this scattered context into usable first drafts, though salespeople still make the final strategic decisions. Sales teams can install a ChatGPT Work plugin that connects to tools like Salesforce and HubSpot to help identify priority accounts, prepare for meetings, and track deals at risk.

CrewAI versions before 1.15.1 have a server-side request forgery vulnerability (SSRF, a flaw where an attacker tricks a server into making unwanted network requests) in the validate_url function. Attackers can bypass security checks by using URL redirects or DNS rebinding techniques (methods that change where a domain points to after an initial lookup) to access internal services and cloud metadata that should be blocked.

OpenClaw versions before 2026.6.8 have an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides (a feature that lets the system use different AI models through a standard interface). Attackers with lower trust levels can exploit misconfigured input paths to bypass admin authorization checks (security rules that verify whether a user should be allowed to do something) and run restricted operations.

Ollama (an AI model software) has a vulnerability in its downloadBlob function where it doesn't properly validate user input, allowing attackers to access memory beyond an array's intended size. This can cause a denial-of-service attack (making the service unavailable) without needing authentication (special login credentials).

A former Apple employee allegedly exploited a zero-day vulnerability (a security flaw that the company didn't know about and couldn't fix in advance) in Apple's authentication system (the login process that controls network access) to download confidential files weeks after leaving for OpenAI. Apple discovered the breach, fixed the bug, and terminated the employee's access, but the incident highlights how organizations struggle to protect data when former employees still have access to shared network resources.

Some companies are creating teams of engineers who build both defensive and offensive tools to test how AI can be used for cybersecurity and to identify potential threats that AI systems might pose. This approach helps organizations understand both the benefits and risks of using AI in security work.

Anthropic, a leading AI company, discovered a hidden space within large language models (LLMs, AI systems trained on text to predict and generate language) called J-space that contains words influencing how the model reasons, even though these words never appear in its output. The discovery was made using a new technique to examine Claude (Anthropic's AI assistant) and reveals that LLMs can internally track progress, recognize patterns, and comment on their own decisions in ways that affect their behavior. However, experts caution that while this is a genuine finding about how the complex mathematics of these models work, it shouldn't be overstated as revealing something magical or fully mysterious about AI reasoning.

Apple is suing OpenAI, claiming the AI company stole confidential documents and hardware prototypes by asking Apple employees during job interviews to bring unreleased products and components. The lawsuit alleges that OpenAI engaged in espionage and tricked one of Apple's partners into sharing proprietary design techniques, with the case focusing on actions by several individuals including a former Apple Watch executive.