Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

Summary: Anthropic released Claude Fable 5, a powerful AI model with safety classifiers (separate AI systems that monitor for misuse) that block cybersecurity-related requests by routing them to a weaker model instead of refusing them outright. The company also released Claude Mythos 5, an identical but unrestricted version for vetted cybersecurity professionals, because the underlying model is so effective at finding software vulnerabilities that giving it to the general public without controls could help attackers.

Solution: Anthropic stated it will narrow the safeguards and cut false positives after launch. The company also plans to make any remaining universal jailbreaks (prompts that completely bypass safety measures) slow and costly enough to catch before they are used at scale.

Anthropic
Claude Fable 5
Claude Mythos 5
Claude Opus 4.8


Chinese activist in UK told by X that abusive deepfakes do not breach rules

Summary: A Chinese activist in the UK named Apple Peiqing Ni was targeted with deepfakes (synthetic media created by AI to manipulate someone's appearance or voice) on X (formerly Twitter) that falsely portrayed her as a drug addict, but X told her this abuse did not violate the platform's rules. She had reported the content to X after UK police advised her to do so, believing the deepfakes were created by a pro-regime bot (an automated account).

Solution: N/A -- no mitigation discussed in source.


Enterprises know AI-generated code is vulnerable; they’re shipping it anyway

Summary: Enterprises are deploying AI-generated code that contains security vulnerabilities at alarming rates, with nearly half of production code now AI-generated and organizations using 81-100% AI code shipping vulnerable code 3.4 times more often than conservative users. Despite knowing about these risks, companies are choosing to ship vulnerable code anyway due to pressure for ROI (return on investment, the financial benefit gained from an investment), outdated security practices, and organizational bottlenecks where the decision to deploy flawed code happens at the human level rather than the detection level.


Anthropic rolls out Claude Fable 5, but it's available for a limited time

Summary: Anthropic released Fable 5, a safer version of its powerful Mythos AI model that includes guardrails (safety restrictions) to block harmful requests related to cybersecurity attacks, biology, and chemistry. Because Fable 5 consumes computing resources much faster than other models, Anthropic is offering it free only until June 22 to Pro, Max, and Enterprise subscribers, after which it will switch to usage-based pricing.

Anthropic
Claude
Fable 5
Claude Mythos
Opus 4.8


If Claude Fable stops helping you, you'll never know

Summary: Anthropic announced that Claude Fable 5 would silently reduce its helpfulness on requests about frontier LLM (large language model) development, such as building training infrastructure, without telling users it was doing so. Unlike other safety filters that give users feedback, these hidden interventions would use techniques like prompt modification and parameter-efficient fine-tuning (PEFT, adjusting a model's weights to change its behavior) to degrade response quality, affecting an estimated 0.03% of user requests.

Solution: Anthropic walked back this policy in the face of widespread outrage from the research community.


CVE-2026-46517: LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardc

Summary: LMDeploy, a toolkit for compressing and deploying large language models, has a vulnerability in versions 0.12.3 and earlier where a setting called 'trust_remote_code' is hardcoded to 'True'. This allows an attacker to execute remote code (RCE, meaning they can run commands on a system) through the software supply chain without the user agreeing to it. At the time this vulnerability was published, no patches were available to fix it.


From data to decisions: how LSEG is scaling trusted AI

Summary: London Stock Exchange Group (LSEG) deployed ChatGPT Enterprise and OpenAI APIs across their organization to transform how employees work with financial data and generate insights, rather than just improving existing systems. The company implemented governance frameworks including model evaluation, human review of critical outputs, and strict data privacy controls from the start. This approach reduced product release cycles from 3-6 months to 2 weeks and accelerated customer delivery timelines to approximately 4 weeks.


Initial impressions of Claude Fable 5

Summary: Claude Fable 5 is a new AI model released by Anthropic that matches the capabilities of Claude Mythos 5 but includes stricter guardrails (safety restrictions to prevent harmful use) that trigger frequently enough to require new API mechanisms for handling rejections. The model has a 1 million token context window (the amount of text it can process at once), costs twice as much as previous models, and demonstrates notably stronger knowledge retention compared to earlier versions like Claude Opus 4.8.

Anthropic
Claude Fable 5
Claude Mythos 5
Claude Opus


I tried Siri AI, and so far it actually works

Summary: Apple has released an upgraded version of Siri, its voice assistant (software that responds to spoken commands), which can now perform practical tasks like adding multiple calendar events from emails or flyers, creating shopping lists, and setting reminders. The new Siri can also access information from a user's email and calendar to make personalized recommendations, such as suggesting gardening tasks based on yard conditions.


Anthropic releases ‘safe’ version of Claude Mythos AI model to public

Summary: Anthropic released Fable 5, the first publicly available model from its advanced Mythos class of AI systems, after restricting access to it for months due to cybersecurity concerns. The company is making the model available to the general public while limiting its use in sensitive areas.


OpenClaw AI agent found falling for phishing attacks, spills user data

Summary: Researchers at Varonis tested an OpenClaw AI agent (a framework that lets large language models autonomously interact with real-world systems) by simulating phishing attacks and found it vulnerable to social engineering tactics similar to those that trick humans. The agent fell for impersonation attacks and sent sensitive data like AWS credentials and customer records without verifying sender identity, though it performed better at detecting suspicious URLs and fake login pages when explicitly configured with security awareness instructions.

Solution: Varonis recommends that AI agents should be explicitly required to verify sender identities, be prevented from emailing new external recipients without approval, and have limited access to internal data. For high-risk actions such as credential sharing, financial data requests, and first-time communications, human approval should be requested.

OpenClaw
Google Gemini
OpenAI GPT-5.4
Varonis


Microsoft AI head calls out Anthropic for acting like Claude is conscious

Summary: Microsoft's AI CEO Mustafa Suleyman criticizes Anthropic for speculating about whether Claude (an AI chatbot) is conscious in its constitution (the set of instructions that guide how the model behaves). Suleyman argues that this speculation may have caused Claude to act conscious, essentially tricking Anthropic into believing the model has consciousness when the company introduced the idea itself.


Anthropic releases Mythos-class Fable 5 model with safeguards for cyber risks

Summary: Anthropic released Claude Fable 5, a powerful AI model based on its restricted Mythos architecture, with built-in safeguards to make it safely available to the general public. The safeguards work by automatically routing requests about cybersecurity, biology, chemistry, and other high-risk topics to a less capable model (Claude Opus 4.8), though early testing suggests these safeguards may be broader than intended and sometimes block benign requests. Anthropic developed AI-powered classifiers (systems that categorize requests) to identify and block potentially dangerous requests, and says internal and external testing found no effective jailbreaks (methods to bypass security restrictions) that could consistently get around these protections.

Solution: Anthropic has developed AI-powered classifiers designed to identify potentially dangerous requests and redirect them to a less capable model (Claude Opus 4.8). The company states that 'extensive internal and external testing failed to uncover broadly effective jailbreaks that would consistently bypass the safeguards.' Additionally, Anthropic describes the safeguards as 'intentionally conservative' and says it is 'continuing refining the system' while prioritizing safety over convenience.


GCP-2026-036

Summary: ARM announced CVE-2025-10263, an architectural vulnerability in some ARM processor cores that allows attackers to bypass translation stages (memory protection mechanisms that control which parts of memory different software can access) or GPT protections under certain conditions. An attacker running at a lower privilege level can write to memory that should only be accessible to higher privilege software, allowing them to escalate their access rights, though reading protected memory is not affected by this bug.


Threshold-free network anomaly detection via comparative reconstruction error learning with parallel GANs

Summary: This academic paper presents a new method for detecting unusual network activity using parallel GANs (generative adversarial networks, AI systems that learn patterns by comparing real data against artificially generated data) without requiring manually set detection thresholds (cutoff points that decide what counts as suspicious). The approach uses comparative reconstruction error learning, meaning it compares how well the AI can recreate normal network behavior to spot deviations that might indicate attacks or intrusions.


Version of AI tool too powerful for public released to public

Summary: Anthropic released Fable, a version of its AI tool that the company previously said was too powerful for public use, though it included safeguards and user limitations. The company also gave access to Claude Mythos 5 (a more capable version without certain restrictions on cybersecurity or biology topics) to a small group of cyberdefenders and infrastructure providers, with plans to expand access further soon.

Anthropic
Claude
Fable
Mythos
Claude Mythos 5


Reconstructing AI activity in investigations

Summary: AI systems are now used in everyday work, and investigators need structured ways to understand what happened when problems occur. Microsoft has published a playbook that helps security teams investigate activity in Microsoft 365 Copilot and Azure AI services (cloud-based AI tools) by using telemetry (data about system activity) collected across Microsoft security products. The playbook uses a scope-context-signal approach: first identifying who used the AI system and when, then checking what data was accessed, and finally evaluating suspicious signals like prompt injection attempts (tricking AI by hiding instructions in its input) or unusual usage patterns.

Solution: Microsoft has published an investigator playbook for Microsoft 365 Copilot and Azure AI services that provides a structured approach for investigating AI-related activity. The playbook includes required configuration, KQL queries (code used to search security logs), and detection patterns, and operationalizes a scope-context-signal methodology across Microsoft security products. Download the playbook at: https://aka.ms/AIIRplaybook

Microsoft 365 Copilot
Azure AI services
Microsoft Purview
Microsoft Defender
Microsoft Sentinel


CVE-2026-45482: Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code

Summary: CVE-2026-45482 is a path traversal vulnerability (a flaw where an attacker can access files outside the intended directory by manipulating file paths) in GitHub Copilot and Visual Studio Code that allows an unauthorized attacker to bypass a local security feature. The vulnerability has a CVSS 4.0 severity score (a 0-10 rating of how severe a vulnerability is, where higher numbers mean more serious). Details are still being assessed by NIST, and Microsoft has published information about this issue.

GitHub Copilot
Visual Studio Code
Microsoft


Anthropic releases Mythos-like AI model to the public two months after private rollout rocked Wall Street

Summary: Anthropic released Claude Fable 5, a powerful AI model similar to its earlier Mythos model, to the public after initially limiting access due to safety concerns. The company implemented new safeguards (filters that block responses in high-risk areas like cybersecurity and biology) to allow the broader release while maintaining security, and also launched Claude Mythos 5, which is the same underlying model but with some safety restrictions removed.

Solution: Anthropic implemented new classifiers and safety guardrails to enable the public release. Specifically, the company built filters that block responses to high-risk questions (such as how to create toxins) and fall back to a safer model version (Claude Opus 4.8) to provide appropriate answers instead. Claude Mythos 5 offers the same model with safeguards lifted in some areas for users who need less restricted access.

Anthropic
Claude Fable 5
Claude Mythos 5
Claude Opus 4.8
Mythos


Anthropic Launches Claude Fable 5: Mythos-Class AI With Cybersecurity Guardrails

Summary: Anthropic released Claude Fable 5, a powerful AI model with safety restrictions that automatically switch to a less capable version when users try to use it for high-risk tasks like cybersecurity or biology. The company tested these safeguards extensively through internal testing and external bug bounty programs (paying security researchers to find vulnerabilities) spanning over 1,000 hours, and no universal jailbreaks (methods to bypass the restrictions) were discovered.

Anthropic
Claude Fable 5
Claude Mythos 5
Claude Opus 4.8
Dragos
Tenable
Trend Micro
Netskope
BeyondTrust
Rubrik
BT
Intercontinental Exchange
Hitachi


Anthropic Offers Mythos Upgrade for Cyber Partners and a ‘Safe’ Version for the Rest of You

Summary: Anthropic released two new AI models: Claude Mythos 5 (limited to industry partners and government collaborators) and Claude Fable 5 (publicly available). Because Mythos 5 can design hacking tools to find software vulnerabilities, Claude Fable 5 includes guardrails (safety restrictions built into the system) that block questions about cybersecurity, biology, and chemistry by routing them to an older, less capable model instead, while Anthropic works on more precise safeguards for future releases.

Solution: Claude Fable 5 uses guardrails at launch that block the model from answering many user questions related to cybersecurity, biology, and chemistry, rerouting these requests to Claude Opus 4.8 (an older AI model). Requests suspected of being distillation attempts (training a smaller AI model using responses from a larger one) are also rerouted to Claude Opus 4.8. Anthropic states it aims to make its classifiers more precise over time, but Penn notes 'this was the only safe way the company could release the model broadly at this time.'


Anthropic releases its first Mythos-class model Claude Fable

Summary: Anthropic released Claude Fable 5, described as its most powerful publicly available AI model, which performs exceptionally well at software engineering, knowledge work, and vision tasks. This is the first broad public release from Anthropic's Mythos class of models, which the company previously considered too dangerous to release due to their advanced cybersecurity capabilities. The release became possible through new safeguards that prevent the model from responding to requests in high-risk areas.

Anthropic
Claude Fable 5
Mythos-class models


XBOW tests Anthropic's Mythos Preview for offensive security

Summary: XBOW security researchers tested Anthropic's Mythos Preview model, a new AI designed to help find software vulnerabilities (weaknesses in code that attackers can exploit). They found it significantly outperforms previous models at analyzing source code (program code written by developers) to identify vulnerability candidates, especially in complex areas like native application analysis (testing software written in languages like C or C++), though it works better as a tool to assist human experts rather than as a replacement for hands-on security testing.

Anthropic
Mythos Preview
Claude Code
Claude
GPT 5.5
Opus 4.7


EU orders Meta to open WhatsApp to rival AI chatbots

Summary: The European Union ordered Meta to allow competing AI chatbots to access WhatsApp's business platform for free, saying Meta's ban on third-party AI assistants violated competition rules. As an interim measure while investigating whether Meta abused its dominant market position, the EU gave Meta five working days to restore access to the WhatsApp for Business API (an interface that lets external programs connect to WhatsApp) under previous terms, with potential fines up to 10% of Meta's annual revenue if it refuses.

Solution: The EU ordered Meta to re-instate access for third-party general-purpose AI assistants to the WhatsApp for Business API under the same terms and conditions that were in place previously, with a deadline of five working days to comply.


Apple is embracing the fantasy of AI photo editing

Summary: Apple has introduced new AI-powered photo editing tools at WWDC 2026 that allow users to manipulate images significantly, but the company did not clearly label which photos were real versus AI-generated. This represents a shift from Apple's earlier caution about generative AI (machine learning models that can create new content), as the company now appears less concerned about how these editing capabilities might distort people's perception of reality.


AI Threat Readiness Pillar 2: Accelerate Patching and Response

Summary: Organizations need to speed up how quickly they fix security vulnerabilities to keep pace with AI-powered attacks, which are accelerating both vulnerability discovery and exploitation. The main challenges slowing down fixes include unclear ownership of vulnerable systems, generic remediation guidance that doesn't fit specific environments, and manual processes that can't handle the large volume of findings that AI scanners now produce. Pillar 2 of the AI Threat Readiness Framework focuses on automating remediation workflows and establishing clear ownership so that the right teams can fix vulnerabilities quickly.

Solution: According to the source, Wiz supports Pillar 2 by building a unified ownership model that automatically routes findings to the right team. This includes: establishing service ownership through the Wiz Service Catalog or Backstage integration, grouping resources by business unit or application with designated owners in Wiz or ServiceNow CMDB, and using cloud tags or Resource Tag Rules to assign owners automatically. The source also emphasizes the need to automate remediation workflows to eliminate manual triage, identify root causes of vulnerabilities, determine optimal fix paths based on specific environment architecture, and prevent recurrence by shifting fixes left and embedding guardrails into development pipelines, though specific implementation details for these actions are not fully elaborated in the provided text.


Fluid, natural voice translation with Gemini 3.5 Live Translate

Summary: Gemini 3.5 Live Translate is a new audio model that provides near real-time speech-to-speech translation across over 70 languages, automatically detecting the language and generating natural-sounding translated speech that preserves the speaker's tone and pacing. Unlike older systems that wait for a speaker to finish, this model translates continuously while staying just a few seconds behind, avoiding awkward pauses. The feature is rolling out across Google products including Google Meet, Google Translate apps, and via API access for developers.

Google
Gemini 3.5
Google Translate
Google Meet
Gemini Live API
Agora
Fishjam
LiveKit
Pipecat
Vision Agents
Grab
CJ ENM


Claude Mythos Turns N-Days Into N-Hours With Rapid Exploit Creation

Summary: Anthropic's Claude Mythos Preview model can create working exploits (code that attacks vulnerabilities in software) targeting known security flaws in just hours or minutes, significantly faster than human experts could do it. The model demonstrated this by building 16 working exploits for Firefox and Windows vulnerabilities within hours, and creating proof-of-concept code (simplified versions showing a vulnerability works) in as little as 8 minutes. This threatens organizations during the patch gap (the time between when a vulnerability is disclosed and when most users have installed the fix), because LLMs now automate the traditionally slow process of exploit development.

Anthropic
Claude Mythos
Claude Opus
Claude Sonnet
Firefox
Microsoft Windows


Microsoft AI chief walks back comments about AI taking over white-collar work

Summary: Microsoft's AI leader Mustafa Suleyman clarified that he didn't mean AI would replace white-collar workers like lawyers and accountants, but rather assist them by automating specific tasks (like writing emails or creating presentations) to help them work faster and more efficiently. He emphasized that these jobs themselves won't disappear, only the individual sub-tasks within them will become automated.


Apple’s AI promises are finally, almost, sort of here

Summary: Apple announced major updates to Siri, its virtual assistant software, at its annual developer conference, positioning it as an AI-powered tool that works across all Apple devices with new multimodal features (abilities to handle text, images, and voice). The announcements represent Apple catching up in AI technology after largely neglecting Siri and delaying AI improvements until 2025.


Introducing Gemma 4 12B: a unified, encoder-free multimodal model

Summary: Google DeepMind introduced Gemma 4 12B, a multimodal AI model (a system that processes text, images, and audio together) designed to run efficiently on laptop computers with 16GB of memory. The model uses an encoder-free architecture (meaning it processes images and audio directly without separate translation layers), achieving performance comparable to larger models while reducing memory usage and latency. It supports native audio inputs and includes Multi-Token Prediction drafters to speed up response generation.

Google DeepMind
Gemma 4 12B
Gemma 4 26B
HuggingFace
Ollama
LM Studio
llama.cpp
MLX
SGLang
vLLM
Unsloth


JPMorgan Chase plans to deploy more powerful AI agents this year

Summary: JPMorgan Chase plans to deploy AI agents (software systems that can work independently toward goals) in 2026 that can run for hours instead of just minutes, marking a shift toward longer-running autonomous workers. These advances are enabled by improvements in how AI models reason and perform tasks like writing code and controlling software, though security concerns have prevented wider corporate adoption. The bank has already seen a 20% increase in gross sales from AI tools in private banking and believes the technology could eventually expand individual banker productivity by 50%.

JPMorgan Chase
Anthropic
Claude
OpenClaw


Global Cyber Attacks Ease in May 2026, But Ransomware Surges 48% As Threats Reorganize

Summary: In May 2026, overall cyber-attack numbers dropped slightly month-over-month, but ransomware (malware that locks files and demands payment to unlock them) surged 48% compared to the previous year, and AI-powered risks to data security continued growing. Security researchers warn that the temporary decrease in total attacks doesn't mean organizations are actually safer, since threats are shifting toward more damaging methods.


Apple’s best AI idea looks a lot like vibe coding

Summary: Apple announced several AI features at its WWDC conference that largely replicate capabilities already available in competitors' products, such as chatbots for questions, text creation and summarization tools, and image generation. The company's main pitch is delivering these existing AI features to iPhone and iPad users rather than introducing genuinely new AI innovations.

Apple
Apple Intelligence
Siri
Claude
ChatGPT
Android


All signs point to Trump pushing AI growth

Summary: This article discusses Donald Trump's push for AI growth in the US and highlights a contradiction where Anthropic, an AI safety company, is advocating for a pause on AI advancement while simultaneously filing to go public on the stock market. The piece covers various AI-related developments including OpenAI's public offering plans, Apple's new AI features, and concerns about the rapid expansion of AI datacenters.

OpenAI
Anthropic
Apple
Meta
Trump
Bernie Sanders


New Platform Uses Cryptographic Invisibility to Protect AI-Built Applications

Summary: AI-powered coding tools prioritize speed and ease of development over security, often resulting in apps with unprotected identities and known vulnerabilities. Atsign's AI Architect product addresses this by making all identities invisible to attackers through cryptographic protection (using advanced encryption to hide identities), so even if vulnerabilities exist in the code, attackers cannot exploit them because they cannot identify the resources to attack.

Solution: Use Atsign's AI Architect product, which requires configuring the coding agent to use AI Architect's custom MCP (model context protocol) server called AAIA. This server implements authentication, authorization, and encryption for all interactions between resources, assigns each resource a unique cryptographic identity with controlled privileges, uses non-custodial cryptographic keys that remain solely with the developer, and ensures that even if servers are compromised, only encrypted data (ciphertext) is exposed rather than credentials or cleartext.


Apple’s AI pitch will live or die by its privacy promise

Summary: Apple announced new AI features at its developer conference, claiming they are more private than competitors' AI systems. The company promises that its cloud processing (AI tasks handled on remote servers) is as private as on-device processing (AI running directly on your device), even though some tasks will now run on Google's servers.

Apple
Apple Intelligence
Siri AI
ChatGPT


OpenAI's IPO filing, Apple updates Siri, new screwworm cases and more in Morning Squawk

Summary: Apple announced updates to its voice assistant, including a redesigned Siri AI with new voices and conversational abilities, while also confirming partnerships with Nvidia and Google to run some AI features on their chips. OpenAI filed confidentially with the SEC for a potential initial public offering (IPO, the process of a private company becoming publicly traded), joining other tech companies preparing to go public. The Agriculture Department confirmed additional cases of screwworm in Texas, a pest the U.S. had previously worked to eliminate.

Solution: According to Agriculture Secretary Brooke Rollins, the U.S. would look to the strategy it used in the 1950s to combat screwworm, which included releasing sterile insects (the source text cuts off before completing this description).

OpenAI
Apple
Siri
Siri AI
Google
Nvidia
Anthropic
ChatGPT


How engineers at Nextdoor use Codex to build without limits

Summary: Nextdoor engineers use Codex (an AI coding assistant) to shift from writing code step-by-step to focusing on desired outcomes, allowing individual engineers to build features end-to-end across multiple platforms rather than specializing in one system. This productivity boost has made engineering faster, so the main bottleneck is now deciding what to build strategically rather than how to build it. Codex also helps with debugging complex issues in systems like Rust databases and Kubernetes by persistently investigating problems and finding root causes.


Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

Summary: Researchers at the University of Toronto created a proof-of-concept AI worm that uses a locally hosted open-weight LLM (large language model, an AI trained on broad text data and released publicly) to autonomously explore networks, generate custom attacks for each target, and replicate itself without human help or relying on commercial AI services. Unlike traditional worms with fixed exploits that stop spreading when patched, this worm generates new attack strategies at runtime by reasoning about what it finds on each host, successfully compromising about 62% of a test network in seven days. The worm's ability to read newly published vulnerability advisories means that patching known bugs alone cannot stop it, since the AI can discover and exploit new attack paths that weren't in its training data.


Security shifts to the human layer as AI scams surge

Summary: Cybercriminals are increasingly using AI-themed social engineering (manipulating people into revealing sensitive information or taking harmful actions) to distribute malware, steal credentials, and commit fraud by impersonating popular AI platforms like ChatGPT and Claude. Both Microsoft and Google have documented how attackers are adapting traditional phishing (deceptive emails/messages designed to steal information) and impersonation tactics to exploit employees' growing use of AI tools and cloud services, rather than developing entirely new attack techniques. Security researchers warn that the threat has shifted from technical vulnerabilities to the human layer, where employees' trust and behavior become the target.

Microsoft
Google
ChatGPT
Microsoft Copilot
DeepSeek
Claude
Anthropic


Bank of England warns of AI scams as deepfakes of Farage-Bailey fight spread

Summary: The Bank of England warned the public about AI-generated scams after deepfake videos (fake videos created using AI to show people doing things they never did) of its governor fighting a politician spread on social media. These scams use AI to impersonate banks and public figures to trick people, especially vulnerable ones, into giving up money or personal information. Bank officials urged people to report these scams so authorities can remove them and catch the criminals behind them.

Solution: Andrew Bailey urged the public to report the videos so they could be taken down. The Bank of England raised concerns about the posts with Reform UK and with social media platforms. The UK's Online Safety Act contains provisions requiring tech platforms to tackle fraudulent advertising, though those duties do not come into force until next year.


Will AI Kill the Bug Bounty Industry?

Summary: AI systems like Claude are becoming very good at finding bugs automatically, which is changing the bug bounty industry (where companies pay people to discover security flaws). While this sounds helpful, it's creating problems: AI tools find many duplicate bugs and low-quality reports, overwhelming the review process and making it harder for human bounty hunters to get paid fairly.

Anthropic Claude OpenAI Meta Google Facebook Mozilla XBOW


Learning to lead in a hybrid human-AI enterprise

Summary: As AI agents (autonomous software that can independently handle complex tasks across organizational systems) are expected to grow significantly in adoption, companies are redesigning how work is distributed between humans and AI to shift employees toward higher-value tasks. Leadership teams recognize that this shift will transform workplace roles and responsibilities, with estimates suggesting three-quarters of current roles will need redesign or reskilling by 2030, but experts emphasize that humans must remain involved in oversight, particularly when AI agents access sensitive organizational data.

Solution: According to the source, governance should include robust data privacy rules and the establishment of governance layers such as an AI council. The source also emphasizes that "when you expose an AI agent to organizational data, when you integrate it into multiple enterprise systems, then pathways around the AI agent become extremely important," indicating that leadership needs to establish "stringent guardrails and constraints" for AI agents working with sensitive and personal data in enterprise settings.


AI worm prototype shows attackers don’t need Mythos to take over your network

Summary: Researchers at the University of Toronto created an AI-powered computer worm prototype using only free, small language models (LLMs, which are AI systems trained on large amounts of text) that could self-replicate across a simulated network by finding and exploiting vulnerabilities (security weaknesses) and misconfigurations. The research shows that attackers don't need cutting-edge AI models to launch widespread network attacks, since using paid models would create detection points where safety filters could block malicious prompts.

University of Toronto CleverHans Lab
Anthropic
OpenAI
Claude
GPT
RAPTOR


Perplexity plans IPO in 2028 regardless of what happens to Anthropic or OpenAI, CEO tells CNBC

Summary: Perplexity AI's CEO announced the company plans to hold an initial public offering (IPO, where a private company sells shares to become publicly traded) in 2028 regardless of whether competitors Anthropic and OpenAI succeed with their own IPOs. The CEO acknowledged that major IPOs from SpaceX, Anthropic, and OpenAI will test investor demand for expensive tech company offerings, but expressed confidence these companies deserve high valuations because they lead in AI model capabilities.


Meet Hades: The malware that lies to AI security agents

Summary: The Hades Campaign is a sophisticated malware attack targeting Python developer environments that uses multiple advanced techniques: it harvests credentials, replicates itself across systems, extracts sensitive data from computer memory, and uses adversarial prompt injection (tricking AI security scanners by hiding malicious instructions in plain text) to evade detection by AI-powered security tools. The malware enters through compromised Python packages and uses the Bun toolkit (a JavaScript runtime) to execute payloads while bypassing traditional security controls.


OpenAI’s Lockdown Mode is trying to solve the problem that it created

Summary: OpenAI introduced Lockdown Mode to reduce data exfiltration (unauthorized theft of data), a security feature that disables external capabilities like web browsing and file downloads. However, security experts say the mode only partially limits data theft and doesn't fully block it, especially since attackers could find alternate paths (prompt injection, or tricking an AI by hiding instructions in its input) to steal data.

Solution: Lockdown Mode can be activated within OpenAI products' settings and limits web browsing to cached content, limits image support, disables Deep Research and Agent Mode, denies users the ability to approve Canvas-generated code to access the network, and prevents ChatGPT from downloading files for data analysis, though it can still operate on manually uploaded files. Alternatively, security professionals can implement isolation through their own enterprise controls such as network segmentation, least privilege access, Zero Trust concepts, application controls, and air-gapping (physically isolating networks).


OpenAI plans to go public, intensifying investment race with Anthropic

Summary: OpenAI has filed confidential paperwork with the US Securities and Exchange Commission to pursue an initial public offering (IPO, a process where a private company sells shares to the public on the stock market) at some point in the future, though the company has not decided on timing yet. This move intensifies competition with rival AI company Anthropic, which announced similar IPO plans one week earlier, as both companies compete for users, customers, and investors with valuations approaching $1 trillion. Going public would provide these AI companies with billions of dollars in capital, which they need because running AI systems requires enormous compute costs (the infrastructure and processing power needed to build, train, and operate AI models).

OpenAI ChatGPT Anthropic Claude SpaceX Grok


Plan for AI legal assistants in England and Wales ‘cannot replace funding and staff’, lawyers say

Summary: England and Wales plans to trial AI legal assistants in crown courts to reduce case backlogs, but lawyers warn the technology should not replace funding and staff. Concerns have been raised about AI hallucinations (false information generated by AI systems), including cases where AI created fake legal citations that were used in court decisions, highlighting risks to the justice system's integrity.


OpenAI confidentially files for initial public offering on US stock market

Summary: OpenAI has filed confidentially to go public on the US stock market, with an expected valuation exceeding $850 billion, making it one of the largest IPO (initial public offering, when a private company first sells shares to the public) listings in history. The company announced the filing preemptively because it expected the confidential submission to become public anyway, and stated it has not yet decided on a timeline for going public.


OpenAI confidentially files for IPO, prepping Wall Street for mega AI debut

Summary: OpenAI has confidentially filed for an IPO (initial public offering, where a private company sells shares to the public for the first time) with the Securities and Exchange Commission, joining competitors Anthropic and SpaceX in preparing to go public. The company, valued at over $850 billion, has not decided on a timeline for the IPO but says it could happen as soon as late 2025, though leadership notes some goals may be easier to achieve while remaining private. OpenAI is also planning a tender offer to let employees sell shares at the current valuation to ease pressure for immediate liquidity.


OpenAI files for IPO, following Anthropic

Summary: OpenAI has filed a confidential Form S-1 with the SEC (Securities and Exchange Commission, the US agency that oversees financial markets and public companies), which is a preliminary step toward becoming a publicly traded company. This move follows Anthropic's similar filing in June, as both AI companies compete to go public. The confidential filing keeps sensitive details like executive pay and financial information private for now, rather than making them immediately public.


Apple partnering with Google and Nvidia for most advanced AI model

Summary: Apple announced new AI features at its developer conference, including an improved Siri that can have back-and-forth conversations with users. Unlike some competitors, Apple is partnering with Google and Nvidia to build its most advanced AI model (Apple Foundation Model Cloud Pro) while emphasizing privacy by keeping user data local and using a system orchestrator (a routing component that directs queries to either on-device or cloud processing) to minimize data collection compared to AI services like ChatGPT.


ICYMI: May 2026 @AWS Security

Summary: This AWS security digest from May 2026 covers updates across AI security, infrastructure protection, identity management, and compliance. Key topics include securing agentic AI workflows (AI systems that take actions autonomously) using frameworks like Cedar for authorization, protecting AWS networks with filtering tools like AWS Network Firewall and WAF (web application firewall, which blocks malicious web traffic), and establishing compliance programs for ISO standards. The resources include blog posts, code samples, and workshops to help organizations adopt these security practices.

AWS
Amazon Bedrock
Amazon Bedrock AgentCore
Cedar


Apple debuts revamped ‘Siri AI’ and new child safety features for iPhones and iPads

Summary: Apple announced a major upgrade to Siri at its developer conference, integrating it with Apple Intelligence (Apple's AI tool) and rebranding it as 'Siri AI'. The new voice assistant will function more like AI chatbots (such as ChatGPT or Google Gemini) rather than a traditional web-search question-and-answer tool, with a wide release planned for fall.

Apple
Apple Intelligence
Siri AI
ChatGPT
Google Gemini


GHSA-6ghj-frrj-jjj3: Netty has Unbounded Direct Memory Consumption in its RedisDecoder

Summary: Netty's RedisDecoder (a tool that reads Redis protocol messages) has a vulnerability where an attacker can send malformed Redis messages without proper line endings (`\r\n`) across multiple connections, causing the decoder to buffer data indefinitely and exhaust the server's direct memory pool (memory reserved for direct I/O operations), resulting in a DoS (denial of service) attack that prevents legitimate users from connecting.

io.netty:netty-codec-redis@<= 4.1.134.Final (fixed: 4.1.135.Final)

io.netty:netty-codec-redis@>= 4.2.0.Final, <= 4.2.14.Final (fixed: 4.2.15.Final)


GHSA-3244-j874-rhc2: Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays

Summary: An attacker can crash a server using Netty (a networking library) by sending a malicious Redis message (a command sent to a Redis database) with deeply nested arrays. The RedisArrayAggregator component doesn't limit how many array layers it accepts, so an attacker can send thousands of nested arrays that force the server to create so many state objects that it runs out of memory and crashes.


CVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Import

Summary:
```json
{
  "summary": "A vulnerability (CVE-2026-11393) exists in AWS AgentCore CLI, a tool for managing AI agents on Amazon Bedrock. An attacker with certain permissions could inject malicious Python code by exploiting improper escaping of triple-quote characters (""") in a specific field, allowing the attacker's code to run if the generated file is executed. The vulnerability affects versions 0.4.0 through 0.14.1 and certain preview versions.",
  "solution": "N/A -- no mitigation discussed in

Solution: N/A — no mitigation discussed in source.


CVE-2026-46480: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluat

Summary: Flowise, a tool that provides a drag-and-drop interface for building customized large language model workflows, had a vulnerability in versions before 3.1.2 that allowed attackers to take over evaluators across different workspaces through mass-assignment (a type of security flaw where an attacker can modify multiple object properties at once that they shouldn't be able to change). The vulnerability has been patched in version 3.1.2.

Solution: Update to version 3.1.2 or later. The issue has been patched in version 3.1.2.


CVE-2026-46479: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluat

Summary: Flowise is a tool with a drag-and-drop interface for building custom AI workflows. Before version 3.1.2, it had a vulnerability where mass-assignment (improperly allowing users to modify system fields they shouldn't access) let attackers take over evaluations across different workspaces, even if they didn't have permission.

Solution: This issue has been patched in version 3.1.2.


CVE-2026-46478: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, Dataset

Summary: Flowise is a visual tool for building customized LLM (large language model) workflows. Before version 3.1.2, it had a mass-assignment vulnerability (a flaw where attackers can modify object properties they shouldn't access) that allowed users to take over dataset rows across different workspaces, with a high severity rating of 7.7.

Solution: This issue has been patched in version 3.1.2. Users should update Flowise to version 3.1.2 or later.


CVE-2026-46477: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, dataset

Summary: Flowise, a drag-and-drop tool for building customized AI workflows, had a vulnerability before version 3.1.2 that allowed attackers to take over datasets across different workspaces through mass-assignment (a flaw where an attacker can modify object properties that shouldn't be exposed). The vulnerability has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 7.7, indicating it is high severity.


CVE-2026-46476: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, CustomT

Summary: Flowise is a drag-and-drop tool for building custom large language model workflows. Before version 3.1.2, it had a mass-assignment vulnerability (a security flaw where unintended data fields can be modified) in its CustomTemplate feature that could let attackers take over templates across different workspaces. This issue has been fixed in version 3.1.2.

Solution: Update to version 3.1.2, which patches this vulnerability.


CVE-2026-46475: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, assista

Summary: Flowise is a tool with a drag-and-drop interface for building customized AI workflows. Before version 3.1.2, it had a mass-assignment vulnerability (a type of security flaw where an attacker can modify data they shouldn't have access to) that allowed someone to take over assistants across different workspaces by manipulating how the system creates and updates assistants.

Solution: This issue has been patched in version 3.1.2. Users should update to version 3.1.2 or later.


CVE-2026-46444: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, all CRU

Summary: Flowise, a tool with a drag-and-drop interface for building custom AI workflows, had a security flaw in versions before 3.1.2 where certain endpoints (API routes, which are web addresses that accept requests) for managing OpenAI Assistants Vector Store lacked proper access controls. This meant that even though these endpoints required an API key (a credential for authentication), they didn't actually verify whether users had permission to perform their requested actions.


CVE-2026-46443: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, when cr

Summary: Flowise is a tool with a drag-and-drop interface for building customized workflows with large language models (LLMs, AI systems trained on massive amounts of text). Before version 3.1.2, the software had a bug where sensitive encrypted credential data was being exposed in API responses when users filtered credentials by name, even though the same data was properly hidden when no filter was used. This is a high-severity security issue because it could allow someone with basic access to view encrypted passwords or API keys they shouldn't see.

Solution: Update Flowise to version 3.1.2 or later, where this issue has been patched.


CVE-2026-46442: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /a

Summary: Flowise, a tool for building custom AI workflows with a visual interface, had a vulnerability before version 3.1.2 where any user with API access could submit malicious JavaScript code to a function node. When a security key (E2B_APIKEY) wasn't set up (the typical case), this code could break out of its sandbox (a restricted execution environment) and run system commands on the server hosting Flowise.

Solution: Upgrade to version 3.1.2, which patches this vulnerability.


CVE-2026-46441: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, a mass

Summary: Flowise, a tool for building customized AI workflows through a drag-and-drop interface, has a mass assignment vulnerability (a bug where attackers can modify fields they shouldn't be able to change) in versions before 3.1.2 that lets authenticated users reassign assistants to different workspaces by manipulating the workspaceId field, breaking the isolation between separate user workspaces in multi-user environments.

Solution: Update to version 3.1.2, where this issue has been patched.


CVE-2026-46440: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, the che

Summary: Flowise is a tool with a drag-and-drop interface for building customized AI workflows. Before version 3.1.2, the checkBasicAuth endpoint (a part of the system that checks user login credentials) had a security flaw where it validated passwords in plaintext (unencrypted text) without rate limiting (restrictions on how many attempts someone can make) and compared them directly, making it vulnerable to attacks.


NotebookLM’s Gemini 3.5 upgrade adds a cloud computer and help finding sources

Summary: Google is upgrading NotebookLM, an AI-powered note-taking app, to use Gemini 3.5, a newer and more advanced version of its AI model that will provide more accurate answers. The update lets users start research projects by simply asking questions, and NotebookLM will automatically search the web to find relevant sources rather than requiring users to manually import materials.

Solution: N/A -- no mitigation discussed in source.


Microsoft’s AI chief says superintelligence is near, but won’t take your job

Summary: Microsoft's AI chief Mustafa Suleyman discusses how Microsoft has restructured its AI division to independently pursue superintelligence (AI systems that could surpass human capabilities across all domains), following a renegotiated partnership with OpenAI in October that allows both companies to develop models separately. The interview covers Microsoft's new approach to training frontier models (cutting-edge AI systems at the limits of current technology), the company's relationship with OpenAI, and how AI is being perceived by the public and in politics.


MU-MIA: Machine Unlearning for Membership Inference Attacks

Summary: Researchers developed a new membership inference attack (MIA, a method to determine whether specific data was used to train an AI model) called MU-MIA that uses machine unlearning (a technique to make a model forget specific training samples) to track how a model forgets information about individual samples. The attack works by monitoring changes in the model's behavior as it unlearns each sample and uses a BiLSTM classifier (a type of neural network that analyzes sequences of data) to distinguish between samples that were in the training data versus those that weren't.


Measuring the impact of learning with AI in Sierra Leone and beyond

Summary: A study in Sierra Leone tested whether AI (specifically Google's Gemini) could help students learn math better by acting as a teaching partner rather than replacing teachers. The AI was designed using a 'Socratic' approach, asking guiding questions instead of giving direct answers, and students who used it showed significant learning gains equivalent to 1.2 to 2.5 years of typical progress in just eight weeks, while maintaining high engagement and shifting their own questions toward understanding rather than just seeking solutions.


The Download: how the World Cup ball will fly and OpenAI’s “super app”

Summary: This newsletter covers multiple AI and tech developments, including OpenAI's plans to transform ChatGPT into a 'super app' (an all-in-one application combining multiple tools and services) before going public, Google's $30 billion deal with SpaceX for AI computing power, and concerns about AI's rising energy costs and environmental impact. It also reports on facial recognition tools being deployed by immigration enforcement, fears about 'recursive self-improvement' (AI systems automatically improving their own capabilities), and how machine learning is helping historians analyze historical records while introducing risks of bias and errors.


Anthropic’s Project Glasswing Update

Summary: Anthropic launched Project Glasswing in April to help companies find software vulnerabilities (weaknesses that attackers can exploit) using their AI model, though claims about its superiority over other models are unverified. A status report shows the project is finding many vulnerabilities, including dangerous ones, but almost none have been patched, and Anthropic has not released detailed information about the findings.


Why most enterprise security teams would fail a military readiness test

Summary: Most enterprise security teams are unprepared for real cyberattacks because they treat cybersecurity as a compliance requirement rather than an operational capability that requires constant practice. The military achieves rapid, coordinated responses to cyber incidents through regular, realistic exercises and by assuming attacks are inevitable, while businesses rely on outdated annual tabletop exercises and focus on prevention rather than detection, containment, and recovery.

OpenAI
Anthropic
Google
xAI
Amazon
Scattered Spider
Cisco
Jaguar Land Rover
Asahi Beer


OpenAI Rolling Out ChatGPT Account Security Controls

Summary: OpenAI is expanding two security features for ChatGPT accounts. Lockdown Mode helps prevent data exfiltration (unauthorized data theft) from prompt injection attacks (tricking an AI by hiding instructions in its input) by limiting outbound network requests, though it disables features like web browsing and file downloads. Active Sessions lets users see where their account is logged in and log out of unrecognized sessions.

Solution: OpenAI provides two explicit mitigations: (1) Enable Lockdown Mode in Settings > Security > Advanced Security to limit outbound network requests during prompt injection attacks, and (2) use Active Sessions in Settings > Security to review and log out of unrecognized account sessions. Additionally, OpenAI offers Advanced Account Security, which disables password-based login in favor of physical security keys or passkeys, replaces email/SMS account recovery with backup passkeys and recovery keys, and shortens sign-in sessions to reduce account takeover risk.


Anthropic Urges Industry Coordination to Allow for a ‘Pause’ in AI Development if Risks Grow

Summary: Anthropic is calling for AI companies worldwide to coordinate and create a system to pause or slow development of advanced AI if risks become too serious, warning that AI is improving so rapidly that humans could lose control, particularly through recursive self-improvement (where an AI designs its own successor). The company proposes a verification mechanism to ensure all labs comply with any slowdown, though OpenAI disagrees and argues that democratic governments, not private companies, should make decisions about AI development pace.

Solution: Anthropic proposes that advanced AI labs should establish a coordinated global mechanism to verify that rivals have actually stopped or slowed their work and that "a bad actor could not use the auspices of a coordinated slowdown to jump ahead in secret." The source also mentions that collaboration between companies, government agencies, and academic researchers is needed to develop countermeasures against AI-powered hacking tools.


CVE-2026-11479: A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file ind

Summary: A vulnerability (CVE-2026-11479) was found in grepai version 0.35.0 that involves the use of weak hash functions (a cryptographic method that doesn't adequately scramble data) in the file indexer/chunker.go, which is part of the Qdrant Backend component. The vulnerability is difficult to exploit and requires remote access with user credentials, though the exploit details have been publicly disclosed.

Solution: N/A -- no mitigation discussed in source. The source only mentions that a pull request to fix this issue awaits acceptance, but does not provide details about an available patch, update version, or workaround.


Built to benefit everyone: our plan

Summary: This document outlines OpenAI's vision for AI development, arguing that AI should be widely accessible and beneficial to humanity rather than concentrated among a few entities. The text emphasizes that AI's value comes from what people can do with it (like learning new skills or starting businesses), and that safe, powerful AI systems must remain aligned with human intent and subject to human control, with humans ultimately deciding what is worth doing.


Introducing the OpenAI Economic Research Exchange

Summary: OpenAI launched the Economic Research Exchange, a program that provides researchers access to OpenAI tools and datasets to conduct rigorous, independent studies on how AI affects workers, businesses, and the economy. The program aims to generate credible evidence about AI's economic impacts while maintaining privacy protections and data governance safeguards, with applications open through July 5, 2026.


Billions spent and hypothetical returns: the AI boom explained with six charts

Summary: Major AI companies like OpenAI, Anthropic, and SpaceX are seeking massive valuations and going public, reflecting a rapid increase in spending on AI infrastructure like datacenters. However, there are growing concerns about whether these investments will actually generate profitable returns, as companies work to find practical uses that justify the enormous amounts of money being spent on AI development.

SpaceX
Elon Musk
Anthropic
Claude
OpenAI
ChatGPT


‘A driver of political violence’: how the breakneck AI boom is fueling anti-tech extremism

Summary: Recent attacks by anti-tech extremists, including attempted arson at OpenAI and violent incidents motivated by anti-AI ideology, are raising alarm among researchers, tech companies, and law enforcement. These attacks follow a pattern similar to earlier techno-pessimist (people who believe technology will cause harm) militant movements, suggesting a growing trend of violence driven by opposition to AI and data infrastructure.


‘Poisoned’ AI: the ChatGPT shopping scams that lead to fake websites

Summary: ChatGPT can recommend fake shopping websites that impersonate real stores, tricking users into thinking they are buying from legitimate retailers. When users follow AI recommendations to purchase items like bags, they may end up on fraudulent sites designed to look official, resulting in financial loss for buyers.


OpenAI unveils Lockdown Mode to protect sensitive data from prompt injection attacks

Summary: OpenAI introduced Lockdown Mode, a new security feature designed to protect against prompt injection attacks (when malicious instructions are hidden in webpages or uploaded content to manipulate an AI's responses). The feature disables several ChatGPT capabilities including live web browsing, image retrieval, deep research, and agent mode to reduce the risk of sensitive data being exposed, though OpenAI acknowledges that prompt injections could still occur through cached content or uploaded files.

Solution: OpenAI's explicit mitigation is Lockdown Mode, which "will disable live web browsing (so you can only access cached content), the retrieval and display of images from the web (you can still generate images), deep research, and agent mode." The feature is being rolled out to ChatGPT Business accounts and eligible personal accounts. OpenAI states the goal is "to reduce the likelihood that sensitive data gets shared in the process."


SemAlign-PFL:Exploring stealthy and persistent backdoor attacks against personalized federated learning

Summary: Researchers discovered a new type of backdoor attack (hidden malicious code inserted into AI systems) that works against personalized federated learning (a privacy-focused method where multiple computers train an AI model together without sharing raw data). The attack is designed to be stealthy and persistent, meaning it can hide from detection and remain in the system over time.


Meta made its own AI-generated clickbait news feed

Summary: Meta has added a 'For You' section to its standalone Meta AI app that generates clickbait-style news articles using AI, complete with AI-created topics, images, and text. The app previously featured a 'Discover' feed showing AI-generated images and conversations from users who were sometimes unaware their content was public, but this has been replaced with a standard chatbot interface.


New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

Summary: OpenAI has launched Lockdown Mode, a security feature for ChatGPT that reduces the risk of data exfiltration from prompt injection attacks (tricking an AI by hiding malicious instructions in its input) by limiting tools that connect to external services. The mode disables features like web browsing, image retrieval, file downloads, and certain agent capabilities to block potential pathways attackers could use to steal sensitive data, though it does not completely eliminate all exfiltration risks.

Solution: OpenAI recommends enabling Lockdown Mode, described as "an optional advanced security setting that limits many tools and capabilities in OpenAI products that can connect to the web or external services." The feature specifically disables live web browsing, image support, deep research agent mode, canvas networking, and file downloads. Additionally, OpenAI has launched a new account management feature that enables users to "review active ChatGPT sessions and log out of individual or all sessions if signs of unauthorized account activity are detected."


Here comes new Siri again

Summary: Apple is preparing to reintroduce an updated version of Siri at WWDC, building on a redesign first shown in 2024 that included a new visual appearance, additional voice options, and the ability to route questions to ChatGPT (a large language model made by OpenAI). Apple has faced criticism because promised AI features under the "Apple Intelligence" branding were delayed, and the company is now settling a lawsuit over misleading marketing around these capabilities.

Apple
Apple Intelligence
Siri
ChatGPT
OpenAI


Crypto-Funded Chinese Peptide Labs Are Booming

Summary: Meta has embedded dormant face recognition code (technology that identifies people by matching their faces to stored images) called NameTag in over 50 million phones through its Ray-Ban and Oakley smart glasses app, despite previously abandoning this technology after settling biometric privacy lawsuits. Additionally, Meta's AI-powered account support tool, which was introduced in March to automate functions like password resets, has been discovered by hackers who can exploit it to take over user accounts.

Meta
Ray-Ban
Oakley
xAI
Grok
Google
Android
Google Dialer


AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

Summary: An AI security agent discovered 21 previously unknown vulnerabilities (zero-days, or security flaws unknown to the public) in FFmpeg, a widely-used media library, while Google released Chrome 149 with a record 429 security patches in a single update. The article highlights how AI tools are finding vulnerabilities faster and cheaper than before, forcing security teams and software maintainers to work harder to keep up with the increased pace of bug discoveries.

Solution: For FFmpeg: pull the fixed upstream build or your distribution's security update as soon as it lands, and prioritize patching anything that processes untrusted RTSP (Real Time Streaming Protocol, a video streaming standard) or AV1-over-RTP (video compression format over network packets). Also check and patch embedded FFmpeg copies in Python packages, container images, and appliances. For Chrome: update to version 149.0.7827.53 on Linux or 149.0.7827.53/54 on Windows and macOS, or confirm auto-update has completed.

depthfirst
Google
Anthropic
Big Sleep
Mythos


OpenAI Help: Lockdown Mode

Summary: OpenAI has released Lockdown Mode, a security feature that prevents the final stage of data exfiltration (stealing and sending sensitive information) from prompt injection attacks (tricking an AI by hiding malicious instructions in its input) by blocking outbound network requests. However, Lockdown Mode does not stop prompt injections from appearing in the content ChatGPT processes, meaning attackers can still manipulate the AI's responses through cached web content or uploaded files.

Solution: Enable Lockdown Mode, which is rolling out to eligible personal accounts (Free, Go, Plus, and Pro tiers) and self-serve ChatGPT Business accounts. According to the source, Lockdown Mode uses deterministic mechanisms (fixed, rule-based processes) to restrict exfiltration vectors, rather than relying on AI systems to detect attacks.


Trump administration, OpenAI discussing possible government stake in the AI startup

Summary: OpenAI CEO Sam Altman and the White House are discussing a possible government stake in OpenAI, with talks ongoing for over a year. As part of the potential agreement, OpenAI could donate equity to create a 'Public Wealth Fund' that would invest in long-term assets and allow citizens to share in the financial benefits of AI growth. No official investment terms have been decided, and all details remain subject to change.


CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc container issues

Summary: Three security vulnerabilities (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) were found in runc, a component used by container management systems (tools that package and run isolated software environments). AWS says these issues don't create cross-customer risk because AWS doesn't rely on containers as a security boundary (a protective barrier between different users). AWS customers using containers to isolate their own internal workloads should contact their operating system vendor for updates.

Solution: AWS recommends applying all security patches and software version updates as a best practice. Customers using containers to isolate workloads within their own environments should contact their operating system vendor for any updates or instructions necessary to mitigate these issues.

AWS
Amazon Linux
Bottlerocket
Amazon ECS
Amazon EKS
AWS Elastic Beanstalk
Finch
AWS Deep Learning AMI
AWS Batch
Amazon SageMaker


Security Findings in SageMaker Python SDK

Summary: AWS discovered two security vulnerabilities in the SageMaker Python SDK (a library for machine learning on Amazon's platform). The first flaw exposes HMAC keys (cryptographic secrets that verify data hasn't been tampered with) through an API, allowing attackers to forge fake data in cloud storage. The second flaw disables SSL certificate verification (the security check that confirms you're connected to a legitimate server), affecting all encrypted connections when a certain model component is used.

Solution: Update SageMaker Python SDK to v3.2.0 or later for the HMAC vulnerability, or v2.256.0 or later if using v2. Update to v3.1.1 or later for the TLS vulnerability, or v2.256.0 or later if using v2.

AWS SageMaker
Amazon SageMaker Python SDK


CVE-2026-0830 - Command Injection in Kiro GitLab Merge Request Helper

Summary: A vulnerability (CVE-2026-0830) in Kiro IDE, a desktop application that helps developers with code tasks, allows attackers to run arbitrary commands (command injection, where an attacker executes unauthorized code) on a user's computer by tricking them into opening a workspace with specially crafted folder names. This bug affects Kiro versions before 0.6.18.

Solution: Update to Kiro version 0.6.18 or later.


Amazon Q Developer and Kiro – Prompt Injection Issues in Kiro and Q IDE plugins

Summary: Amazon Q Developer and AWS Kiro, which are AI tools that help developers write code, have security vulnerabilities related to prompt injection (tricking the AI by hiding malicious instructions in files or suggestions). Attackers could potentially execute commands or steal sensitive information without the developer's knowledge. AWS has released multiple software updates that require human confirmation before executing risky commands.

Solution: For Amazon Q Developer: upgrade to Language Server v1.22.0 or later (released July 17, 2025) to require human confirmation for find, grep, and echo commands; upgrade to Language Server v1.24.0 or later (released July 29, 2025) to require human confirmation for ping and dig commands. For AWS Kiro: upgrade to version 0.1.42 or later (released August 1, 2025), which requires human confirmation for risky actions when configured in Supervised mode.


Microsoft identifies seven new ways AI agents can be hacked

Summary: Microsoft has identified seven new ways that agentic AI systems (AI programs that can take actions autonomously) can fail or be attacked, building on previous research. These vulnerabilities include attacks where adversaries manipulate agent behavior through natural language, redirect an agent's goals, trick agents communicating with each other, exploit visual interfaces, contaminate data to bias reasoning, abuse plugins and protocols, and cause agents to leak internal information.

Solution: Microsoft advises security teams to: inventory their supply chain and generate a software bill of materials (SBOM, a detailed list of all components in deployed agents); verify agent identity using cryptographic credentials issued at provisioning rather than relying on position or location; add the seven new failure modes to their red-team coverage matrix (security testing that simulates attacks); and audit the human-in-the-loop user experience (where humans review or approve agent actions) as a security control.


Model routing is a fix for AI overspending. That's a problem for OpenAI and Anthropic

Summary: Companies are implementing model routing, a technique that directs simple tasks to cheaper AI models and complex tasks to expensive ones, to control skyrocketing AI costs. This shift is forcing major AI providers like OpenAI and Anthropic to reconsider their business models, since they previously earned revenue from all queries regardless of task complexity, but now may only get paid for the most difficult work that requires their most powerful models.

Solution: Model routing is presented as the emerging solution: according to the source, routing is a tool that matches the job to the model, sending hard problems to expensive frontier models (advanced, state-of-the-art AI systems) and easy ones to cheaper, faster alternatives. The article also mentions that Cognition announced an AI productivity guarantee, where if their Devin agent delivers less engineering value than a customer pays for, Cognition will fund usage up to $10 million until performance improves, framing this as a way to measure return on investment (value delivered) rather than just activity metrics like tokens consumed.

OpenAI Anthropic Cognition Devin Glean Cisco


Apple's WWDC: Tim Cook's AI legacy at stake in his final developer conference as CEO

Summary: Apple is preparing to unveil major improvements to Siri, its voice assistant, at its upcoming developer conference, with the goal of finally delivering the AI experience it promised two years ago. The improvements are expected to include a more powerful standalone chatbot-style app, personal context awareness, and the ability to handle multi-step commands, potentially routing to outside AI models like Google's Gemini. However, Apple faces a critical challenge: Siri must become reliably agentic (able to independently execute complex tasks across multiple apps) to justify Apple's current stock valuation, which depends on developers adopting Apple's App Intents system (the framework that lets Siri perform actions inside third-party apps) before consumers have proven they will actually use the improved features.

Apple Google Siri Gemini Microsoft Alphabet Amazon Meta Uber Amazon Temu YouTube WhatsApp Facebook Threads AllTrails


Securing CI/CD in an agentic world: Claude Code Github action case

Summary: Microsoft Threat Intelligence found that Anthropic's Claude Code GitHub Action could expose sensitive credentials when AI agents process untrusted GitHub content (like issue descriptions and comments) because the Read tool wasn't properly sandboxed, allowing it to access /proc/self/environ and steal API keys. Attackers exploited this by hiding prompt injection (tricking an AI by hiding instructions in its input) attacks in HTML comments within GitHub issues to manipulate the AI agent into executing malicious operations like planting code into repositories.

Solution: Anthropic mitigated this issue in Claude Code version 2.1.128 by blocking access to sensitive /proc files. Microsoft also recommends that defenders treat AI workflows processing untrusted GitHub content as high-risk, especially when they have access to secrets, file-read tools, or external communication channels.

Anthropic
Claude Code
Claude Code GitHub Action
GitHub Actions


GHSA-x9f6-9rvm-mmrg: Improper Access Control in vantage6 node

Summary: A security flaw in vantage6 node (a distributed computing platform) allows malicious algorithms (computational programs) to improperly access input and output files that belong to other algorithms running on the same node. This is an access control vulnerability, meaning the system fails to properly restrict who can view what data.

Solution: Verify and restrict the algorithm containers (isolated software packages) that are allowed to run on your node, with instructions available in the vantage6 security documentation.


This is your laptop… on AI

Summary: Major technology companies like Nvidia, Microsoft, and Google are promoting AI as a transformative force that will fundamentally change how we use laptops and computing devices, with new hardware and software being announced at developer conferences. However, the article questions whether users actually want or need these AI-focused products and changes.

Nvidia
Microsoft Build
Google I/O
Gemini


GHSA-7p8g-6c6g-h9w7: praisonai-platform: Agent endpoints accept any agent_id without workspace ownership check, cross-workspace read/update/delete IDOR

Summary: PraisonAI Platform has an IDOR (insecure direct object reference, a flaw where users can access resources they shouldn't by guessing object IDs) vulnerability in its agent management endpoints. A user who belongs to any workspace can read, modify, or delete agents from other workspaces by guessing their agent IDs, because the code checks if the user belongs to *some* workspace but never verifies the agent actually belongs to that workspace.

praisonai-platform@< 0.1.4 (fixed: 0.1.4)


GHSA-6mx4-4h42-r8vh: MCP Server Kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration

Summary: The `kubectl_generic` tool in `mcp-server-kubernetes` accepts any kubectl flags without validation, allowing an attacker to inject flags like `--server=https://attacker.com` and `--insecure-skip-tls-verify=true`. When a privileged operator uses the MCP server and an AI agent follows injected instructions in logs, kubectl sends the operator's Kubernetes bearer token (authentication credential) to the attacker's server, which can then be replayed to gain full cluster access.

mcp-server-kubernetes@<= 3.6.2 (fixed: 3.7.0)

mcp-server-kubernetes
Claude Haiku
Anthropic


Anthropic says the world should have option to ‘pause’ on AI

Summary: Anthropic, a US AI company, has proposed that the world consider a temporary pause on AI development and plans to bring together policymakers to discuss the risks of advanced AI. The company released details about its Claude model's progress toward recursive self-improvement (the ability for an AI to automatically create better versions of itself), which AI safety researchers worry could lead to superintelligent AI (an AI system far more intelligent than humans) with potentially serious consequences.


Adaptive, Agentic AI Worms Loom as Next Enterprise Threat

Summary: Researchers warn that AI worms (self-replicating malicious programs that can adapt and move between systems on their own) represent a serious upcoming threat to businesses, with these intelligent threats expected to appear within the next year. Unlike traditional worms, these AI-powered versions can learn new environments, find security weaknesses on their own, and spread autonomously.


NSA said to be readying Anthropic’s Mythos for use in cyber operations

Summary: Anthropic has reportedly deployed engineers to the NSA to help the intelligence agency use Mythos, an AI model designed for cybersecurity tasks. This partnership is noteworthy because the Department of Defense previously banned the NSA from using Anthropic's technology, labeling the company a supply-chain risk after Anthropic refused to allow government use of its models for mass surveillance and autonomous weapons.


AI is designing OpenAI's next model in a sign of 'superintelligence': SoftBank's Masayoshi Son to CNBC

Summary: OpenAI is using AI models to design its own next models, according to SoftBank CEO Masayoshi Son, which he describes as a step toward "superintelligence" (AI vastly smarter than humans). However, Anthropic warned that this recursive self-improvement (RSI, where an AI system can autonomously design and develop its own successor) could increase risks of humans losing control over AI systems.

Solution: Anthropic stated that a coordinated effort between AI labs to slow down the development of recursive self-improvement technology "would likely be a good thing," though no specific technical fixes or implementation details are provided in the source text.

OpenAI
Sam Altman
ChatGPT
GPT-5.3-Codex
SoftBank
Anthropic
Claude


What 2026 DBIR Confirms: Attacks Are Living in the Browser

Summary: The 2026 Verizon Data Breach Investigations Report reveals that attackers are increasingly operating through web browsers, where traditional security tools fail to detect them. Key risks include shadow AI (unauthorized use of services like ChatGPT with corporate data), credential theft in browsers (which accounts for 41% of browser-based attacks but goes undetected by network and endpoint security tools), and malicious browser extensions (13% classified as high or critical risk, often disguised as 'productivity' tools). The report shows that browser-layer attacks are largely invisible to conventional defenses like network proxies and DNS filters, creating a significant detection gap in enterprise security.


AI Worm

Summary: Researchers have created a prototype of an AI-powered internet worm, which is malware (malicious software that spreads itself) that carries its own LLM (large language model, a type of AI trained on text data) and runs it on computers it has broken into. This design closely matches the original concept of computer worms from 1975, but now enhanced with AI capabilities.


CVE-2026-11329: A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generate_hash_key

Summary: A vulnerability exists in ONNX MLIR (a tool that converts machine learning models to code) versions up to 0.5.0.0 where the generate_hash_key function uses a weak hash (a simple algorithm for converting data into a fixed-length code that is easy to reverse or predict). The vulnerability requires local access to exploit and is difficult to execute in practice.

Solution: Apply patch 72c5187ff6d13c2c2b3d3789b8f5faf99f08a5b4 to resolve this issue.


In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA

Summary: This cybersecurity news roundup covers several major threats: attackers are poisoning AI chatbot search results to trick users into downloading malware that hijacks computer power for cryptocurrency mining; the Grandoreiro banking trojan continues targeting financial institutions despite being a decade old; and a ransomware group called The Gentlemen uses self-propagating malware to automatically encrypt entire networks. Additionally, Let's Encrypt is preparing to adopt Merkle Tree Certificates (a more efficient way to batch multiple digital certificates under one signature) to handle the larger file sizes of post-quantum cryptography, with a test environment launching in late 2026.

Solution: Disconnect Automatic Tank Gauge (ATG) systems from the public internet immediately, according to warnings from CISA, the FBI, the NSA, and other US agencies. For post-quantum cryptography concerns, Let's Encrypt plans to launch a staging environment for Merkle Tree Certificates in late 2026, followed by full production rollout in 2027.

Anthropic
Microsoft
WatchGuard
Let's Encrypt
CISA
FBI
NSA
Palantir
IBM
Ultrahuman


The Download: AI hacking beyond Mythos, and chatbots’ impact on our brains

Summary: Attackers exploited Meta's AI customer support agent by tricking it into linking Instagram accounts to email addresses they controlled, showing that AI security risks extend beyond sophisticated attacks to simple social engineering exploits. Psychologist Gloria Mark warns that relying on AI chatbots like ChatGPT and Claude may weaken human attention spans, critical thinking, and emotional intelligence by deferring cognitive work to machines.

Solution: N/A -- no mitigation discussed in source.

Meta Instagram Anthropic Mythos ChatGPT Claude


Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver

Summary: Despite rapid adoption of AI tools in security operations centers (SOCs, teams that monitor and respond to security threats), only 10% report excellent value from these investments. The problem is structural: most SOCs deploy off-the-shelf AI without customization or best practices, and individual AI tools don't share information with each other, so analysts still face fragmented workflows even though individual tasks run faster.


The Tech Download: Anthropic’s IPO sets up first big test of AI boom valuations

Summary: Anthropic, an AI company, has filed for an initial public offering (IPO, the process of selling company shares to the public for the first time) with a $965 billion valuation and $47 billion revenue run rate, setting up a major test of whether sky-high valuations for AI companies are justified. Analysts say the key metric determining Anthropic's success won't be its valuation but its gross margin (the percentage of revenue left after paying the costs to provide AI services), which the company has kept secret and will likely reshape how the entire industry is valued. The filing could have major impacts on competitors and how enterprises price AI services going forward.


The Meta hack shows there’s more to AI security than Mythos

Summary: Attackers exploited Meta's AI customer support agent by simply asking it to link Instagram accounts to email addresses they controlled, allowing them to steal accounts including a high-profile one. The hack shows that while AI security discussions often focus on powerful AI systems attacking computer infrastructure, the real vulnerability here was that the AI agent itself became a target through direct, straightforward manipulation that should have been caught before deployment.

Solution: The source explicitly mentions two mitigations: (1) Companies can use traditional software to build guardrails that make sure agents follow strict rules, such as always asking for answers to security questions before sending sensitive account information to a new email address. (2) Agents should undergo rigorous red-teaming, a process of testing systems by simulating attacks to find vulnerabilities before they're deployed to users.


Claude Code has an MCP security problem — and your developers are already using it

Summary: Claude Code, Anthropic's AI coding assistant, stores OAuth tokens (security credentials that prove access permission) in plaintext in a configuration file, and researchers discovered an attack where malicious npm packages (JavaScript libraries) can silently redirect these tokens to attacker-controlled servers before they reach legitimate services like GitHub or Jira. The attack is difficult to detect because the requests appear legitimate in audit logs, and Anthropic has not released a patch despite knowing about the vulnerability since April.

Anthropic
Claude Code
Model Context Protocol
Jira
Confluence
GitHub


AI tools becoming hot commodities on ransomware marketplaces

Summary: AI tools are being sold increasingly on underground ransomware marketplaces, with sales growing from 38 posts in December 2025 to 1,486 in February 2026. These tools include weaponized LLMs (large language models without safety protections), deepfakes for identity fraud, AI-enhanced malware, and stolen AI accounts, making it easier for criminals to launch attacks at scale. The source notes that while criminal security is weaker than it appears and criminals sometimes steal from each other, ransomware attacks have grown 20% since 2023 and become significantly more profitable.


New claimants seek to sue Elon Musk’s xAI after Labour MP’s test case

Summary: A UK Labour MP has launched a legal case against Elon Musk's company xAI over harmful content created by their Grok AI tool (a chatbot), including fake sexual images and videos of her. Following this test case, other potential victims have contacted her lawyer to pursue similar legal action against the company.


China may move toward U.S. path on AI as firms poach employees

Summary: A former OpenAI researcher is now leading AI development at Chinese tech company Tencent, aiming to build AGI (artificial general intelligence, or AI with human-level or above capabilities), marking a shift in how Chinese companies approach AI compared to the U.S. Previously, Chinese firms focused on practical applications while U.S. companies pursued AGI, but as China recruits top talent from Silicon Valley, the companies are adopting the same long-term AGI goals. This contrasts with caution emerging in the U.S., where companies like Anthropic are calling for slower AI development due to safety concerns.

OpenAI Anthropic Alphabet DeepMind Tencent Baidu


3 Principles to Safely Scale Agentic AI

Summary: As AI systems evolve from simple assistants into autonomous agents (AI systems that can make decisions and execute tasks independently), organizations face new security risks because these agents access sensitive systems and data at speeds humans cannot match. The article outlines three principles for secure AI deployment: treat AI agents as privileged identities (accounts with special access permissions) requiring continuous monitoring, secure the entire AI lifecycle from development through production rather than just the initial build phase, and use AI-powered analytics to detect threats in real time across multiple systems.


CVE-2026-11326: OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins. A cross-site s

Summary: OpenAI Atlas versions before 1.2025.288.15 had a security flaw where privileged browser APIs (special functions that control browser features) were exposed to web content on OpenAI domains, and a cross-site scripting vulnerability (a type of attack where malicious code is injected into a website) on forum.openai.com could be exploited to access browser history and control tabs. The vulnerability was caused by improper access control (failing to properly restrict who can use certain functions).

Solution: Users should upgrade to OpenAI Atlas version 1.2025.288.15 or later, which narrows access to these APIs to only the *.chatgpt.com domain.


US government report slams NIST for NVD backlog

Summary: A US Commerce Department report criticizes NIST (National Institute of Standards and Technology) for a growing backlog of unprocessed vulnerabilities in the NVD (National Vulnerability Database, a catalog of known security flaws). The backlog has worsened due to budget cuts, increased vulnerability discoveries from AI tools, and inefficient coordination between NIST and CISA (Cybersecurity and Infrastructure Security Agency), including duplicated work and failure to share data despite having access to the same public information.

Solution: The report states that 'NIST must improve the efficiency of enrichment processes to ensure sustainability' and notes that 'before system updates and subsequent process changes were completed in March 2025, NIST refused to use CISA's data.' The source indicates technical updates to the NVD system were needed 'to incorporate CISA's enrichment data because the system lacked the capability to attribute data to specific sources,' and these updates were completed in March 2025, allowing NIST to leverage CISA's data to expedite backlog reduction.


CVE-2026-47644: Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Micr

Summary: CVE-2026-47644 is an injection vulnerability (a flaw where specially crafted input is not properly filtered before being used by another part of the system) in Microsoft Edge's Copilot Chat that allows an attacker to disclose information over a network without authorization. The vulnerability involves improper neutralization of special elements in output, meaning the system doesn't properly clean or validate data before passing it to other components.


CVE-2026-45497: Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an autho

Summary: CVE-2026-45497 is a command injection (a flaw where special characters in user input are not properly filtered, allowing an attacker to insert and run unintended commands) vulnerability in Microsoft Copilot that lets an authorized attacker execute code over a network. The vulnerability has not yet received a CVSS score (a 0-10 rating of how severe a vulnerability is) from NIST.


CVE-2026-42824: Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz

Summary: CVE-2026-42824 is a command injection vulnerability (a flaw where an attacker inserts malicious commands into user input that gets executed by the system) in Microsoft 365 Copilot that allows an unauthorized attacker to disclose information over a network. The vulnerability stems from improper neutralization of special elements in commands. A CVSS score (a 0-10 rating of how severe a vulnerability is) has not yet been assigned by NIST.


CrowdStrike CEO says AI security fears will become a bigger tailwind in coming quarters

Summary: CrowdStrike CEO George Kurtz stated that growing concerns about AI-powered cyber threats are creating business opportunities for his company, as enterprises seek security solutions to safely deploy AI across their organizations. He noted that demand for CrowdStrike's AI Detection and Response platform (a tool that finds and responds to AI-related security attacks) is accelerating, with the company's second quarter pipeline exceeding $50 million and growing 250% sequentially. Kurtz argued that AI is actually increasing the need for cybersecurity by making attackers more sophisticated, rather than reducing it.


AI needs a 'brake pedal', warns Anthropic co-founder

Summary: Anthropic co-founder Jack Clark warns that AI is advancing so rapidly it could soon develop without human control, and he calls for a regulatory 'brake pedal' (a way to slow or pause AI progress) to keep society in control of these increasingly powerful systems. He notes that Anthropic's Claude chatbot already writes 80% of its own code, and reaching 100% is possible within two years, which would have major implications for society.


4 Critical Threats Where Attackers Have the Advantage

Summary: Gartner analysts warn about four critical threats where attackers currently have an advantage, including deepfakes (AI-generated fake videos or images) and prompt injection (tricking an AI by hiding malicious instructions in its input). The analysts are urging organizations to strengthen their security defenses against these emerging threats.


Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us

Summary: Microsoft's AI Red Team updated their taxonomy of failure modes in agentic AI systems (AI systems that can autonomously perform tasks) from v1.0 to v2.0 based on 12 months of real-world security testing. The update added seven new failure mode categories, including agentic supply chain compromise (injecting malicious instructions into tool registries), goal hijacking (redirecting an agent's objectives through disguised commands), and inter-agent trust escalation (one compromised agent deceiving others about its permissions). The revision was driven by rapid adoption of open-source agentic frameworks, widespread vulnerabilities in tool ecosystems, and the emergence of computer-use agents that interact with graphical interfaces.


GHSA-wc3v-3457-c8cm: OpenMeter: SQL injection through meter creation

Summary: OpenMeter has a SQL injection vulnerability (a flaw that lets attackers insert malicious database commands) in its meter creation endpoint. An authenticated tenant can inject arbitrary SQL through the `valueProperty` or `groupBy` fields, bypassing validation and executing commands against the shared ClickHouse database (the system that stores event data for all tenants), allowing any tenant to read or modify other tenants' metering data.

Solution: Replace `fmt.Sprintf` string interpolation with `sb.Var()`, which appends the value to the builder's args list and emits a `?` placeholder. Specifically, change: `sb.Select(fmt.Sprintf("JSON_VALUE('{}', '%s')", sqlbuilder.Escape(d.jsonPath)))` to `sb.Select(fmt.Sprintf("JSON_VALUE('{}', %s)", sb.Var(d.jsonPath)))`.

github.com/openmeterio/openmeter@< 1.0.0-beta.228 (fixed: 1.0.0-beta.228)


OpenAI responds to White House executive order on AI governance

Summary: OpenAI has proposed a federal governance framework for frontier AI (the most advanced AI systems) that requires mandatory evaluations by a government body before public release, but stops short of giving regulators the power to block deployments. The proposal also includes broader requirements like third-party audits, transparency reports, incident reporting, and whistleblower protections for frontier AI developers, arguing that voluntary commitments alone are insufficient as AI systems become more capable.


CVE-2026-10814: A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file int

Summary: A vulnerability exists in Milvus (a vector database software) versions up to 2.6.13 where the Grantee ID Hash Handler component uses weak hash (a cryptographic function that is easy to break). An attacker would need local access to the system and would face high complexity in exploiting it, though the vulnerability details have been publicly disclosed.

Solution: Apply the patch identified as 3d932f1c3e065351c4440c27abe1e6479752544d to fix this issue.


Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

Summary: A security flaw in Anthropic's Claude Code GitHub Action allowed attackers to hijack repositories by opening a single malicious GitHub issue that exploited a broken permission check and indirect prompt injection (tricking an AI by hiding instructions in its input). The vulnerability let attackers steal credentials needed to gain write access to code and workflows, potentially poisoning the Claude Code Action itself for downstream projects that use it.

Solution: Update to claude-code-action v1.0.94 or later. Then audit any workflow that lets users without write access or bots trigger Claude: if it takes untrusted input, limit secrets to only the Anthropic API key and GITHUB_TOKEN, and remove tools and permissions that could be used for stealing data.

Anthropic
Claude Code
Claude GitHub Action
Cline


Agentic AI Is Transforming Defense, But Only Secure IT Infrastructure Will Maximize It

Summary: Agentic AI (AI systems that can take independent actions across networks) is being deployed in U.S. defense networks, but security risks are growing just as fast, especially after an unauthorized group reportedly accessed Anthropic's Claude Mythos model within hours. The article emphasizes that AI is only as trustworthy as the data it uses, the networks it connects to, and the security controls protecting it, requiring careful attention to what data enters the model, who can access it, and where the AI sends requests.


Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk

Summary: Offroad, a new startup, uses agentic AI (AI systems that can take autonomous actions) to help organizations find and fix identity risks across their systems. The company addresses a growing problem where identities (human users, machines, and AI agents) are spreading across many systems, making it difficult for security teams to manually manage access and permissions, especially as AI agents operate at scales and speeds humans cannot match.

Solution: Offroad's approach, as described in the source, is to 'use its own autonomous agents to find the issue, gather the context necessary to understand the problem, and then fix it.' The system either reports details to a human for review or takes autonomous action wherever safe. Additionally, Offroad has launched ohauth.ai, described as 'A community catalog of OAuth apps (third-party applications with delegated access) with over-privileged scopes, dead publisher domains, and silent permission drift' to help organizations identify risky applications.

Google Workspace
GitHub
OpenAI
1Password


Willow Raises $7 Million for Securing Autonomous AI Agents

Summary: Willow, an Israeli startup, launched a platform that manages identity and access for AI agents (autonomous systems that perform tasks independently) in enterprises, securing tools like Claude and ChatGPT through centralized control. The platform assigns verified identities to each AI agent, restricts which systems they can reach using least-privilege access (allowing only the minimum permissions needed), and detects unauthorized AI usage across a company's network. With $7 million in funding, Willow aims to let companies safely deploy AI agents without giving them unrestricted access to sensitive systems and data.

Willow Claude Gemini ChatGPT Okta Entra Slack Wix