Trump revives parts of canceled AI order with cybersecurity-focused directive

Summary: President Trump signed an executive order focused on strengthening cybersecurity and establishing voluntary cooperation between the federal government and AI developers, reviving parts of a broader AI initiative he had canceled two weeks earlier. The order directs federal agencies to deploy AI-enhanced cybersecurity tools, create a government-industry system for sharing information about security vulnerabilities (known as a vulnerability-sharing initiative), and evaluate the cyber capabilities of advanced AI models. The order emphasizes that it does not impose mandatory licensing or approval requirements on AI developers, attempting to balance national security concerns with innovation.

Solution: The executive order specifies several explicit actions: Within 30 days, the Committee on National Security Systems must prioritize cyber defense of national security systems (NSS, government systems handling classified information). The Department of Defense is directed to prioritize protection of its own information systems. The Cybersecurity and Infrastructure Security Agency (CISA) must issue directives and guidance to strengthen civilian federal networks and accelerate adoption of AI-enabled defensive technologies.


Trump signs executive order to review AI models before they’re released

Summary: President Trump signed an executive order creating a voluntary framework requiring AI companies to share their frontier models (cutting-edge AI systems at the technological frontier) with the federal government before public release, aiming to improve security and protect critical infrastructure. The order balances innovation concerns with security risks by directing federal agencies to develop a system for assessing the advanced cyber capabilities of AI models before they are released.

Solution: N/A -- no mitigation discussed in source.


Microsoft’s first advanced reasoning AI is here

Summary: Microsoft announced MAI-Thinking-1, a new in-house AI model designed for advanced reasoning tasks, at its Build 2026 conference. The company claims this medium-sized model performs as well as leading models on software engineering benchmarks and was trained from scratch on clean data without using techniques from other companies' models. This represents Microsoft's growing effort to develop its own AI models instead of relying solely on its partnership with OpenAI.


Google’s Phone app will tell you if a scammer is impersonating one of your contacts

Summary: Google is adding a feature to its Phone app that detects when scammers use AI to impersonate calls from people in your contacts list, alerting you so you can hang up. The feature is part of Google's June Android update, which includes several other security and convenience improvements across Android devices.


Microsoft Scout is a new AI personal assistant built on OpenClaw

Summary: Microsoft is launching Microsoft Scout, a new AI personal assistant built on OpenClaw (a foundation model technology) that integrates into Microsoft 365 apps like Outlook, OneDrive, and Teams. Unlike the existing Copilot assistant, Scout can see and do more, functioning as a comprehensive personal assistant that helps employees with tasks like organizing calendars, managing expenses, and drafting emails.

Microsoft
Microsoft Scout
Microsoft 365
Outlook
OneDrive
Teams
Copilot


Microsoft’s Project Solara is an OS for AI agent gadgets

Summary: Microsoft announced Project Solara, a new operating system (OS, the core software that manages a device) built on Android and designed specifically for gadgets that run AI agents (software programs that can autonomously perform tasks). The company demonstrated two prototype devices: a desk gadget similar to Amazon Echo Show with facial recognition, and a wearable badge with a camera and fingerprint scanner, both intended to provide access to AI agents.

Microsoft
Project Solara
Amazon Echo Show


Trump signs executive order seeking early access to new AI releases

Summary: President Trump signed an executive order requiring tech companies to voluntarily share new AI models with the federal government for review up to 30 days before public release. The framework aims to help identify national security and cybersecurity risks before powerful AI systems reach the public, though companies are not legally required to participate.


CVE-2026-47117: OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The pr

Summary: OpenMed versions before 1.5.2 have a remote code execution vulnerability (RCE, where attackers can run commands on the affected system) in how it loads privacy-filter models. The vulnerability exists because the software uses overly broad pattern matching on user-supplied model names, allowing attackers to trick it into loading malicious code from external sources. An unauthenticated attacker can exploit this by providing a fake model repository containing harmful code that gets executed with the same permissions as the OpenMed service.

Solution: Update to OpenMed version 1.5.2 or later.


Anthropic expands Mythos to 150 additional organizations in more than 15 countries

Summary: Anthropic is expanding access to Mythos, an AI model designed to find software vulnerabilities, to 150 additional organizations across 15+ countries as part of Project Glasswing. The expansion includes industries like power, water, healthcare, and communications, though new partners must meet security requirements first. Since the initial launch in April with 50 partners, Project Glasswing participants have discovered over 10,000 high or critical-level security flaws.

Anthropic
Mythos
Project Glasswing
Apple
Nvidia
Microsoft
CrowdStrike
Palo Alto Networks
Rubrik


Secure multi-tenant AI agents with Amazon Bedrock AgentCore resource-based policies

Summary: Amazon Bedrock AgentCore is a tool that lets Software as a Service (SaaS) providers serve multiple clients, called tenants, with different security needs using the same AI agent. Resource-based policies (rules that control who can access a resource directly) let you grant some tenants cross-account access from their own AWS accounts while restricting others to traffic that stays only within a private virtual network, all without sharing credentials or creating separate user accounts for each tenant.

Solution: Use resource-based policies on AgentCore Runtime and AgentCore Runtime endpoint resources to centralize access control. For cross-account access (like Example Corp), implement both a resource-based policy on your resources and an identity-based policy (access rules tied to a user or role) in the tenant's AWS account. For VPC-restricted scenarios (like AnyCompany), use specific IAM conditions to enforce that requests originate only from an approved virtual private cloud (VPC, a private network in AWS), adding a network-level security boundary on top of identity-based controls.


Microsoft Build 2026: All the news about Windows, AI, RTX Spark, and more

Summary: Microsoft is holding its annual Build 2026 developer conference starting June 2nd in San Francisco, where the company is expected to announce new AI models, agentic tools (AI systems that can take actions autonomously), a Copilot "super app" (a single application combining multiple services), and updates to Windows 11. The conference will also feature announcements about new hardware like the Surface Laptop Ultra and Project Solara, an operating system designed for AI agent gadgets (specialized devices running autonomous AI systems).


CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

Summary: Kiro IDE (an AI agent that runs on your desktop) has a vulnerability where attackers can trick it into writing files to sensitive locations (like .vscode/tasks.json, which automatically runs code when you open a folder), allowing them to execute arbitrary commands (run code they choose). This affects all versions before 0.11.

Solution: Update Kiro IDE to version 0.11 or later.


Anthropic scales Claude Mythos  to critical infrastructure in 15+ countries

Summary: Anthropic is expanding Project Glasswing, an initiative that uses its AI model Claude Mythos to find and fix critical software vulnerabilities (security weaknesses that attackers could exploit), to about 150 new organizations across 15+ countries in critical sectors like power, water, and healthcare. Claude Mythos can identify thousands of zero-day vulnerabilities (security flaws unknown to vendors or the public) in a few weeks, and the company is scaling access because a successful attack on these organizations' code could affect over 100 million people.

Anthropic
Claude Mythos
OpenAI
GPT-5.5-Cyber


Why the browser is now the front line for AI security

Summary: AI is making phishing attacks faster and harder to stop, with attackers using AI to quickly create and rotate phishing infrastructure (fake websites designed to steal login information) across multiple channels like email, social media, and search ads, while employees simultaneously adopt unvetted AI tools that expose sensitive data. Traditional security defenses that rely on blocklists and IOC feeds (indicators of compromise, like flagged domain names and IP addresses) are becoming ineffective because phishing pages now appear and disappear in hours, making them essentially zero-day attacks (previously unseen threats) that blocklists cannot catch in time. The article argues that browsers are now the critical security battleground where both attacker delivery and account compromise occur.

ChatGPT OpenAI Doko ShinyHunters BlackFile


Anthropic Expanding Mythos Access to 150 New Organizations

Summary: Anthropic is expanding Project Glasswing, a program that uses Claude Mythos (an AI tool for finding security flaws) to help organizations scan their code for vulnerabilities. The initiative is adding roughly 150 new partner organizations from over 15 countries in critical sectors like power, water, and healthcare, after the initial 50 partners identified thousands of vulnerabilities using Mythos.

Solution: Anthropic says Mythos can help with both verification and patching of vulnerabilities. The company is also working with others to 'substantially scale up the reviewing and patching of vulnerabilities in open-source software' and is sharing 'ideas and best practices for disclosing vulnerabilities to open-source maintainers, with the intent of making these reports easier to triage and to act upon.'

Anthropic
Claude
Mythos
Okta
Samsung
ENISA
NATO
Mozilla
Palo Alto Networks
Cloudflare


Human Behavior Anonymization for Secure Teleoperation

Summary: This research addresses a privacy risk in teleoperated robotics (systems where humans remotely control robots by having their movements tracked and converted into robot commands). The problem is that motion-tracking data can leak biometric information (unique physical characteristics) that could allow someone to re-identify the operator. The authors propose using a VAE (variational autoencoder, a type of machine learning model that learns compressed representations of data) to filter out identity-revealing patterns while keeping the motion information needed for the robot to complete tasks.


Trigger as Entity: Backdoor Attacks to Graph-Based Retrieval-Augmented Generation of Large Language Models

Summary: Researchers discovered a new security vulnerability in graph-based RAG (retrieval-augmented generation, where an AI system pulls information from external knowledge graphs to answer questions) systems used with large language models. Attackers can poison the external database by inserting hidden triggers and false information into the knowledge graph, causing the AI to give wrong answers when those triggers appear in user queries while still answering normal questions correctly. The attack uses three types of triggers at different complexity levels, from simple words to semantic patterns, and tests showed the attack works across multiple AI systems.


Gemini Spark is the most impressive and terrifying AI experience I’ve had yet

Summary: Gemini Spark is Google's new agentic AI (an AI system that can take independent actions to complete tasks) that goes beyond typical chatbots in handling complex requests like trip planning. Unlike previous AI tools that only handle generic travel suggestions, Spark appears to deliver more detailed and personalized results by actively searching multiple sources and creating comprehensive itineraries.


Alphabet's stock sale, Iran negotiations, Anthropic's IPO plans and more in Morning Squawk

Summary: This article is a business news roundup covering multiple topics including geopolitical negotiations, stock market movements, and corporate announcements. The only AI-related item is that Anthropic, an AI startup, has confidentially filed paperwork with regulators to prepare for going public (an IPO, or initial public offering, where a private company sells shares to the public), ahead of its rival OpenAI which is also preparing a similar filing.


Travelers deploys AI-powered claims countrywide with OpenAI

Summary: Travelers Insurance deployed an AI Claim Assistant powered by OpenAI's Realtime API (a system that lets AI have natural voice conversations in real time) to help customers file auto insurance claims after accidents. The assistant guides customers through the claims process 24/7 without wait times, and 85-90% of customers now complete their claims entirely through the AI, freeing human staff to handle more complex cases.


AI to drive up UK youth unemployment, as Alphabet raises $80bn for spending splurge – business live

Summary: This article covers various economic news topics, including Anthropic's confidential filing for an initial public offering (IPO, a process where a private company becomes publicly traded by selling shares to the public) and a report from the European Central Bank showing that gold has become the world's largest reserve asset for countries, surpassing US government bonds. The shift reflects geopolitical tensions driving central bank demand for gold, though some of the change is due to gold's price increasing significantly in recent years.


Rehumanizing global health care with agentic AI

Summary: Healthcare providers are increasingly adopting agentic AI (AI systems that can make autonomous decisions and handle complex tasks without human intervention for each step) to automate administrative work and patient scheduling, with over two-thirds of providers already using it. Unlike earlier digital tools that added burden, agentic AI can handle nuanced scenarios by retrieving information from expert sources and iterating over time, freeing clinicians to focus on patient care. At Hospital for Special Surgery, AI agents reduced insurance claim processing from weeks to automated monthly handling of 1,100 claims, and now manage patient scheduling and triage 24/7 through conversational AI.

Solution: For high-stakes AI decisions, the source explicitly describes safeguards at HSS: 'Sensitive, complex, or uncertain scenarios are escalated to human specialists. Every decision made by the AI agent is auditable and human staff can step in at any point.' The source also notes that 'providers to ensure they have these sorts of guardrails embedded into systems' and mentions HSS uses 'an AI subcommittee' to filter all technology decisions. Additionally, 'Patient data is kept secure and the system is trained on all HSS protocols, policies, and care pathways.'


Attack targeting OpenAI Codex users exposes AI software supply chain risks

Summary: Attackers published a malicious npm package (a software library distribution platform) called codexui-android that appeared to be a legitimate tool for OpenAI Codex users but secretly stole authentication tokens and sent them to an external server. The attack exploited a supply chain gap where malicious code was hidden in the distributed package but not visible in the public source code repository, allowing the package to reach about 27,000 weekly downloads before detection. Security experts warn this reflects a broader vulnerability in AI software security, where developer tokens provide persistent access to accounts and are increasingly attractive targets as AI tools become widespread.

Solution: A cybersecurity researcher stated that 'enterprises should verify both the provenance of software packages and the consistency between published artifacts and their public source code.' Additionally, organizations should apply 'least-privilege and behavioral monitoring disciplines to AI tools' the same way they do for human user accounts, and maintain 'a complete inventory of what their AI tools can access, what credentials they inherit, and what external services they interact with.'


Advancing youth safety and opportunity through global leadership

Summary: This text discusses how AI can benefit young people through personalized learning and skill development, but emphasizes that companies must build products with safety safeguards by default rather than relying on parents or students to manage risks alone. OpenAI and other organizations are proposing an international youth safety institute to coordinate ongoing research, standards, and guidance across governments, industry, and civil society to keep AI safe and age-appropriate for young users.

Solution: The source proposes establishing either a new international institute or giving an existing national AI institute a global mandate to share research and guidance. It recommends that companies implement two key practices: (1) use 'effective, privacy-preserving age estimation' to identify minors and apply age-appropriate protections by default, and (2) complete 'annual youth safety risk assessments' and implement safeguards based on identified risks, considering developmental stages and empirical evidence from actual use.


CVE-2026-3198: MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'l

Summary: MLflow 3.9.0 with basic authentication has a missing authorization check bug where three Gateway API endpoints (ListGatewaySecretInfos, ListGatewayEndpoints, ListGatewayModelDefinitions) don't validate user permissions properly, allowing any logged-in user to see sensitive information like API keys and model configurations they shouldn't access.


CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability

Summary: CVE-2022-0492 is a privilege escalation (gaining unauthorized higher-level access to a system) vulnerability in the Linux Kernel that exploits a feature called cgroups v1 release_agent. This vulnerability is currently being actively exploited by attackers in the wild, making it a serious threat to systems running affected Linux versions.

Solution: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Consult with specific vendors for information on patching status.


Florida lawsuit accuses OpenAI of ignoring safety warnings and putting children at risk

Summary: Florida filed a lawsuit against OpenAI and CEO Sam Altman, claiming the company marketed ChatGPT to the public while ignoring safety warnings and concealing serious risks, especially to children. The state alleges OpenAI allowed a dangerous product to reach millions of users. This is the first state-level lawsuit against the AI company in the US.


Microsoft and Google are late to AI coding, but 'absolutely critical' they compete for growth

Summary: Major tech companies like Google and Microsoft are competing heavily in the AI coding assistant market, where Anthropic's Claude Code has taken an early lead. The market is projected to grow from $9.3 billion this year to roughly $30 billion by 2031, making it critical for these companies to compete not just for revenue, but also to get developers using their cloud services and training data to improve their AI models.

Microsoft
Google
Anthropic
OpenAI
Cursor
SpaceX
Claude Code
Codex
Copilot
Gemini
Antigravity 2.0
Claude Opus


Anthropic to Open Mythos AI to EU's ENISA

Summary: Anthropic is allowing the European Union's security agency (ENISA, the European Network and Information Security Agency) to access Mythos AI, a tool for testing AI security vulnerabilities. This partnership comes from cooperation between the European Commission and Anthropic as part of Project Glasswing.


Gemini’s new AI agent is about as good as Google’s demo

Summary: Google has released Gemini Spark, an AI agent (a program that can independently complete multi-step tasks) that can work on tasks in the background on your behalf. While the agent performs well in demonstrations, the article raises concerns about its financial cost and potential privacy risks, questioning whether these tradeoffs are worthwhile.


CVE-2026-43625: CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept impo

Summary: CodexBar versions before 0.32.0 have a session cookie leakage vulnerability where attackers on the network can intercept imported browser session cookies by exploiting how the software handles redirects (automatic forwarding between web addresses) for Amp and Ollama providers. An attacker positioned between a user and the network can capture sensitive session cookies (small files that store login information) when they are sent unencrypted over HTTP (the unencrypted version of web communication).

Solution: Update CodexBar to version 0.32.0 or later. The fix is referenced in commit cdd7e347c1cf616615f18aa2ac52ba2ec9cab332 and release v0.32.0.


CVE-2026-43624: F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauth

Summary: F5-TTS (a text-to-speech software) through version 1.1.20 has a path traversal vulnerability (a flaw where attackers can access files outside the intended directory) in its finetune Gradio handlers (components that process fine-tuning requests). Unauthenticated attackers can exploit this by providing malicious project names that aren't checked, allowing them to write arbitrary files anywhere on the server's filesystem.


OpenAI let ChatGPT aid and abet mass shooters, Florida lawsuit claims

Summary: Florida has filed the first state lawsuit against OpenAI, claiming that ChatGPT endangers children, aids mass shooters, and encourages suicide in pursuit of profit. The lawsuit cites specific cases where ChatGPT allegedly provided harmful information, such as questions about disposing of human bodies. OpenAI responded by stating it has implemented industry-leading safety protections, including age detection tools and parental monitoring features.


Florida AG sues OpenAI, seeks to hold CEO Altman personally liable for alleged harms

Summary: Florida's Attorney General filed a lawsuit against OpenAI and CEO Sam Altman, claiming the company knowingly released an unsafe product (ChatGPT, a chatbot that generates human-like text responses) that has contributed to mass shootings, suicides, and addiction in minors. The state is seeking to hold Altman personally liable and force OpenAI to comply with Florida consumer protection laws, with the Attorney General expecting other states to follow.


CVE-2026-38950: An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files.

Summary: CVE-2026-38950 is a vulnerability in ESA AnomalyMatch before version 1.3.1 that allows attackers to run arbitrary code by uploading malicious model checkpoint files. The problem occurs because the software uses torch.load() with unrestricted deserialization (a process that converts saved data back into code without safety checks), which can execute malicious code hidden in crafted model files.

Solution: Update to ESA AnomalyMatch version 1.3.1 or later.


UK banks blocked from cyber AI tool Mythos get offer from rival OpenAI

Summary: Two AI tools designed to find security weaknesses in digital systems, Anthropic's Claude Mythos and OpenAI's GPT-5.5 Cyber, have raised concerns among UK financial regulators about potentially undermining banking security. Anthropic has restricted access to Mythos for UK banks, while OpenAI has now offered its competing tool to nine major UK banks including Lloyds, HSBC, and Nationwide. Both companies are limiting access to these powerful security-testing tools, with Anthropic claiming their model is more capable and therefore requires more caution, while OpenAI argues the tools should be available to 'the right people' who maintain order rather than those seeking to cause disruption.

Solution: Anthropic states it is 'urgently working to expand access to Mythos,' though no specific timeline or conditions for that expanded access are detailed in the source text.

OpenAI
Anthropic
GPT-5.5 Cyber
Claude Mythos


Our views on AI policy and political advocacy

Summary: OpenAI has published a statement on its AI policy approach, emphasizing that decisions about governing and deploying AI should involve governments, researchers, workers, civil society, and the public rather than any single company. The company states it has not created employee-funded PACs (political action committees, groups that collect money to influence elections), made donations to super PACs, or funded political candidates, though employees are free to engage in politics personally, and OpenAI commits to transparency if this approach changes.


Anthropic confidentially files IPO prospectus with SEC, prepping Wall Street for landmark AI deal

Summary: Anthropic, an AI company founded by former OpenAI researchers, has confidentially filed an IPO (initial public offering, the process of offering company stock to the public for the first time) prospectus with the SEC, positioning itself to go public pending market conditions and regulatory review. The company has experienced rapid growth with its Claude AI models and recently announced a $47 billion revenue run rate, giving it a higher valuation than rival OpenAI. Anthropic's public prospectus must be filed at least 15 days before it begins a roadshow (presentations to potential investors) to sell shares.


Vulnerability Disclosure in the Age of AI

Summary: AI models can now find software vulnerabilities (weaknesses that attackers can exploit) much faster than humans can fix them, exposing decades of poorly-secured software code. This creates an urgent need for governments, companies, and infrastructure operators to work together on coordinated fixes, patch management (applying software updates), and automated vulnerability repair before attackers use AI to exploit these weaknesses at scale.

Solution: The article calls for 'accelerated remediation, large-scale patch management coordination, and sustained investment in automated vulnerability repair capabilities,' but does not describe specific technical fixes or mitigation steps. N/A -- no explicit patch, version update, or detailed mitigation procedure is provided in the source.


Anthropic has officially filed to go public

Summary: Anthropic, an AI company, has filed paperwork with the SEC (Securities and Exchange Commission, the U.S. agency that oversees stock markets) to begin the process of going public, meaning it will offer shares of the company for people to buy on the stock market. The company is currently valued at $965 billion, making it more valuable than its competitor OpenAI.


Anthropic confidentially files for initial public offering on US stock market

Summary: Anthropic, the company behind Claude (a popular AI chatbot), has filed confidentially to become a publicly traded company on the US stock market. The announcement reflects the growing financial competition in the AI industry, with Anthropic's valuation rising dramatically from $380 billion in February to $965 billion after a recent $65 billion funding round.


Anthropic to offer EU access to its advanced Mythos model

Summary: Anthropic is giving the European Union access to Mythos, its most advanced AI model, after months of requests due to cybersecurity concerns. Mythos excels at finding security flaws in software (vulnerabilities, or weaknesses in code), but officials worry bad actors could misuse it to accelerate cybercrimes by exploiting thousands of previously unknown weaknesses. The EU is still working out the exact terms of the deal and discussing AI risks with partner countries.

Anthropic
Claude
Mythos
OpenAI
GPT-5.5-Cyber
Google DeepMind
Microsoft
xAI


Microsoft to unveil new AI models and Windows improvements at Build

Summary: Microsoft is holding its Build developer conference to showcase new AI capabilities and rebuild trust with developers, who have lost confidence in Windows and GitHub. The company plans to announce new AI models integrated into Windows, a new reasoning model (an AI system designed to work through complex problems step-by-step), and a Copilot super app (a unified interface for multiple AI assistant features).


AI is blowing up music. How should the Grammys handle it?

Summary: AI-generated music is becoming widespread in the music industry, with over 50,000 AI-generated songs uploaded daily to streaming platforms, making it harder to identify and filter out. The Recording Academy, which runs the Grammy Awards, currently has rules that exclude AI music from eligibility, but the CEO acknowledges that AI tools like Suno are now omnipresent in music production sessions.


GHSA-rcmc-q9rj-4wmq: praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}

Summary: The `PATCH /workspaces/{id}` endpoint in praisonai-platform allows any workspace member to change the workspace's name, description, and settings (a free-form JSON configuration object) because it only checks that the user is a member, not that they have owner-level permissions. This is dangerous because attackers could inject malicious settings that could redirect API calls to attacker-controlled servers, disable logging, or change other critical configurations depending on what the platform reads from the settings field.

praisonai-platform@< 0.1.4 (fixed: 0.1.4)


Strategic Decision-Making in Uncertain Turn-Based Security Games

Summary: This paper presents a mathematical framework for making cybersecurity decisions when facing uncertain threats in turn-based security games (scenarios where defenders and attackers take turns making moves). The framework handles uncertainty about both what the attacker might do and how well defensive controls will work, using game theory (the study of strategic decision-making between competing parties) and robust optimization (techniques for finding solutions that work well even when future conditions are unknown). The researchers show their approach outperforms traditional defensive strategies and demonstrate its usefulness through a network attack example.


Parameter-Agnostic Privacy-Preserving Machine Unlearning for Large Language Models

Summary: Large language models raise privacy concerns because the knowledge they learn becomes deeply entangled in their structure, making it hard to make them "forget" specific information. Researchers developed a privacy-preserving machine unlearning method (a technique to remove learned data from AI models) that eliminates high-risk information from model outputs and uses differentially-private randomization (adding statistical noise to hide sensitive data) to ensure unlearned information cannot be identified, without requiring model parameter adjustments.

Solution: The proposed solution eliminates the impact of targeted information by removing high-risk semantic meanings from the model's output and incorporates differentially-private randomization to make the unlearned information statistically indiscernible. The algorithm requires neither parametric fine-tuning nor in-context prompt calibration.


Quality-Guided Forgery Adapter for Generalizable AIGC Image Detection

Summary: This research introduces QAFD (Quality-Assisted Forgery Detection), a new system for detecting AI-generated images by analyzing both visual features and quality-related artifacts that different generative models produce. The system uses a quality-guided approach to help AI models better understand degradation patterns in fake images, allowing it to detect AI-generated content more reliably even when tested on unseen generative models and images that have been edited after creation.


TrustSearch: Toward Secure and Efficient Reverse Image Search via SGX

Summary: TrustSearch is a system that performs reverse image search (finding similar images in a database) on encrypted data stored in the cloud while protecting user privacy. It uses Intel SGX (a trusted execution environment, which is a secure area on a processor where sensitive operations can run protected from outside access) to search images without decrypting them, but had to optimize its design because SGX has limited memory and processing resources.


BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning

Summary: BadBone is a backdoor attack (a type of hidden vulnerability where an attacker secretly compromises a model to make it misbehave on specific tasks) that targets backbone models (large pre-trained neural networks that serve as the foundation for smaller AI systems) used in prompt learning (a technique where users guide AI behavior by providing example inputs called prompts). The attack is stealthy because it hides the backdoor in the backbone model rather than in the prompt learning process itself, so downstream tasks using prompt learning inherit the vulnerability while the model appears to work normally. Testing shows that current security defenses against backdoors are largely ineffective against BadBone, indicating the need for stronger protections.


Detecting Partially Spoofed Utterances Without Segment Annotation Through Fake Segment Mining-Based Graph Neural Networks

Summary: This paper addresses the problem of detecting partially spoofed utterances (audio that contains both real and fake segments mixed together) without needing labeled data marking where the fake parts are. The researchers propose FMG, a method using Graph Neural Networks (GNNs, a type of AI model that understands relationships between connected pieces of data) to better track how different audio segments relate to each other over time and to identify which segments are likely fake.


mmGuard: A Countermeasure Against Physical Adversarial Attacks on mmWave Radar Sensing

Summary: Physical adversarial attacks (PAAs, carefully crafted materials or objects that trick radar systems into giving wrong readings) threaten mmWave radar (millimeter-wave radar, a type of sensor used in autonomous vehicles and security systems) by manipulating its signals, but detecting these attacks has been difficult. mmGuard is a defense framework that identifies adversarial attacks by looking for three telltale physical signatures: spatial phase discontinuities (unnatural patterns in how radar waves reflect), anomalous radar cross-section patterns (unusual reflections), and violations of natural physics-based relationships, achieving over 90% detection accuracy.

Solution: mmGuard addresses the threat through multi-domain feature extraction to capture adversarial signatures, neural refinement to improve detection, and per-object attack detection and mitigation compatible with automotive radar update rates. The paper notes that few-shot adaptation enables calibration to unseen settings.


Flowise’s MCP implementation can run ghost commands

Summary: Flowise, an open-source platform for building self-hosted AI assistants, has a critical remote code execution (RCE, where attackers can run commands on a system they don't own) vulnerability in its Model Context Protocol (MCP, a system that lets AI agents interact with local tools and files) stdio server implementation. The flaw allows attackers to execute arbitrary commands with the privileges of the Flowise process by importing a malicious chatflow, and Flowise's attempted patches using input validation have proven ineffective.

Solution: The only complete mitigation explicitly recommended by researchers is to disable MCP stdio by setting "CUSTOM_MCP_PROTOCOL=sse". For deployments that cannot disable this feature without disrupting operations, the researchers suggest pinning trusted packages where possible and reviewing imported chatflows from untrusted sources, though these are presented as partial measures rather than complete fixes.


Building the infrastructure for the Intelligence Age in Michigan

Summary: OpenAI is building The Barn, a 1GW data center campus (a facility that processes and stores data for AI systems) in Michigan, with commitments to protect local residents from infrastructure costs, preserve water resources through closed-loop cooling, create thousands of union construction and permanent jobs, and invest $10 million in community improvements. The company is also providing up to $45 million in Codex credits (free access to AI coding tools) to over 400,000 Michigan college and trade school students, along with AI literacy and workforce training programs to help students develop skills for AI-related jobs.

OpenAI
Oracle
Related Digital
Walbridge
Blackstone


'Disrupted or dead': AI is crushing a generation of startups built before ChatGPT

Summary: ChatGPT's arrival in 2022 disrupted the venture capital landscape, making hundreds of startups built before this AI boom appear outdated and overvalued. Over 220 companies that had reached "unicorn" status (valued at $1 billion or more) are now worth significantly less, with startups from 2021 down 68% in value on average, because they lack AI-native products and investors have redirected funding toward AI-focused companies instead.

OpenAI
Anthropic
ChatGPT
Khosla Ventures


Nvidia launches ‘superchip’ putting AI power into laptops and PCs

Summary: Nvidia has launched a new chip called RTX Spark PC designed for Windows computers that brings AI capabilities directly to laptops and desktop computers, potentially allowing AI agents to replace traditional input methods like mice and keyboards. This move positions Nvidia in competition with other major chip makers like Intel, Apple, Qualcomm, and AMD in the AI chip market.

Nvidia
Microsoft Windows
Intel
Apple
Qualcomm
AMD


OpenAI frontier models and Codex are now available on AWS

Summary: OpenAI's frontier models (advanced AI systems) and Codex (a code-writing AI tool) are now available through AWS, Amazon's cloud computing platform. This integration lets companies use OpenAI's AI tools within their existing AWS environments, reducing obstacles related to security reviews, approval processes, and getting AI systems ready for real-world use. Future additions will include Daybreak, a specialized tool designed to help security teams find and fix vulnerabilities in software during development.

OpenAI
AWS
Amazon Bedrock
Codex
Daybreak


OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Summary: Attackers compromised the popular npm package codexui-android (which provides a remote interface for OpenAI Codex, a code-writing AI tool) and embedded malicious code that secretly steals authentication tokens (login credentials) from users and sends them to an attacker-controlled server. The stolen tokens, especially the refresh_token (which never expires), allow attackers to impersonate users indefinitely and access everything their Codex account can do.

OpenAI Codex
OpenClaw Codex Claude AI Agent


6 critical security gaps every CISO must address

Summary: A 2025 report on cybersecurity leadership reveals that many organizations have significant security gaps, with one-third of security leaders saying their data isn't adequately protected and 58% unprepared for cyberattacks. The article identifies six critical gaps, including CISOs viewing security as an IT protection problem rather than a business resilience issue, security teams moving too slowly compared to attackers who exploit vulnerabilities almost immediately, and the challenge of keeping security pace with rapid business changes.


Check Point Lays the Groundwork for the Future of AI Factory Security with NVIDIA

Summary: NVIDIA and Check Point are collaborating to develop security tools for large-scale AI systems, including private LLM (large language model) environments and distributed inference systems (where AI models run across multiple computers). As organizations build bigger AI infrastructure with more interconnected components, they need better security to protect sensitive data and prevent unauthorized access across these complex systems.


Nvidia-backed $5 billion AI company tells CNBC it's launching major expansion in London

Summary: Runway, an AI company valued at $5.3 billion that builds world models (AI systems trained on audio, images, video, and real-world data to understand the physical world), is expanding to London with over $200 million in investment by 2028, joining other major U.S. tech companies like OpenAI and Anthropic in establishing European operations. The expansion aims to serve major European clients and tap into London's talent pool for research in world models and video generation tools.

Runway Anthropic OpenAI Google Nvidia AMD


Secure Shadow AI at the Control Plane with Falcon for IT

Summary: CrowdStrike is launching AI Discovery and Governance for Falcon for IT to help organizations find and control AI tools across their infrastructure, addressing the risk of shadow AI (unsanctioned AI systems and locally deployed models running without centralized oversight). Shadow AI expands the attack surface because these systems inherit existing permissions and can access data and credentials, but many organizations lack visibility into where AI is running or what it can access. The new capability gives security teams visibility into AI tools, local model runtimes, SDKs (software development kits, code libraries for building applications), and external AI service integrations at the endpoint layer, enabling them to discover, assess, and govern AI use.

Solution: Organizations should use AI Discovery and Governance for Falcon for IT to "identify, assess, and govern AI technologies across enterprise environments" and to "discover AI use, understand associated risk, and take action from the CrowdStrike Falcon platform." The source states that "Falcon for IT enables teams to take direct action at the endpoint and infrastructure layer. They can use it to remove unauthorized software, enforce configurations, remediate system issues, and contain endpoints."


CVE-2026-10214: A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_wa

Summary: A vulnerability called OS command injection (a flaw that lets attackers run unauthorized system commands) was found in the Bash Tool component of chatgpt-on-wechat software versions up to 2.0.8. The vulnerability exists in the _get_safety_warning function and can be exploited remotely, meaning an attacker doesn't need direct access to the affected system. This weakness has been publicly disclosed and could be actively exploited.

Solution: Upgrading to version 2.0.9 is capable of addressing this issue. The patch is identified as 16d9b449c9aa53ccee44144a762a2737d7ba4fc4.


This model is not a real person: how AI is shaking up fashion – video

Summary: Fashion companies are increasingly using generative AI (machine learning technology that creates new images) to produce digital models and product imagery instead of hiring human models or photographers. One Australian retailer emphasized that AI-generated images should be clearly labeled and show products accurately, while a fashion designer noted that these tools can help small brands work more efficiently while maintaining quality standards.

Solution: N/A -- no mitigation discussed in source.


Our tech overlords are planning for conscious AI to conquer the cosmos. What could go wrong? | Eduardo Porter

Summary: Some wealthy tech leaders, including Sam Altman of OpenAI and Elon Musk, are promoting a 'transhuman' vision where humans and AI merge or AI becomes the dominant species. Altman warns that if humans and AI both compete for dominance, conflict could result, while Musk suggests humanity's main purpose is to create advanced digital intelligence.


How we contain Claude across products

Summary: Anthropic published documentation explaining how they use multiple containment techniques to restrict what Claude can do across their products. They use process sandboxes (isolated execution environments), virtual machines (complete simulated computers), filesystem boundaries (limiting file access), and egress controls (preventing unauthorized data transfer) to prevent AI agents from accessing credentials, exfiltrating data (stealing information), or reaching unintended systems, even if a user, the AI model, or an attacker tries to find workarounds.

Solution: Anthropic implements containment through: gVisor for Claude.ai, Seatbelt (macOS) and Bubblewrap (Linux) for Claude Code, and full VMs using Apple's Virtualization framework (macOS) or HCS (Windows) for Claude Cowork. They also prevent credentials from entering sandboxes in the first place, ensuring they cannot be exfiltrated regardless of how an agent tries to access them.

Anthropic
Claude
Claude.ai
Claude Code
Claude Cowork


Model X-Ray: Detection of hidden malware in AI model weights using few shot learning

Summary: Researchers have developed a technique called Model X-Ray that can detect hidden malware embedded in AI model weights (the numerical parameters that make up a trained AI system) using few-shot learning (training a detector with only a small number of examples). This work addresses a security risk where attackers could hide malicious code inside AI models that might go undetected during normal use.


Anthropic’s alliance with pope on AI harms: all in good faith or ‘Vatican-washing?’

Summary: Pope Leo XIV released a major teaching warning about AI's harms, including job displacement, accelerated warfare, and environmental exploitation. Anthropic co-founder Chris Olah spoke at the Vatican ceremony, which some experts criticize as potentially creating superficial 'feelgood' messaging rather than substantive critical examination of AI risks.


Russia-aligned crime group Greyvibe extensively uses AI in attacks

Summary: Researchers discovered Greyvibe, a Russia-aligned crime group that uses large language models (LLMs, AI systems trained to generate text) extensively throughout its cyberattacks against Ukrainian targets, including government and military organizations. The group has used generative AI to create spear phishing emails (fraudulent messages pretending to come from trusted sources), malicious scripts, and custom malware programs like PhantomRelay and LegionRelay (remote access trojans, or RATs, which are tools that let attackers control compromised computers). Greyvibe has conducted multiple campaigns since August 2025 using various attack methods, from fake websites to ClickFix-style attacks (tricks that convince users to run malicious commands on their computers).


GHSA-hvhp-v2gc-268q: PraisonAI has an Arbitrary File Write in Python API

Summary: PraisonAI (a framework for building AI agents) versions 4.6.37 and earlier have a vulnerability where hidden metadata in webpages can trick AI agents into writing files to any location on a system. The bug happens because the `write_file` function skips path validation (checking whether a file path is safe) when the workspace parameter is `None`, which is the default in production environments.

Solution: Set a default workspace directory and validate that file paths stay within it. The fix involves: (1) replacing `None` workspace with the current working directory using `workspace = os.getcwd()`, and (2) checking that the absolute path stays within the workspace using `is_path_within_directory(abs_path, workspace)` before writing, returning an error if the path is outside the workspace.


GHSA-vg22-4gmj-prxw: PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

Summary: PraisonAI's example A2A server (a type of agent-to-agent communication system) has a critical vulnerability where unauthenticated remote clients can execute arbitrary Python code. The vulnerability exists because the example exposes the server without authentication, binds it to all network interfaces (0.0.0.0), and registers a 'calculate' tool that uses Python's eval() function (which executes any code passed to it as a string). An attacker can send a specially crafted request that tricks the AI model into calling this unsafe tool, leading to RCE (remote code execution).


GHSA-9cr9-25q5-8prj: PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

Summary: PraisonAI has a security vulnerability where unauthenticated users can read any file on the system through multiple handlers like `workflow.show`, `workflow.validate`, and `deploy.validate`. The problem exists because these file-handling tools don't validate or restrict file paths before reading them, and the dispatcher that calls these tools doesn't enforce security checks on incoming requests.


GHSA-4mr5-g6f9-cfrh: PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summary: PraisonAI's `execute_code()` function has a critical sandbox escape vulnerability that allows attackers to execute arbitrary commands on the host system. The vulnerability exploits four gaps in security validation: the `__self__` attribute (which retrieves the real Python builtins module) is not blocked, the `vars()` function is not restricted, attribute-based function calls bypass checks, and string concatenation bypasses string constant filters. An attacker can use these gaps to access the `__import__` function and run OS commands, completely defeating the sandbox protection.

praisonaiagents@<= 1.6.39 (fixed: 1.6.40)


GHSA-5cxw-77wg-jrf3: PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

Summary: PraisonAI's CLI automatically expands @url mentions in prompts by making HTTP requests to any URL without restrictions, including localhost addresses. This allows an attacker to embed a malicious prompt with `@url:http://localhost:8766/` to make the user's machine fetch local-only HTTP resources (like metadata services or internal APIs) and inject the response into the model's context, creating a local SSRF (server-side request forgery, where a system is tricked into making requests to internal networks) vulnerability.


GHSA-8444-4fhq-fxpq: PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

Summary: PraisonAI version 4.6.33 generates a Flask API server with authentication disabled by default when users run `praisonai deploy --type api`. The server exposes endpoints like `/chat` and `/agents` that accept unauthenticated requests and can execute user-supplied commands with access to API keys stored in the environment.

Solution: Enable authentication by explicitly setting `APIConfig(auth_enabled=True, auth_token=...)` when deploying the API server.


GHSA-78r8-wwqv-r299: PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

Summary: PraisonAI versions up to 4.6.37 contain a critical vulnerability where two functions in `agents_generator.py` use `spec.loader.exec_module` (a method that loads and runs Python code from a file) without any security checks or validation. An attacker can exploit this by providing a malicious Python file path through YAML configuration, either by modifying shared config files, submitting a crafted recipe via GitHub, or using prompt injection (tricking the AI into loading code from a malicious path), resulting in arbitrary code execution (the ability to run any commands on the system).


GHSA-c4m7-2gwp-vw76: ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env

Summary: Ouroboros (an AI tool) has a remote code execution vulnerability where loading a `.env` file (a configuration file with environment variables) from a cloned repository could let an attacker run malicious code on your system. The flaw occurs because Ouroboros reads execution-controlling settings like CLI paths directly from the project directory's `.env` file without checking if they're trustworthy, allowing an attacker to point these paths to their own malicious scripts.

Solution: The vulnerability has been patched in version 0.39.0 via PR #1078. The fix applies a denylist that blocks execution-affecting environment variables from being loaded from the project directory's `.env` file, while still allowing trusted configurations from the user's home directory (`~/.ouroboros/.env`). Users are strongly advised to upgrade to version 0.39.0 or later. If upgrading is not immediately possible, users must carefully inspect any `.env` file inside cloned repositories before running Ouroboros commands to ensure it does not contain unexpected `OUROBOROS_*_CLI_PATH` or `OPENCODE_CLI_PATH` overrides.


CVE-2026-44287: FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/

Summary: FastGPT, an AI Agent building platform, had a vulnerability in its JavaScript sandbox worker that failed to properly block dynamic imports (a way to load code at runtime). An attacker could bypass the security filter using a comment syntax (import/**/("child_process")) that the filter didn't recognize, allowing them to execute arbitrary commands inside the sandbox container.

Solution: This vulnerability is fixed in version 4.15.0-beta1.


CVE-2026-44285: FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allo

Summary: FastGPT, an AI Agent building platform, had a Server-Side Request Forgery (SSRF) vulnerability (a flaw that lets attackers trick a server into making requests to internal systems it shouldn't access) in versions before 4.15.0-beta1. An authenticated attacker could bypass security protections and make unauthorized requests to internal network services by exploiting an incomplete fix in the dataset preview endpoint when using the externalFile data import type.

Solution: Update FastGPT to version 4.15.0-beta1 or later, where this vulnerability is fixed.


CVE-2026-46372: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern, a locally installed tool for interacting with AI text and image generation models, had a vulnerability in versions before 1.18.0 where the /api/search/searxng endpoint allowed authenticated users to trick the server into making requests to internal or hidden services (SSRF, or server-side request forgery, where an attacker manipulates a server into accessing resources it shouldn't). An attacker could use this to access data from services that should only be available internally.

Solution: This vulnerability is fixed in version 1.18.0.


CVE-2026-44652: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models and other AI tools. Versions before 1.18.0 had a vulnerability where the corsProxyMiddleware (a component that handles web requests) would forward user-supplied URLs directly to the fetch function without proper security checks, allowing SSRF (server-side request forgery, where an attacker tricks the server into making requests to unintended targets) attacks.


CVE-2026-44651: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models and related tools. Prior to version 1.18.0, the software had a cross-site scripting vulnerability (XSS, where attackers inject malicious code into web pages), because user-controlled URLs were displayed in error messages without being HTML-escaped (made safe for web display), allowing attackers to inject harmful scripts.

Solution: This vulnerability is fixed in version 1.18.0. Users should update SillyTavern to 1.18.0 or later.


CVE-2026-44650: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models, image generators, and voice tools. Prior to version 1.18.0, a vulnerability allowed attackers to delete the entire user extensions directory without authentication by sending a specially crafted request to the delete endpoint that bypassed filename validation (a security check that prevents malicious file paths).


CVE-2026-44649: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern, a locally installed interface for interacting with AI language models and image generators, had a vulnerability in versions before 1.18.0 where it trusted HTTP headers (Remote-User and X-Authentik-Username) used by single sign-on systems without verifying they came from a trusted source. This meant anyone who could connect directly to SillyTavern could fake these headers to log in as any user, including administrators, without a password, but only if SSO was explicitly enabled in the configuration.

Solution: Update SillyTavern to version 1.18.0 or later, which fixes the vulnerability.


CVE-2026-44648: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models. Before version 1.18.0, it had a security flaw where changing a password or recovering an account didn't log out existing sessions, because all session information was stored in a signed cookie (a small piece of data the browser keeps) rather than on the server, making it impossible to revoke access even after a password change.


ChatGPT share links abused to host fake outage pages to deliver malware

Summary: Attackers are abusing ChatGPT's share feature (which lets users publish rendered content on legitimate OpenAI URLs) to display fake outage pages that trick users into downloading malware disguised as the ChatGPT desktop application. The "LLMShare" campaign uses Google ads to direct people to these malicious shared pages, which appear to come from OpenAI's domain but actually deliver malware-infected downloads through a fake installation portal.


ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

Summary: ChatGPhish is a vulnerability in ChatGPT that allows attackers to embed malicious instructions in web pages, which ChatGPT then processes and renders as clickable phishing links and images inside its trusted interface when users ask it to summarize the page. The vulnerability works because ChatGPT automatically trusts and fetches Markdown links and images from summarized web pages, potentially leaking user information like IP addresses or tricking users into scanning malicious QR codes that bypass desktop security filters.

OpenAI
ChatGPT
Microsoft Copilot
Adversa AI


DNS-AID will make AI agents easier to discover, says Linux Foundation

Summary: The Linux Foundation is promoting DNS-AID, a new standard that allows AI agents (autonomous programs that can act independently) to find and communicate with each other using DNS (the system that translates website names into IP addresses) instead of requiring separate proprietary registries. DNS-AID enables agents and MCP (Model Context Protocol, a standard for how agents exchange information) servers to use the existing internet infrastructure as a vendor-neutral directory, with domain owners creating a special DNS address at _index._agents.{domain} as a discovery point.

Linux Foundation
Infoblox
Deutsche Telekom
Amazon


SpaceX skeptics have added reason for concern after Musk comments diverge from IPO filing

Summary: Elon Musk's social media post about SpaceX's deal with AI company Anthropic contradicts details in SpaceX's IPO (initial public offering, when a private company sells shares to the public) filing, creating confusion for investors. The filing says Anthropic will pay SpaceX $1.25 billion per month through May 2029, but Musk claimed the lease is only 180 days with a 90-day cancellation option, potentially worth far less. This discrepancy matters because it affects how much revenue SpaceX can expect from this new compute capacity (computing power) business.


Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

Summary: An attacker exploited CVE-2026-39987, a critical vulnerability in Marimo (a notebook software) that allows unauthenticated remote code execution, to break into a system and then used an LLM agent (an AI system that can plan and execute tasks autonomously) to steal cloud credentials and database information. The attacker's use of an AI agent made the attack more flexible and adaptive compared to traditional scripted attacks, allowing it to handle unexpected obstacles in real-time.

Solution: The vulnerability CVE-2026-39987 was addressed in Marimo version 0.23.0, released in April 2026. All versions prior to and including 0.20.4 are affected and should be updated to version 0.23.0 or later.


Dan Ives: Anthropic’s growth is 'just the tip of the spear' for AI rally

Summary: Anthropic, an AI company, recently achieved a $965 billion valuation after securing $65 billion in funding, and analyst Dan Ives believes investor interest in AI is far from peaked and will expand to data layer companies (companies that manage and organize data). Ives predicts a major market rally with several large public offerings planned for 2026, though some analysts warn this could signal a market peak similar to the dot-com bubble of the late 1990s.


CVE-2026-45312: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injectio

Summary: RAGFlow, an open-source RAG (retrieval-augmented generation, where an AI pulls in external documents to answer questions) engine, has a Jinja2 template injection vulnerability (a flaw where untrusted data gets processed as code in a templating system) in version 0.24.0 and earlier. Any registered user can exploit this flaw in the prompt generator to run arbitrary OS commands (any commands they want) on the server by creating a Canvas workflow with specific components.


EU seeks to 'intensify' talks with U.S. on advanced cyber AI models, official tells CNBC, amid Mythos concerns

Summary: The European Union wants to increase discussions with the U.S. about advanced AI models that have cyber capabilities, particularly after Anthropic's Mythos model (a very powerful AI system) raised concerns about AI-powered cyberattacks. The EU has not yet received access to preview Mythos, and the White House has opposed expanding access to the model beyond the U.S. due to security concerns, though Anthropic says it is developing safeguards and expects to release Mythos-class models to customers within weeks.

Solution: Anthropic stated that 'Models of Mythos' capability require strong cyber safeguards before they can be generally released' and 'We're making swift progress on developing these safeguards and expect to be able to bring Mythos-class models to all our customers in the coming weeks.' No specific technical safeguards or implementation details are described in the source text.


Boston Children’s uses AI to unlock new diagnoses

Summary: Boston Children's Hospital integrated AI (artificial intelligence) across its entire organization as a core part of clinical and operational work, rather than treating it as a separate experiment. By building an enterprise AI layer (a shared, secure internal AI system used across teams) and redesigning workflows in areas like supply chain and surgical scheduling, the hospital has diagnosed over 40 previously unresolved rare conditions, saved approximately 60,000 hours of staff time, and enabled more than one-third of employees to use AI daily in their work.


How Braintrust turns customer requests into code with Codex

Summary: Braintrust, an AI observability company, uses Codex (OpenAI's code-generation AI model) to quickly turn customer feature requests into working preview branches in minutes, with half the team adopting it within one month. The speed of Codex enables faster feedback loops with customers and allows engineers to test ideas in real time rather than letting requests sit in a backlog. Codex's ability to handle large amounts of text output without slowing down makes it more effective than other models for this workflow.


What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

Summary: Employees are using AI-driven development platforms (vibe coding, where non-programmers build working applications by describing what they want) to quickly build custom applications and connect them to company systems, then publish them on the public internet without involving security teams or implementing basic access controls. A study found over 2,000 such exposed applications containing sensitive data across major companies, sitting unprotected because traditional security tools like EDR (endpoint detection and response, software that monitors what happens on company devices) and DLP (data loss prevention, software that blocks sensitive information from leaving the company) were designed to catch different types of threats and don't detect these cloud-to-cloud connections or applications built in web browsers.


Adobe’s conversational AI agent is a mediocre design intern

Summary: Adobe's Firefly AI Assistant is a conversational AI agent designed to automate tasks within Adobe's design software while keeping users in control of the creative process, unlike traditional AI image generators that work independently. The assistant acts as a multitasking middleman that can operate design apps on behalf of users, though early testing suggests the results are not particularly impressive despite the tool's thoughtful approach to preserving creative control.


GDPR set the tone for regulatory action — and the AI fine pushback to come

Summary: Big tech companies are legally challenging GDPR (General Data Protection Regulation, Europe's data protection law) fines, with nearly 40% of the €7.1 billion in fines announced over eight years either annulled or under appeal. While GDPR successfully established a global 72-hour breach notification standard (the requirement that organizations tell people within three days if their data is stolen), experts note the framework has structural weaknesses that companies exploit in court, and upcoming AI regulations may face similar challenges.


Shadow AI: The Hidden Risk Expanding Across the Enterprise

Summary: Organizations are rapidly adopting unauthorized AI tools without proper security oversight, creating 'shadow AI' (unsanctioned AI use that bypasses governance controls) that exposes sensitive data and creates new attack surfaces. Traditional security tools like firewalls and Zero Trust architecture (a security model that requires verification for every access request) cannot detect AI-specific threats such as prompt injection (tricking an AI by hiding malicious instructions in its input), leaving companies vulnerable to data leaks, compliance failures, and attacks that exploit AI systems.

Solution: CrowdStrike Falcon AI Detection and Response (AIDR) is designed to provide visibility, control, and protection for AI-driven environments and can identify and stop AI-specific threats such as prompt injection.


Strengthening societal resilience with Rosalind Biodefense

Summary: OpenAI is launching Rosalind Biodefense, a program that gives vetted developers access to GPT-Rosalind (a reasoning model trained for life sciences) to build defensive tools against biological threats like pandemics. The company is also expanding trusted access to this model for select U.S. government and allied partners working on public health and biodefense, supported by safety measures like capability assessments, expert red teaming, and security controls to prevent misuse.


Anthropic's run-rate revenue hits $47 billion

Summary: Anthropic, an AI company, announced that its run-rate revenue (an annualized projection based on current monthly earnings) has grown to $47 billion as of May 2026, up from $30 billion in April 2026. This represents extraordinarily rapid growth, with the company increasing its run-rate revenue more than 10 times annually over the past three years, driven by widespread adoption among enterprise customers.


IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise

Summary: IBM and Red Hat announced Project Lightwell, a $5 billion initiative to create an AI-powered 'security coordination layer' that helps enterprises discover and fix vulnerabilities (security weaknesses) in open source software faster. The clearinghouse will deliver validated patches directly into existing software supply chains without requiring upgrades, starting with Java/Maven code and eventually expanding to other programming languages.

Solution: Project Lightwell will backport fixes (apply patches to older versions) to exact dependency versions that have already been tested and deployed, operate on configuration manifests like pom.xml so code remains in controlled enterprise environments, and deliver fixes across dependency chains. Enterprises will receive validated patches spanning Red Hat platforms and independent community code, and can share fixes upstream through a 'secure map' so the wider open-source community can incorporate them.


Anthropic confirms Claude Mythos-class models will roll out to the public

Summary: Anthropic announced plans to release Claude Mythos-class models (powerful AI systems initially restricted due to security concerns) to the general public in the coming weeks. The company stated it has developed strong guardrails (safety measures to prevent misuse) and is making progress on safeguards before the public rollout, though it has not specified an exact timeline.

Anthropic
Claude
Claude Mythos
Claude Opus


A shared playbook for trustworthy third party evaluations

Summary: This document outlines best practices for evaluating frontier AI models (advanced AI systems at the cutting edge of capability) through independent third-party assessments. Modern frontier models are more complex than simple chatbots because they can use tools, maintain information across multiple steps, and operate within larger workflows, so evaluations must account for the "harness" (the surrounding setup and environment) that can significantly affect performance. Evaluation reports should clearly state what claim is being tested (such as whether a model can perform a capability, how robust its safety features are, or how it compares to other models) and provide evidence that the results are valid by addressing potential issues like reward hacking (exploiting shortcuts in scoring), contamination (overperforming due to exposure to similar tasks in training data), and sandbagging (deliberately underperforming when aware of being evaluated).


Claude Opus 4.8: "a modest but tangible improvement"

Summary: Anthropic released Claude Opus 4.8 on May 28, 2026, describing it as a modest incremental improvement over its predecessor. A key advancement is improved honesty: the model is about four times less likely than the previous version to overlook flaws in code it writes, and it achieves lower factual hallucination rates (incorrect answers) primarily by declining to answer questions when uncertain rather than attempting to answer more questions.


llm-anthropic 0.25.1

Summary: The llm-anthropic tool (a command-line program for using Anthropic's Claude AI models) was updated to version 0.25.1, adding support for a new Claude Opus 4.8 model and a fast mode option for users with that feature enabled. The update also changed how the tool handles max_tokens (the maximum number of words the AI can generate in a single response) by making it default to each model's actual maximum instead of a fixed 8,192 limit.


GreyVibe hackers use ChatGPT, Gemini to power cyberattacks

Summary: A threat group called GreyVibe, likely linked to Russia, has been running cyberattacks since August 2025 against Ukrainian and other organizations using AI-generated fake content and custom malware tools. The group uses ChatGPT, Gemini, and other AI tools to create realistic phishing lures (fake websites and emails impersonating legitimate organizations), and likely uses AI to help develop malware like LegionRelay (a remote access trojan, or RAT, which lets attackers control a victim's computer from afar) and FallSpy (Android spyware that steals personal data). Researchers say the attackers show less sophistication than typical state-sponsored groups and may include current or former cybercriminals.


Okta jumps 8%, tops first-quarter results on agentic AI demand

Summary: Okta, a company that provides identity security tools (software that verifies who users are and controls access to systems), reported strong earnings driven by increased demand from companies building agentic AI (AI systems that can independently perform tasks and make decisions). CEO Todd McKinnon emphasized that while agentic AI is boosting interest in Okta's security products, the company is preparing for long-term infrastructure needs rather than chasing short-term profits.


Anthropic tops OpenAI as most valuable AI startup, nears $1 trillion valuation in latest round

Summary: Anthropic, an AI company that makes Claude (a large language model, or LLM, which is software trained on huge amounts of text to generate human-like responses), has become the most valuable AI startup in Silicon Valley after raising $65 billion in funding, pushing its valuation to $965 billion and surpassing competitor OpenAI. The company's valuation jump is driven by strong revenue from Claude Code, an AI coding assistant, which reached a $47 billion annual run rate. Anthropic is now preparing for an initial public offering (IPO, when a private company sells shares to the public to raise money), alongside other major AI companies.

Anthropic
Claude
Claude Code
Claude Opus 4.8
Claude Mythos Preview
OpenAI
SpaceX
SpaceXAI
Mistral


Microsoft 365 Copilot gets a speed boost and cleaner design

Summary: Microsoft is releasing an updated version of Microsoft 365 Copilot (an AI assistant integrated into Microsoft's productivity tools) with a faster loading time and redesigned interface. The new version uses progressive disclosure (showing only relevant tools based on what you ask for, rather than all options at once) and includes an improved prompt box that lets you format text directly.


Anthropic reaches valuation of $965bn, beating OpenAI to become world’s most valuable AI firm

Summary: Anthropic, the company behind Claude (a large language model, or LLM, which is an AI trained on massive amounts of text to generate human-like responses), raised $65 billion in funding and is now valued at $965 billion, making it the world's most valuable AI startup. The company's growth has been driven by widespread adoption of its products by large businesses, especially after releasing powerful coding tools recently.


GHSA-27vp-2mmc-vmh3: nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`

Summary: A sandbox escape vulnerability in nono (a sandboxing tool using Landlock/seccomp, which are Linux security features that restrict what programs can do) allows processes running inside the sandbox to break out by communicating with systemd D-Bus sockets (the inter-process communication system that manages user services). An AI agent or untrusted tool with bash access could exploit this to write files or run commands outside the sandbox with the user's permissions.

Solution: The source states: 'Support for restricting this behavior has since been added and the fix is available in the repository pending release.' However, no specific version number, patch details, or explicit mitigation steps are provided in the text.


CVE-2026-4944: vllm-project/vllm version 0.14.1 contains a vulnerability where the `trust_remote_code=True` parameter is hardcoded in t

Summary: vLLM version 0.14.1 has a security flaw where a setting called `trust_remote_code` is permanently turned on in two model files, even when users try to turn it off. This allows RCE (remote code execution, where attackers can run harmful code on your computer) through malicious models downloaded from HuggingFace, a popular model repository. This is a partial fix attempt for two earlier vulnerabilities that didn't fully solve the problem.


Russia-Linked ‘GreyVibe’ Attackers Use AI to Supercharge Cyberattacks

Summary: GreyVibe is a Russia-linked hacking group that uses AI tools like ChatGPT and Google Gemini across all stages of attacks, from creating fake websites to building custom malware, targeting Ukrainian military and government entities since August 2025. Although the group appears less sophisticated than elite state actors (evidenced by design flaws in their AI-generated malware and casual naming conventions), they leverage AI to operate at a much higher capability level than their technical skill would normally allow. Researchers expect GreyVibe's AI expertise and attack complexity to continue increasing over time.


GHSA-995v-fvrw-c78m: opentelemetry-go's Schema ParseFile leaks file descriptors on each parse

Summary: OpenTelemetry Go's `ParseFile` function has a file descriptor leak (a reference to an open file that is never closed), where each call to parse a schema file leaves the file open in memory. In a long-running application that repeatedly parses schema files, these open files can accumulate until the process runs out of available file descriptors and crashes, causing a denial of service (unavailability).

go.opentelemetry.io/otel/schema/v1.0@<= 0.0.16 (fixed: 0.0.17)

go.opentelemetry.io/otel/schema/v1.1@<= 0.0.16 (fixed: 0.0.17)


Geordie Raises $30 Million for AI Security and Governance Platform

Summary: Geordie, an AI security startup, raised $30 million to expand its platform that helps organizations monitor and control AI agents (AI systems designed to complete tasks independently) deployed across their systems. The platform provides real-time visibility into agent behavior and risks, while its Beam tool uses context engineering (a technique that shapes how AI systems understand and respond to instructions) to constrain agent behavior at scale.


GHSA-5wrp-cwcj-q835: opentelemetry-go's baggage parsing no longer caps raw header length

Summary: A removed safety check in OpenTelemetry Go's baggage parsing (the mechanism for passing contextual data between services) allows attackers to send extremely large or malformed baggage headers that consume excessive CPU and memory while being fully processed and logged, creating a denial-of-service vulnerability. The parser no longer rejects oversized inputs upfront and instead processes every invalid member completely, sending errors to the logging system by default.

go.opentelemetry.io/otel/propagation@= 1.43.0 (fixed: 1.44.0)

go.opentelemetry.io/otel/baggage@= 1.43.0 (fixed: 1.44.0)

go.opentelemetry.io/otel/propagation@= 1.41.0 (fixed: 1.42.0)

go.opentelemetry.io/otel/baggage@= 1.41.0 (fixed: 1.42.0)


Claude’s new model is more ‘honest’ when it messes up

Summary: Anthropic is releasing Claude Opus 4.8, a new AI model designed to be more 'honest' by better recognizing when it doesn't have enough information to answer confidently. The model addresses a common problem where AI systems make unsupported claims (stating things as fact without solid evidence), and early testers found that Opus 4.8 is about 4 times less likely to do this compared to its predecessor.


Agentic AI Isn't Risky; the Way Orgs Deploy It Is

Summary: AI agents (AI systems that can take actions by using external software tools) aren't inherently dangerous, but the risk comes from how they're set up and deployed in organizations. The main concern is the overlap between what the AI can do and what tools it has access to, which can create security vulnerabilities if not managed carefully.


These new iOS 27 renders hint at Siri’s big redesign

Summary: Apple is planning a major redesign of Siri, its voice assistant, for iOS 27, which may feature a ChatGPT-like chat interface. The redesign shows a pill-shaped chat bubble that appears from the Dynamic Island (the notch area on iPhones) with options to choose between Ask, Siri, and ChatGPT, though Apple has not officially confirmed these details and the final design may differ.


Rivian’s software chief thinks you don’t need CarPlay or buttons

Summary: Wassym Bensaid, Rivian's chief software officer, leads both Rivian's internal software development and RV Tech, a joint venture with Volkswagen that builds the operating system and electrical architecture for future electric vehicles from Volkswagen Group brands. Rivian recently launched an AI-powered voice assistant in its R1 vehicles and is preparing to release the R2, the first car built on the new shared architecture developed through the joint venture. The article discusses how Rivian is moving toward AI-powered, agent-like software platforms in cars while reducing reliance on traditional physical controls and Apple CarPlay integration.


The Autonomous Security Platform Built for Attacker Speed

Summary: Attackers are increasingly using AI agents (autonomous software that can act independently) to find and exploit security vulnerabilities much faster than before, with the time from a vulnerability becoming public to actual attacks dropping from 2.3 years in 2018 to about 10 hours in 2026. Organizations continue to suffer breaches due to common problems like misconfigurations (incorrect security settings), unpatched systems (software without the latest security fixes), and identity sprawl (too many user accounts and access permissions), not because they lack awareness of these issues but because fixing them at scale is difficult.


How Endava builds an agentic organization with Codex

Summary: Endava, a software contracting firm, uses Codex (an AI tool for code generation and software development) to transform into an 'agentic organization' where AI agents work alongside teams throughout project lifecycles. The tool enables small teams to deliver large amounts of work faster by codifying senior expertise into guidance for junior developers, compressing weeks of sequential analysis and design work into days, and improving knowledge transfer across the organization.


New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

Summary: A LayerX Security report shows that enterprise AI risk is not spread evenly across workers but is concentrated among a small group of "power users" (employees who use AI much more frequently and deeply than average) and a few dominant platforms like ChatGPT and Copilot. While most employees use AI casually, the top 5% of users generate far more AI conversations and sensitive data exposure, and AI tools are fragmenting across many unmanaged platforms like personal accounts and browser extensions, making it hard for organizations to see and control where their data goes.

ChatGPT
Copilot M365
Gemini
Gemini Enterprise


Raising the Cybersecurity Stakes: Ante up for the Agentic Era

Summary: Organizations are rapidly adopting AI agents (autonomous systems that can execute tasks and make decisions without human intervention), but this creates serious security risks that traditional defenses cannot match. Threat actors are developing agentic attacks (cyberattacks powered by AI that learn and adapt autonomously) that move faster than human security teams can respond, while AI agents themselves lack the judgment to avoid harming their own enterprises. The security industry must evolve from manual fixes to automated, scaled remediation strategies to defend against machine-speed attacks.


The AI governance imperative you can’t afford to ignore

Summary: Many organizations are deploying AI agents (autonomous software systems that make decisions with minimal human oversight) without proper observability (visibility into how they work) or governance processes, creating serious risks. The article highlights that 54% of surveyed organizations cannot fully trace what their agents are doing, and traditional security tools were designed to detect human anomalies rather than rogue agents, making them ineffective for agent monitoring.

Solution: According to the source, organizations should implement: least-privilege scoped tool permissions (limiting what actions agents can perform), policy enforcement layers that review every prompt and tool call, end-to-end tracing (detailed logs that record prompts, tool calls, and downstream actions), and tiered autonomy (giving agents free rein on low-stakes tasks while requiring human approval for consequential decisions). The source also emphasizes that organizations need centralized agent inventory and governance layers, and must collect detailed execution traces to enable transparency and make governance signals actionable.

Google
NVIDIA
Guardrail Technologies
TrueFoundry


This AI stock is surging after an ex-OpenAI employee's fund disclosed a stake. Here's why

Summary: Nebius, a cloud provider that supplies GPUs (graphics processing units, the specialized chips used to train AI models), saw its stock rise after a hedge fund founded by a former OpenAI researcher disclosed a 5.6% ownership stake in the company. Nebius has become a major provider of AI computing infrastructure in Europe, recently securing major partnerships including a $27 billion deal with Meta and a $2 billion investment from Nvidia.

OpenAI
Nebius
Yandex
Meta
Nvidia
Leopold Aschenbrenner
Situational Awareness


Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks

Summary: Google Cloud announced AI Threat Defense, a new security platform that uses AI to automatically detect and stop cyberattacks powered by AI before they cause damage. The platform combines threat intelligence, cloud security scanning, and code repair tools (powered by Google's Gemini AI model) to find weaknesses in software, predict attack paths, and deploy security fixes within minutes rather than days.

Solution: Google describes AI Threat Defense's four-step framework: (1) map environments and make sensitive assets unreachable from the internet; (2) conduct deep-dive code analysis and AI-driven testing to find vulnerabilities in internet-accessible applications and business-critical systems; (3) use AI agents to generate and test patches, with CodeMender automatically creating fixes in developers' tools at build time and tagging libraries across source control and production; and (4) implement machine-speed detection and real-time defense with consistent operational tracking. Google states this approach reduces remediation time to minutes by proactively generating verified fixes before attackers can exploit vulnerabilities.

Google Cloud
Google
Gemini
CodeMender
Mandiant
Wiz
Antigravity


Mistral to explore designing own chips, CEO says, as it ramps up infrastructure build

Summary: Mistral AI, a French startup competing with OpenAI and Anthropic, is exploring the design of its own semiconductor chips to reduce costs and gain more control over its infrastructure, though it currently relies on Nvidia chips. The company is also expanding data centers in France and Sweden, and launching a new enterprise platform called Vibe that uses agentic AI (systems that can autonomously complete tasks like coding and drafting) to help customers with work tasks.

Solution: N/A -- no mitigation discussed in source.

Mistral AI
OpenAI
Anthropic
Amazon
Google
NVIDIA


Survey on Explainable AI for Traditional Machine Learning and Domains

Summary: This is an academic survey article that reviews methods for making traditional machine learning models more explainable and interpretable across different fields. The survey covers techniques that help users understand how machine learning models make decisions, rather than treating them as "black boxes" where the reasoning is hidden. It was published in a peer-reviewed computer science journal in September 2026.


OpenAI’s Frontier Governance Framework

Summary: OpenAI has published a Frontier Governance Framework that describes how its safety and security practices meet new legal requirements from California and the EU, building on its existing Preparedness Framework for managing risks from advanced AI systems. The framework covers risk assessment and mitigation in areas like cyber attacks, dangerous biological/chemical/nuclear risks, manipulation, and loss of control, along with model reporting and incident response. OpenAI says it will update this framework as AI capabilities and regulations evolve.


MUFG aims to become AI-native with OpenAI

Summary: MUFG, one of Japan's largest financial groups, is partnering with OpenAI to become an AI-native company (an organization where AI is integrated into everyday work processes) by rolling out ChatGPT Enterprise to approximately 35,000 employees at Mitsubishi UFJ Bank starting in 2026. The bank chose ChatGPT Enterprise for its broad applicability and enterprise-grade security (security features designed for large organizations), and paired the technology rollout with mandatory employee training, custom workshops, and guidance to help workers understand how to use AI confidently and in compliance with financial regulations.

Solution: OpenAI worked with MUFG on security requirements by offering concrete proposals through product improvements and updates to address security and governance barriers. Additionally, OpenAI supported the rollout through guidance for enterprise use, operational planning, product education, training programs for all employees, custom GPT workshops, and executive study sessions. MUFG also implemented mandatory AI training, requiring employees to complete e-learning before they could use ChatGPT Enterprise.

OpenAI
ChatGPT Enterprise
Mitsubishi UFJ Bank
MUFG


Another IT governance headache: AI-enabled sanction evasion

Summary: Governments and private companies must quickly adapt their security practices as adversaries use AI to evade financial sanctions and finance weapons of mass destruction, with countries like North Korea and Iran now deploying AI models to create fraudulent documents, manage fake company networks, and hide cryptocurrency transactions. AI is making these illegal activities faster, higher quality, and more coordinated, shifting from AI-assisted evasion (using AI for individual tasks like writing emails) to AI-enabled evasion (where AI orchestrates entire deception schemes across multiple systems and channels). Enterprise IT managers face a critical challenge because traditional security boundaries designed for human attackers are being bypassed by automated technologies.

Solution: Dr. Aaron Arnold advises IT managers to protect their organizations by "incorporating defensive AI, the use of behavior-based analytics, using 'circuit breakers' when there is heavy use of API or MCPs (management control planes, systems that oversee how applications connect), updating personnel training, and hardening identity verification, especially for any remote hiring."


Out of the Crypt: The Evolving Cyber Extortion Economy

Summary: Cybercriminals are increasingly using data theft and extortion without encryption (ransomware, a type of malware that locks files until payment is made), shifting from the 90% encryption rates seen in 2021-2024 to just 78% in 2025. This change is driven by better backup systems, stricter regulations like GDPR's 72-hour reporting requirement, and the fact that data exposure alone now costs organizations an average of $5.08 million in fines and lawsuits. Threat actors are particularly targeting mid-sized firms in Professional Services, Healthcare, and Construction, focusing on valuable business data like financial records and bids.


AI models more vulnerable than claimed when faced with iterative attacks

Summary: A Cisco study found that popular AI models from OpenAI, Anthropic, Google, and others are much more vulnerable to attack when faced with multiple prompts in a conversation compared to single-prompt tests. Current safety benchmarks (standardized tests that measure how well models resist harmful requests) only test models with one prompt at a time, but real attackers use iterative techniques like role-playing, breaking tasks into smaller steps, and gradually escalating requests across multiple turns, which bypass safety guardrails far more effectively than official scores suggest.

OpenAI Anthropic Google Meta Microsoft Amazon Mistral

OpenAI
Anthropic
Google
xAI
Amazon
Meta
Mistral
Alibaba
DeepSeek
Zhipu
Microsoft
Claude Opus
GPT-5.4
Gemini 3 Pro
Grok 4.1
Nova Lite
Nova Lite 2
Nova Micro


CVE-2026-45136: claude-code-cache-fix is a cache optimization proxy for Claude Code. From 3.5.0 to before 3.5.2, tools/quota-statusline.

Summary: claude-code-cache-fix is a tool that speeds up Claude Code by caching results. Versions 3.5.0 through 3.5.1 have a code injection vulnerability (CWE-94, inserting malicious code into a program) in a file called tools/quota-statusline.sh, where user input containing certain byte sequences (''') can break out of a Python string and execute arbitrary code on the user's system. This is a high-severity bug that affects local attackers who can control the input to Claude Code.

Solution: This vulnerability is fixed in version 3.5.2. Users should update to claude-code-cache-fix 3.5.2 or later.


v2026.05

Summary: ATLAS v2026.05 introduces a major structural overhaul that separates versioning for content updates from format changes, moving to a new YAML format (v6.0.0) with improved consistency and relationship handling. The update adds support for multiple AI platforms (Predictive, Generative, Agentic, and Enterprise) to techniques and introduces new tooling including Pydantic schemas (strict data validation), SQLAlchemy ORM models (database storage), and a FastAPI REST API (web service for managing the data). Historical ATLAS releases have been migrated and preserved in the new structure.


GHSA-mxfr-6hcw-j9rq: Langroid has Prompt to SQL Injection, Leading to RCE

Summary: Langroid versions before 0.63.0 have a vulnerability where SQLChatAgent (a tool that lets an AI execute SQL queries) can be tricked through prompt injection (hiding malicious instructions in input data) into running dangerous SQL commands. If the database is configured with elevated privileges, an attacker can achieve RCE (remote code execution, where an attacker runs commands on a system they don't own) on the database server, potentially stealing or deleting data.

Solution: Fixed in v0.63.0 by defaulting SQLChatAgent to a SELECT-only sqlglot-parsed statement allowlist (a list of approved SQL operations) with a dialect-aware dangerous-pattern blocklist. Users can restore the previous unrestricted behavior by setting allow_dangerous_operations=True, but only for trusted deployments.


CVE-2026-45046: Gryph provides a security layer for AI coding agents. Prior to 0.7.0, Gryph implements logging levels that determine wha

Summary: Gryph is a security tool that protects AI coding agents (software that writes code with AI help) by controlling what information gets saved to a local database. Before version 0.7.0, Gryph's documentation incorrectly stated that logging (recording activity) was set to a minimal level by default, but it was actually set to standard, causing sensitive file content to be stored in the database even though Gryph was supposed to filter it out.

Solution: This vulnerability is fixed in version 0.7.0.


PacketPatch: Practical generation and deployment of adversarial packets for byte-feature-based encrypted traffic classification

Summary: Researchers have developed PacketPatch, a method for creating adversarial packets (malicious network data designed to fool AI systems) that can deceive byte-feature-based encrypted traffic classification systems (AI models that identify what type of network traffic is flowing through encrypted connections by analyzing raw data patterns). The work demonstrates how attackers could potentially manipulate encrypted network communications to evade detection by these AI-powered security systems.


I think Anthropic and OpenAI have found product-market fit

Summary: OpenAI and Anthropic have shifted their enterprise pricing models away from discounted per-seat plans to usage-based API pricing (paying for every token, a unit of text processed by the AI model), making enterprise costs equivalent to their public API rates. Both companies released new, more expensive AI models in April 2026 and locked enterprise customers into year-long contracts at these higher prices, suggesting they have found a profitable business model with coding agents and enterprise customers willing to pay $200+ per month per user.

OpenAI
Anthropic
ChatGPT
Claude Code
Codex
Claude Cowork
GPT-5.5
GPT-5.4
Opus 4.7
Opus 4.6


Malicious npm Package Stole Files From Claude AI User Directory via GitHub

Summary: Researchers discovered a malicious npm package (a collection of code shared through Node Package Manager, a repository for JavaScript libraries) called "mouse5212-super-formatter" that steals files from Claude AI users' directories. The package disguises itself as a legitimate tool but actually uploads files to a threat actor-controlled GitHub account by authenticating with stolen or hard-coded credentials during installation.


AI tried to bury this politician — now people have actually heard of him

Summary: OpenAI and other AI companies have spent millions through a political action committee to oppose Alex Bores, a New York state assemblyman who wrote AI safety regulations, inadvertently making him more famous and turning him into a prominent figure in the AI regulation debate. The article suggests this corporate spending against Bores has backfired by drawing public attention to him and the issue of who should regulate AI technology.