Heterogeneous Privacy-Preserving Federated Learning for Edge Intelligence

Summary: This research proposes HeteroFed, a framework for federated learning (a distributed machine learning approach where multiple devices train a shared model without sending raw data to a central server) that addresses privacy and performance challenges in edge intelligence scenarios. The framework uses four main techniques: personalized model construction for different devices, dynamic gradient clipping (limiting how much model parameters can change), adaptive noise addition for privacy protection, and improved model aggregation to maintain accuracy despite privacy protections.

Solution: The source proposes HeteroFed as a solution framework containing four specific mechanisms: (1) heterogeneous model construction to enable personalized model training for different smart devices, (2) dynamic gradient clipping to dynamically adjust the magnitude of gradients on models uploaded by devices, (3) adaptive noise addition to customize differential privacy (mathematical techniques that add noise to protect individual data) protection based on device model convergence status, and (4) deviation-aware model aggregation for accurate model aggregation to mitigate noise perturbation effects.


White House moves to give federal agencies access to Anthropic’s Claude Mythos

Summary: The White House is working to authorize a modified version of Anthropic's Claude Mythos model, an AI system that can identify cybersecurity vulnerabilities (weaknesses in software that attackers could exploit), for use by federal agencies. The move comes despite the Department of Defense maintaining a ban on contracting with Anthropic, and raises questions about what safety modifications and controls would be needed before deploying such a powerful AI tool in government.

Solution: According to Neil Shah, VP for research at Counterpoint Research, federal deployment modifications should include: keeping scanned code within isolated and air-gapped environments (systems physically disconnected from networks), ensuring data is not used to retrain the base model, implementing transparency requirements, and requiring human-in-the-loop review (where humans approve actions before they happen) before any bug fix is applied. The memo references that the OMB is 'setting up protections' and working with model providers and the intelligence community to ensure 'appropriate guardrails and safeguards are in place,' though specific technical details of these protections are not provided in the source text.


Nvidia AI chip rivals attract record funding as competition heats up

Summary: Nvidia currently dominates AI chip manufacturing, but startups are raising record funding to compete with alternative designs optimized for AI inference (deploying trained models in real applications). Investors are increasingly backing these new companies, with $8.3 billion raised globally in 2026, because they argue that purpose-built chip architectures can deliver significant energy and cost savings compared to Nvidia's GPUs, which were originally designed for gaming.

Solution: N/A -- no mitigation discussed in source.

Nvidia
Groq
Cerebras Systems
MatX
Ayar Labs
Etched
Axelera
Olix
Euclyd
Optalysys
Fractile
Arago
Vaire Computing
Anthropic
OpenAI
TSMC
Microsoft
Amazon
Globalstar
SpaceX
Uber
Delivery Hero
Prosus
ASML


Mythos and Cybersecurity

Summary: Anthropic created Claude Mythos, an AI model so skilled at finding and exploiting software vulnerabilities (weaknesses in code that attackers can abuse) that the company restricted its access to about 50 large organizations instead of releasing it publicly. While this approach seems responsible, critics argue we lack key information to evaluate whether Mythos truly works as well as claimed, including how often it incorrectly flags safe code as vulnerable, and whether it can find bugs in less common software like medical devices or industrial control systems.

Anthropic
Claude
Claude Mythos
Microsoft
Apple
Amazon Web Services
CrowdStrike


Palo Alto’s Helmut Reisinger sees a cyber sea change ahead as AI advances

Summary: Palo Alto Networks is participating in Project Glasswing, an AI-based initiative led by Anthropic that uses Claude Mythos (an advanced AI model) to discover zero-day vulnerabilities (security flaws unknown to software makers) in operating systems and browsers across the industry. The company is also addressing the cybersecurity gap in AI deployments through recent acquisitions, including Protect AI for securing language models and AI agents, CyberArk for identity security, Chronosphere for managing AI-generated data, and Koi for protecting against risks from autonomous AI agents on user devices.

Palo Alto Networks
Anthropic
Claude
AWS
Apple
Broadcom
Cisco
CrowdStrike
Google
Microsoft
Protect AI
CyberArk
Chronosphere
Koi


Finance leaders warn over Mythos as UK banks prepare to use powerful Anthropic AI tool

Summary: Anthropic is expanding access to Claude, a powerful AI model that was initially restricted to US companies like Amazon, Apple, and Microsoft, to UK banks in the coming week. Senior finance leaders have expressed concerns about the risks of deploying this tool in the financial sector.


Cursor AI Vulnerability Exposed Developer Devices

Summary: A security flaw in Cursor AI could allow attackers to gain shell access (the ability to run commands on a computer) by combining three techniques: indirect prompt injection (hiding malicious instructions in data that the AI reads rather than typing them directly), a sandbox bypass (escaping the restricted environment meant to contain the AI), and Cursor's remote tunnel feature (which allows access to machines over the internet). This chain of attacks could expose developer devices to unauthorized access.


Liz Kendall urges UK public to embrace AI as government makes first £500m fund investment

Summary: The UK government is investing £500 million in British AI startups and urging the country to embrace AI technology, despite recent concerns about cybersecurity risks and job displacement. Technology secretary Liz Kendall acknowledged public worries but argued that the UK must pursue AI opportunities to create jobs and address global challenges, citing concerns raised when US startup Anthropic revealed an AI model with potential cybersecurity vulnerabilities.


GHSA-r7w7-9xr2-qq2r: langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding

Summary: A vulnerability in `langchain-openai` (a library for connecting to OpenAI's API) allowed attackers to bypass SSRF protection (server-side request forgery, where an attacker tricks a server into making requests it shouldn't) through DNS rebinding (changing what a domain name points to between two lookups). The flaw was in the image token counting feature, which validated URLs in one step and then fetched them in another, giving attackers a window to redirect requests to private networks. The actual risk is limited because stolen data cannot be extracted, though attackers could probe whether internal services exist.

Solution: Upgrade to `langchain-openai` version 1.1.14 or later (which requires `langchain-core` >= 1.2.31). The fix replaces the separate validation and fetch steps with an SSRF-safe httpx transport that resolves DNS once, validates all returned IPs against private/internal ranges in a single operation, pins the connection to the validated IP, and disables redirect following.

langchain-openai@< 1.1.14 (fixed: 1.1.14)


GHSA-fv5p-p927-qmxr: LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Summary: A function in LangChain called `HTMLHeaderTextSplitter.split_text_from_url()` had a security flaw where it checked if a URL was safe initially, but then allowed HTTP redirects (automatic follow-ups to different URLs) without rechecking them. This meant an attacker could provide a safe-looking URL that secretly redirects to internal servers or sensitive cloud services, potentially leaking private data. The vulnerability affects versions of langchain-text-splitters before 1.1.2.

Solution: Upgrade to langchain-text-splitters version 1.1.2 or later (which requires langchain-core >= 1.2.31). The fix replaces the unsafe HTTP request method with an SSRF-safe HTTP transport that validates every request, including redirect targets. Additionally, the vulnerable function has been deprecated, and users should instead fetch HTML content themselves and pass it to `split_text()` directly.

langchain-text-splitters@< 1.1.2 (fixed: 1.1.2)


GHSA-47wq-cj9q-wpmp: Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys

Summary: Paperclip, an agent management system, has a critical authorization bypass vulnerability where three API endpoints for managing agent API keys (`POST /api/agents/:id/keys`, `GET /api/agents/:id/keys`, and `DELETE /api/agents/:id/keys/:keyId`) only verify that a user is logged in, but fail to check if they belong to the company that owns the target agent. This allows any authenticated user to create plaintext API tokens for agents in other companies, effectively bypassing the multi-tenant security boundary (the separation that prevents one company's data from being accessed by another).


GHSA-gqqj-85qm-8qhf: Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email

Summary: A Paperclip-managed `codex_local` runtime (a local code execution environment) could access and use a Gmail connector that was only connected in the ChatGPT/OpenAI apps UI, not explicitly set up in Paperclip itself. This trust-boundary failure (a security gap between two systems that should be isolated) allowed the runtime to read emails and send real emails from the user's Gmail account without permission. The vulnerability was made worse because `codex_local` defaults `dangerouslyBypassApprovalsAndSandbox` to `true`, meaning approval checks and execution restrictions are disabled by default.


GHSA-w8hx-hqjv-vjcq: Paperclip: Malicious skills able to exfiltrate and destroy all user data

Summary: Paperclip, an AI agent platform, has a critical vulnerability where malicious skills can execute arbitrary shell commands on the server through an unsanitized `runtimeConfig` parameter, allowing attackers to steal sensitive credentials like API keys, database passwords, and authentication secrets stored in environment variables.


RCE by design: MCP architectural choice haunts AI agent ecosystem

Summary: AI agent tools that use Model Context Protocol (MCP, a method for applications to expose data and tools to AI systems) over STDIO (a local communication method) have unsafe default settings that allow remote code execution, where attackers can run commands on systems they don't own. Anthropic and other framework developers argue that client application developers are responsible for filtering malicious commands, but researchers found that most developers either don't filter these commands or fail to catch all bypass techniques, leaving thousands of public servers and commercial systems vulnerable.

Anthropic
Model Context Protocol (MCP)
LangChain
FastMCP
Microsoft
NVIDIA
Amazon
OpenAI
Google
Cursor
Claude
Gemini


NIST cuts down CVE analysis amid vulnerability overload

Summary: NIST (the National Institute of Standards and Technology, a U.S. agency that maintains a database of known security vulnerabilities) has announced it can no longer analyze all reported security flaws due to overwhelming volume, so it will focus only on the most critical ones. Starting immediately, NIST will prioritize enrichment (adding detailed analysis and severity ratings) for vulnerabilities listed in CISA's Known Exploited Vulnerabilities catalog and those affecting federal government software, while all other CVEs (common vulnerabilities and exposures, a standard way of naming security flaws) will be added to the database but marked as "not scheduled" for analysis. The backlog has grown to over 30,000 unanalyzed vulnerabilities, driven partly by AI tools that can now automatically discover both real and false security flaws at unprecedented rates.

Solution: NIST will focus on CVEs appearing in CISA's Known Exploited Vulnerabilities (KEV) catalog, aiming to "enrich these within one business day of receipt." High-priority CVEs will also include those for software used in the federal government and other critical software. Security leaders should take stock of their technology inventories to determine whether their systems fall under NIST's priority list.


GHSA-f6hc-c5jr-878p: Flowise: resetPassword Authentication Bypass Vulnerability

Summary: Flowise version 3.0.12 contains an authentication bypass vulnerability in its resetPassword function that allows attackers to reset any user's password without authorization. The flaw exists because the resetPassword method fails to verify that a password reset token was actually generated for an account, allowing attackers to submit null or empty string tokens (which are the default values) to bypass authentication and change passwords for users whose accounts were recently created.


GHSA-28g4-38q8-3cwc: Flowise: Cypher Injection in GraphCypherQAChain

Summary: Flowise's GraphCypherQAChain node has a cypher injection vulnerability (CWE-943, where attackers inject malicious database commands into user input without sanitization). An attacker with access to a vulnerable chatflow can execute arbitrary Cypher commands on the connected Neo4j database (a graph database), allowing them to read, modify, or delete data.

flowise-components@<= 3.0.13 (fixed: 3.1.0)


GHSA-x5w6-38gp-mrqh: Flowise: Password Reset Link Sent Over Unsecured HTTP

Summary: Flowise's password reset feature sends reset links over HTTP (an unencrypted protocol) instead of HTTPS (encrypted protocol), allowing attackers on the same network (like public Wi-Fi) to intercept the link through a man-in-the-middle attack (where someone secretly reads data between two parties) and take over user accounts.

Solution: The source states: 'Ensure all sensitive URLs, especially password reset links, are generated and transmitted over secure https:// endpoints only.' It also recommends using HTTPS in all password-related email links and implementing HSTS (HTTP Strict Transport Security, a setting that forces browsers to use encrypted connections).


GHSA-6f7g-v4pp-r667: Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow in Flowise

Summary: Flowise has a security flaw where unauthenticated users can obtain OAuth 2.0 access tokens (credentials that grant access to third-party services like Gmail) from public chatflows. An attacker can first retrieve internal workflow data including credential identifiers from a public endpoint, then use those identifiers to refresh OAuth tokens without any authentication checks, potentially gaining unauthorized access to connected services.


GHSA-6r77-hqx7-7vw8: Flowise:  APIChain Prompt Injection SSRF in GET/POST API Chains

Summary: FlowiseAI versions 2.2.1 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability, where an attacker can inject malicious prompt templates into the API Chain components to trick the system into making HTTP requests to internal or external services it shouldn't access. Since the system trusts the LLM (language model) to generate URLs based on API documentation without validating them, attackers can provide fake documentation pointing to sensitive internal services, potentially exposing internal networks and data.


GHSA-2x8m-83vc-6wv4: Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)

Summary: Flowise contains security flaws in its SSRF (server-side request forgery, where an attacker tricks a server into making requests to internal systems) protection code. Two main issues exist: by default, the deny list is not enforced if an environment variable is not set, allowing requests to localhost, and attackers can use DNS rebinding (TOCTOU, time-of-check time-of-use, where a domain's IP address changes between when the server checks it and when it connects) to bypass IP validation checks.


GHSA-xhmj-rg95-44hv: Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox

Summary: Flowise has a security flaw in its Custom Function feature where SSRF (Server-Side Request Forgery, a type of attack where a server is tricked into making unwanted network requests) protection only covers two libraries (axios and node-fetch) but leaves built-in Node.js modules like http, https, and net unprotected. This allows authenticated users to bypass the security controls and access internal network resources, such as cloud provider metadata services that contain sensitive credentials.


GHSA-rh7v-6w34-w2rr: Flowise: File Upload Validation Bypass in createAttachment

Summary: FlowiseAI has a file upload validation bypass vulnerability in its Chatflow configuration where attackers can modify settings to allow the application/javascript MIME type (a file format label), enabling them to upload malicious .js (JavaScript) files even though the interface normally blocks them. These uploaded files can become persistent web shells (programs that let attackers run commands on the server), potentially leading to RCE (remote code execution, where an attacker can run arbitrary commands on the system).


GHSA-cvrr-qhgw-2mm6: Flowise: Parameter Override Bypass Remote Command Execution

Summary: Flowise has a critical unauthenticated remote command execution (RCE) vulnerability that allows attackers to run arbitrary system commands with root privileges. The flaw exists in a validation check that uses `.includes()` instead of `.startsWith()` to filter the `FILE-STORAGE::` keyword, which an attacker can bypass by embedding it anywhere in a string (like in a comment). When bypassed, this allows the attacker to inject malicious values into the `mcpServerConfig` parameter and use `NODE_OPTIONS` environment variable injection to execute arbitrary code, but only if the chatflow has API Override enabled, is publicly shared, and contains a Custom MCP tool node.


GHSA-4jpm-cgx2-8h37: Flowise: Sensitive Data Leak in public-chatbotConfig

Summary: A Flowise endpoint called /api/v1/public-chatbotConfig/:id exposes sensitive information like API keys and authentication headers without requiring a password or login. An attacker who knows only a chatflow UUID (a unique identifier for a workflow) can retrieve stored credentials and internal URLs by sending a simple web request to this endpoint.


GHSA-48m6-ch88-55mj: Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

Summary: Flowise Cloud has a mass assignment vulnerability (JSON injection, where attackers can hide malicious data in JSON input) in its account registration endpoint that allows unauthenticated attackers to inject server-managed fields like organization IDs and role assignments during account creation. This breaks trust boundaries in the multi-tenant environment (a system serving multiple separate organizations) by letting attackers associate their new accounts with existing organizations they don't own, gaining unauthorized access and escalated privileges.


GHSA-9wc7-mj3f-74xv: Flowise: Code Injection in CSVAgent leads to Authenticated RCE

Summary: Flowise's CSVAgent has a code injection vulnerability where user-provided custom Pandas CSV read code is inserted directly into executable Python code without sanitization, allowing an authenticated attacker to execute arbitrary commands on the server (RCE, or remote code execution). An attacker can create a malicious chat flow and trigger it via API requests to run commands like `os.system()` through the `pyodide` Python runtime.


GHSA-f228-chmx-v6j6: Flowise: Remote code execution vulnerability in AirtableAgent.ts caused by lack of input verification when using `Pandas`.

Summary: Flowise's AirtableAgent has a remote code execution (RCE, where an attacker can run commands on a system they don't own) vulnerability because user input is inserted directly into Python code without sanitization. An attacker can use prompt injection (tricking an AI by hiding instructions in its input) to bypass the intended behavior and execute arbitrary code when the system processes Pandas (a Python library for working with data) operations.


llm-anthropic 0.25

Summary: Release llm-anthropic 0.25 adds a new Claude model (claude-opus-4.7) with advanced thinking capabilities, introduces options to display and adapt AI reasoning output, raises the default token limits (the maximum length of AI-generated responses) for all models, and removes outdated code that was no longer needed for older models.


Google will let users connect their photos to the Gemini chatbot and Nano Banana

Summary: Google is connecting its Gemini chatbot to users' personal Google Photos library through a feature called Nano Banana (an image generation tool, meaning software that creates pictures from text descriptions). Users who opt in to Personal Intelligence (a feature that links Google apps together for customized responses) can ask Gemini to generate images based on their private photos, like "create a claymation image of me and my family," without manually uploading photos each time.

Google
Gemini
Nano Banana
Personal Intelligence


Qwen3.6-35B-A3B on my laptop drew me a better pelican than Claude Opus 4.7

Summary: A blogger compared two newly released AI models (Qwen3.6-35B-A3B and Claude Opus 4.7) by asking them to generate SVG images (scalable vector graphics, a format for drawing pictures with code) of pelicans and flamingos performing tasks like riding bicycles. The Qwen model, running on a laptop as a quantized version (a compressed version that uses less computer memory), produced better images than Anthropic's Claude Opus 4.7, though the blogger notes this creative task may not reflect which model is actually more useful for real-world problems.

Alibaba Qwen
Anthropic Claude
Google Gemini
Unsloth
LM Studio


OpenAI’s big Codex update is a direct shot at Anthropic’s Claude Code

Summary: OpenAI has updated Codex, its agentic coding system (an AI that can independently perform multi-step coding tasks), to control desktop applications, generate images, and remember previous interactions. The new features let Codex operate apps in the background without interrupting user work and allow multiple agents (separate AI instances) to work simultaneously, which OpenAI says is useful for testing frontend changes and working with applications that don't have APIs (standardized ways for software to communicate).


Google’s AI Mode update lets you open links without leaving the page

Summary: Google is updating AI Mode (a chatbot-like search feature built into Chrome) with a new feature that opens source links in a side-by-side view instead of in a new tab, letting you compare the website content with your chat conversation at the same time. This upgrade makes it easier to ask follow-up questions about information you're reading without switching between multiple windows.


Hackers exploit Marimo flaw to deploy NKAbuse malware from Hugging Face

Summary: Hackers are exploiting a critical vulnerability in Marimo (a Python notebook tool) called CVE-2026-39987 (remote code execution, where attackers can run commands on systems they don't own) to deploy NKAbuse malware from Hugging Face Spaces (a platform for sharing AI applications). The attacks began within 10 hours of technical details becoming public, with attackers using fake application names to trick users into downloading malware that steals credentials and allows remote control of infected systems.

Solution: Users should upgrade to Marimo version 0.23.0 or later immediately. If upgrading is not possible, block external access to the '/terminal/ws' endpoint using a firewall, or block it entirely.

Marimo
Hugging Face
Hugging Face Spaces
NKAbuse
NKN
Kubernetes


Anthropic rolls out Claude Opus 4.7, an AI model that is less risky than Mythos

Summary: Anthropic released Claude Opus 4.7, a new AI model that excels at software engineering and following instructions but has intentionally reduced capabilities in cybersecurity tasks compared to its more powerful Claude Mythos Preview model. The company implemented safeguards that automatically detect and block requests for prohibited or high-risk cybersecurity uses, and is using this release to learn how to safely deploy more powerful models in the future.

Solution: Anthropic released Claude Opus 4.7 with safeguards that automatically detect and block requests indicating prohibited or high-risk cybersecurity uses. The company also experimented with efforts to 'differentially reduce' Claude Opus 4.7's cyber capabilities during training, and encourages security professionals interested in legitimate cybersecurity purposes to apply through a formal verification program.

Anthropic
Claude Opus 4.7
Claude Mythos Preview
Microsoft
Google
Amazon


Gemini can now pull from Google Photos to generate personalized images

Summary: Google's Gemini AI can now use your personal data from Google Photos through its Personal Intelligence feature to generate customized images based on your photos and preferences. When you give prompts like "Design my dream house," Gemini uses its Nano Banana 2 image model (a machine learning system for creating pictures) along with your photo labels and personal context to create images that match your tastes and lifestyle.


Anthropic releases a new Opus model amid Mythos Preview buzz

Summary: Anthropic released Claude Opus 4.7, its most powerful generally available model, which improves performance on complex software engineering tasks, image analysis, and instruction-following compared to the previous version. This release follows Anthropic's announcement of Mythos Preview, a more powerful cybersecurity-focused model designed for security-related tasks.

Anthropic
Claude Opus 4.7
Claude Opus 4.6
Mythos Preview


Google expands Gemini AI use to fight malicious ads on its platform

Summary: Google is using its Gemini AI model to detect and block malicious ads on its platforms, removing 8.3 billion ads in 2025 as scammers use cloaking techniques (hiding the true destination of a link) and AI-generated content to create deceptive advertising at scale. Gemini analyzes billions of signals like advertiser behavior and campaign patterns to identify harmful ads in real time, including those impersonating legitimate brands to distribute malware, steal cryptocurrency, or redirect users to phishing sites (websites designed to trick users into revealing passwords or personal information). Google reports this approach has reduced incorrect advertiser suspensions by 80% and plans to expand Gemini's use across more ad formats.

Solution: Google says it is relying on Gemini AI-powered systems to automate the discovery and blocking of malicious ads before they are shown to users. The company reports that by the end of last year, the majority of Responsive Search Ads created in Google Ads were reviewed instantly and harmful content was blocked at submission, with plans to bring this capability to more ad formats in the current year. Google will continue expanding Gemini's use across additional ad formats and enforcement systems, aiming to block malicious campaigns at submission time.


OpenAI Widens Access to Cybersecurity Model After Anthropic’s Mythos Reveal

Summary: OpenAI has expanded access to GPT-5.4-Cyber, a specialized AI model trained specifically for cybersecurity defense work, making it easier for legitimate security professionals to use it. This move follows Anthropic's release of their own cybersecurity model called Mythos.


New ATHR vishing platform uses AI voice agents for automated attacks

Summary: ATHR is a cybercrime platform that automates vishing attacks (voice phishing, where attackers trick people into revealing passwords over the phone) using AI voice agents and human operators to steal login credentials from services like Google and Microsoft. The platform handles the entire attack chain, from sending fake security alert emails to using AI-driven phone calls that impersonate support staff and extract verification codes. According to researchers, ATHR makes vishing attacks much easier to launch because it requires less technical skill and manual work than traditional attacks.

Solution: Detection is possible by checking communication behavioral patterns between a sender and a recipient to identify if similar lures containing a phone number reached the organization within a short time frame. Abnormal researchers say that modeling normal communication behavior across the organization can help AI-powered detection flag anomalies before targets make a call.

Google Microsoft Coinbase Binance Gemini Crypto.com Yahoo AOL


Defending Your Enterprise When AI Models Can Find Vulnerabilities Faster Than Ever

Summary: AI models are becoming increasingly capable at finding vulnerabilities and generating exploits, which lowers the barrier for attackers and compresses the time between vulnerability discovery and widespread attacks. As threat actors weaponize these AI capabilities, enterprise defenders face a critical challenge: they must harden software rapidly and defend systems that haven't yet been patched, because traditional human-speed security processes will not be able to keep pace with machine-speed threats. The source notes that defenders need to strengthen security playbooks, reduce exposure, and incorporate AI into their security programs.


Ronan Farrow on Sam Altman’s ‘unconstrained’ relationship with the truth

Summary: Investigative reporter Ronan Farrow co-authored a 17,000-word article in The New Yorker examining OpenAI CEO Sam Altman's trustworthiness and his track record of misrepresenting facts to people around him. The reporting documents Altman's role in transforming OpenAI from a nonprofit research lab into a nearly trillion-dollar company, as well as the 2023 incident when the board fired him over alleged lying before quickly rehiring him.


RIRplay: Generation of a Replay Stereo Corpus for Voice Biometrics Anti-Spoofing

Summary: Voice biometric systems (technology that identifies people by their voice) are vulnerable to replay attacks (where an attacker plays back a recorded voice to fool the system), but there hasn't been enough realistic training data to build good defenses. This research created RIRplay, a simulated database that realistically mimics how replay attacks actually happen across different acoustic environments, which improved detection performance significantly when tested on real-world voice spoofing challenges.


Practical Private Set Operation via Secret Sharing for Lightweight Clients

Summary: This research proposes a new method for private set operations (PSO, techniques that let organizations securely compare or combine datasets without revealing private information) that reduces the computational burden on client devices. The approach uses secret sharing (splitting data into pieces so no single party can see the whole picture) to allow servers to do most of the work while clients can stay offline, making it practical for large-scale collaborative research across institutions like hospitals.


DiffMI: Breaking Face Recognition Privacy via Diffusion-Driven Training-Free Model Inversion

Summary: Researchers developed DiffMI, a new attack that can recover people's facial identities from face recognition systems by reversing the embeddings (compressed numerical representations of faces). Unlike previous attacks, DiffMI doesn't require expensive training on specific targets and can work against unseen faces and new recognition models, achieving success rates between 84-93% against systems designed to resist such attacks.


Authentication With Passports for Deep RF Sensing Model Protection

Summary:
```json
{
  "summary": "This paper introduces AuthRF, a security system that protects RF sensing models (AI systems that interpret radio frequency signals from WiFi or radar) by using user-specific digital "passports" embedded in the signal processing pipeline. Valid passports allow the model to work correctly, while invalid or fake ones distort the signal and degrade performance, preventing unauthorized use. The approach is designed to be proactive and work during runtime, addressing limitation

Solution: N/A — no mitigation discussed in source.


Defending Against Patch-Based and Texture-Based Adversarial Attacks With Spectral Decomposition

Summary: Adversarial examples (inputs crafted to fool AI systems) are a serious security risk for deep neural networks (AI systems with many layers), especially in physical-world attacks like fooling object detection in surveillance cameras. This research proposes Adversarial Spectrum Defense (ASD), a defense method that uses spectral decomposition (breaking down data into different frequency components) via Discrete Wavelet Transform (a mathematical technique to analyze patterns at multiple scales) to detect and defend against patch-based and texture-based adversarial attacks, and shows it achieves better protection when combined with Adversarial Training (training the AI on attack examples to make it more robust).

Solution: The source proposes Adversarial Spectrum Defense (ASD), which 'leverages spectral decomposition via Discrete Wavelet Transform (DWT) to analyze adversarial patterns across multiple frequency scales' and 'by integrating this spectral analysis with the off-the-shelf Adversarial Training (AT) model, ASD provides a comprehensive defense strategy against both patch-based and texture-based adversarial attacks.' The paper reports that 'ASD+AT achieved state-of-the-art (SOTA) performance against various attacks, outperforming the APs of previous defense methods by 21.73%'.


Canva’s AI 2.0 update goes all in on prompt-powered design tools

Summary: Canva released AI 2.0, a major update that adds prompt-based editing capabilities, allowing users to describe what they want and have the AI assistant create or modify designs accordingly. The update includes a new orchestration layer (a system that coordinates multiple AI models) that lets users access Canva's full toolkit through a single conversational interface instead of separate tools.


Making AI operational in constrained public sector environments

Summary: Public sector organizations face unique challenges deploying AI due to strict data security requirements, limited internet connectivity, and lack of GPU (graphics processing units, specialized computer hardware for running complex AI models) infrastructure. Small language models (SLMs, specialized AI models using billions rather than hundreds of billions of parameters) offer a practical solution because they can run locally on government systems, use less computing power than large language models (LLMs, the biggest AI systems like ChatGPT), and keep sensitive data under government control.

Solution: Use small language models (SLMs) instead of large language models (LLMs) in public sector environments. SLMs can be housed locally for greater security and control, are less computationally demanding, and allow sensitive information to be used effectively while avoiding operational complexity. Implement methods such as smart retrieval, vector search, and verifiable source grounding to build AI systems that meet public sector needs. Store data securely outside the model and access it only when queried, using carefully engineered prompts to retrieve only the most relevant information.


Treating enterprise AI as an operating layer

Summary: This article discusses how enterprise organizations can gain competitive advantage in AI by treating it as an operating layer (the combination of software, data capture, feedback loops, and governance that connects AI models to actual business operations) rather than just using AI as an on-demand service. The key difference is that an operating layer allows intelligence to accumulate and improve over time through organizational feedback, whereas calling an API (application programming interface, a way to request services from software) for each task treats AI as stateless and interchangeable. Incumbent organizations have a structural advantage because they already possess proprietary operational data, domain expert workers, and accumulated knowledge that startups must build from scratch.


Why having “humans in the loop” in an AI war is an illusion

Summary: AI systems are now actively controlling weapons in warfare, but the assumption that human oversight provides adequate safeguards is flawed because humans cannot understand how AI systems make decisions (they are "black boxes" where even creators cannot fully interpret their reasoning). The real danger is that humans may approve AI actions without knowing the system's hidden reasoning, creating an "intention gap" between what operators think the AI will do and what it actually does.

Solution: The science of AI must comprise both building highly capable AI technology and understanding how this technology works. Huge advances have been made in developing and building more capable models, but the source text cuts off before completing this section on solutions.


[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment

Summary: In 2024, 68% of cloud breaches were caused by compromised service accounts and forgotten API keys, which are unmanaged non-human identities (automated credentials like tokens and API keys) that attackers can exploit. Organizations have 40 to 50 automated credentials per employee, most remaining active and unmonitored after projects end or employees leave, creating security risks that traditional identity management systems cannot address. The webinar promises to teach how to discover, right-size permissions for, and automatically revoke these 'ghost identities' using a discovery scan, permission framework, lifecycle policy, and cleanup checklist.

Solution: The source describes a framework that includes: (1) running a full discovery scan of every non-human identity in your environment, (2) implementing a framework for right-sizing permissions across service accounts and AI integrations, (3) setting up an automated lifecycle policy so dead credentials get revoked before attackers find them, and (4) using a ready-to-use Identity Cleanup Checklist provided during the webinar session.


Behind the Mythos hype, Glasswing has just one confirmed CVE

Summary: Anthropic's Mythos AI model, released through Project Glasswing (a controlled access program for vetted organizations), has generated significant hype for its offensive security capabilities, but VulnCheck's analysis found only one CVE (common vulnerabilities and exposures, a list of known security flaws) explicitly attributed to the project itself. Despite the limited number of publicly confirmed discoveries, security experts view Mythos as significant because it achieved a 72% exploit success rate (the ability to successfully turn vulnerabilities into working attacks), suggesting that advanced AI exploit development is no longer a specialized skill and this capability will likely spread to other AI models and organizations without the same safety protections.

Anthropic
OpenAI
Claude
Mythos
Project Glasswing


Insurance carriers quietly back away from covering AI outputs

Summary: Major insurance companies are withdrawing or limiting coverage for AI-related mistakes and damages because they cannot understand how AI systems reach their conclusions, a problem called lack of explainability (the inability to see the reasoning behind an AI's output). Some insurers are declining to cover AI errors entirely, while others are significantly raising prices, creating a situation where companies using AI may struggle to find affordable insurance for AI-related risks.


Codex for (almost) everything

Summary: Codex, an AI tool used by over 3 million developers weekly, has received a major update that lets it operate computers directly by seeing, clicking, and typing, generate images, remember user preferences, and integrate with 90+ developer tools and apps. The update adds features like background computer use (where the AI can work on your Mac without interfering with your own work), an in-app browser for web development, image generation, and the ability to schedule long-term tasks across multiple days or weeks. These improvements are designed to help developers move faster through all stages of software development, from writing code to reviewing changes, all within one workspace.

OpenAI
Codex
ChatGPT
gpt-image-1.5
Atlassian Rovo
CircleCI
CodeRabbit
GitLab
Microsoft Suite
Neon
Databricks
Remotion
Render
Superpowers


Human Trust of AI Agents

Summary: Researchers studied how humans behave when playing strategic games (like a guessing game where players try to guess 2/3 of the average guess) against AI language models (LLMs) versus other humans. They found that people choose much lower numbers when playing against LLMs, especially people who are good at strategic thinking, because they believe LLMs will reason carefully and cooperate fairly rather than try to win.


Anthropic unveils plans for major UK expansion after OpenAI announces first permanent London office

Summary: Anthropic, the company behind the Claude AI chatbot, announced plans to expand its London office to accommodate 800 people, following a similar move by competitor OpenAI. The expansion reflects growing interest in establishing AI research and development hubs in the UK, which has strong AI talent and institutions focused on AI safety.

Anthropic
Claude
OpenAI
Google DeepMind
Meta
Synthesia
Wayve


Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments

Summary: Researchers discovered a vulnerability called 'Comment and Control' that affects multiple AI coding assistants, including Claude Code, Gemini CLI, and GitHub Copilot Agents. The attack works by hiding malicious instructions in code comments, which the AI systems then follow as if they were legitimate user requests. This is a type of prompt injection (tricking an AI by hiding instructions in its input) that specifically targets AI tools designed to help developers write code.

Anthropic Claude
Google Gemini
GitHub Copilot
Claude Code


Frontier AI for Defenders: CrowdStrike and OpenAI TAC

Summary: CrowdStrike has been selected for OpenAI's Trusted Access for Cyber (TAC) program, which gives verified security defenders controlled access to GPT-5.4-Cyber, a frontier model (a cutting-edge AI system designed for a specific task) built for defensive cybersecurity. As AI agents become more common in enterprise systems, CrowdStrike addresses security challenges by monitoring AI execution at endpoints (the individual computers and devices where AI actually runs), tracking over 1,800 AI applications to ensure governance and detect suspicious actions.


GHSA-rr7j-v2q5-chgv: LangSmith SDK: Streaming token events bypass output redaction

Summary: The LangSmith SDK (a tool for monitoring AI applications) has a security flaw where its output redaction feature (hideOutputs in JavaScript, hide_outputs in Python) doesn't work for streaming token events. When an LLM produces streamed output, each piece of data is recorded as a new_token event with unredacted content that bypasses the redaction process entirely, potentially leaking sensitive information to LangSmith storage.


Introducing GPT-Rosalind for life sciences research

Summary: OpenAI has released GPT-Rosalind, a specialized AI model designed to help life sciences researchers work faster across biology, drug discovery, and medicine research. The model is built to assist with complex research workflows like literature review, hypothesis generation, and experimental planning by helping scientists connect to scientific tools and databases. It is available as a research preview through ChatGPT, Codex, and an API for qualified customers.

OpenAI
ChatGPT
Codex
GPT-Rosalind
Amgen
Moderna
Allen Institute
Thermo Fisher Scientific


Accelerating the cyber defense ecosystem that protects us all

Summary: OpenAI has launched Trusted Access for Cyber, a program that gives advanced AI cybersecurity tools to defensive security teams while controlling access based on trust and validation. The program provides $10 million in API credits to help defenders of all sizes, from small open-source teams to major enterprises, use frontier AI models (advanced, cutting-edge AI systems) to protect digital infrastructure.

U.S. Center for AI Standards and Innovation (CAISI)


The public sours on AI and data centers as Anthropic, OpenAI look to IPO and tech keeps spending

Summary: Public opinion on AI is declining in the United States, with 57% of voters believing AI's risks outweigh its benefits, creating challenges for companies like OpenAI and Anthropic as they prepare to go public. Tech companies are investing heavily in data centers (the large computing facilities that power AI systems) to build more powerful AI models, but these projects face growing opposition due to energy concerns, with $156 billion in data center projects blocked or delayed in 2025 and Maine passing the first state-wide data center ban. This negative sentiment and regulatory pushback could impact the valuations and public offerings of major AI companies.

OpenAI Anthropic Google Microsoft Amazon Meta

OpenAI Anthropic Amazon Google Microsoft Meta xAI


Critical Nginx UI auth bypass flaw now actively exploited in the wild

Summary: A critical vulnerability in Nginx UI (CVE-2026-33032) leaves an unprotected endpoint that allows attackers to invoke privileged actions without logging in, enabling complete takeover of the web server by modifying configuration files. The flaw is being actively exploited in the wild, with over 2,600 publicly exposed instances at risk. Nginx UI is a popular web-based management interface for the Nginx web server, used by many organizations to control their servers.

Solution: Nginx released a fix in version 2.3.4 on March 15. The latest secure version is 2.3.6, released the week after the source was published. System administrators are recommended to apply these security updates as soon as possible.


Critical nginx UI tool vulnerability opens web servers to full compromise

Summary: A critical vulnerability in nginx UI, a dashboard tool for managing nginx web servers, allows attackers to bypass security by accessing an unprotected endpoint called /mcp_message. This endpoint was added to support MCP (Model Context Protocol, a system that lets web servers communicate with AI models), but it lacks authentication, letting anyone on the network inject malicious configurations and completely take over the server.

Solution: Update to version 2.3.4, released March 15. For systems that cannot patch immediately, disable MCP or restrict access by using IP whitelisting to allow only trusted hosts, and review access logs for suspicious configuration changes.


Google launches a Gemini AI app on Mac

Summary: Google is releasing a new Gemini app for Mac that lets you quickly access the AI assistant using a keyboard shortcut (Option + Space) to open a floating chat window without leaving your current app. The app can read information from your screen to help answer questions, but requires you to grant permission to access your system's information first.


Anthropic products are operational after brief outage, status page says

Summary: Anthropic experienced a brief outage on Wednesday affecting its Claude chatbot, API (application programming interface, the connection between software services), and Claude Code assistant, with elevated error rates beginning around 10:53 a.m. ET. By 1:50 p.m. ET, all systems were restored and operational, with login success rates stabilizing by 12:30 p.m. ET.


Starbucks launches beta app in ChatGPT to fuel new drink discovery

Summary: Starbucks has launched a beta app within ChatGPT (an AI chatbot) that helps customers discover new drinks by describing how they feel rather than browsing a menu. Customers can customize orders and select a location within ChatGPT, but must complete their purchase through the Starbucks app or website to maintain engagement with the company's loyalty program. This move is part of Starbucks' broader strategy to attract customers back to its cafes and appeal to younger consumers who prefer unique beverages.


Gemini 3.1 Flash TTS

Summary: Google released Gemini 3.1 Flash TTS, a new text-to-speech model that generates audio from text using prompts sent through the standard Gemini API. Unlike typical AI models, this one accepts detailed creative instructions (called prompts) to control how the audio sounds, including vocal style, pace, accent, and emotional tone, allowing users to create speech with specific characteristics like a particular regional accent or energetic delivery.


Gemini 3.1 Flash TTS

Summary: This item is a brief announcement about Gemini 3.1 Flash TTS (a text-to-speech feature for Google's Gemini AI model) posted on April 15, 2026. The content provided is primarily metadata and sponsorship information rather than substantive technical details about the feature or any security issue.


CVE-2026-30617: LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execut

Summary: LangChain-ChatChat version 0.3.1 has a remote code execution vulnerability (RCE, where an attacker can run commands on a system they don't own) in how it handles MCP STDIO servers (a communication protocol for server connections). An attacker can access the exposed management interface, set up a malicious MCP server with commands of their choice, and then trigger those commands to run when the service processes agent requests.


CVE-2026-30615: A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim

Summary: Windsurf version 1.9544.26 has a prompt injection vulnerability (a technique where attackers hide malicious instructions in input to trick an AI system) that allows remote attackers to execute arbitrary commands on a victim's computer. When Windsurf processes attacker-controlled HTML content, it can be tricked into automatically registering a malicious MCP STDIO server (a communication interface for running code), giving attackers the ability to run commands without the user's knowledge.


Gemini 3.1 Flash TTS: the next generation of expressive AI speech

Summary: Google has released Gemini 3.1 Flash TTS, a new text-to-speech model (software that converts written text into spoken audio) that produces more natural-sounding speech with better control over how the AI speaks. Developers can now use audio tags (special commands embedded in text) to adjust vocal style, pace, and delivery across over 70 languages, and all generated audio is watermarked with SynthID (a hidden marker that identifies AI-generated content) to help prevent misinformation.

Google
Gemini 3.1 Flash TTS
Google AI Studio
Vertex AI
Google Vids


ChatGPT’s latest stylistic quirk is sinister, infuriating – and absolutely everywhere | Stuart Heritage

Summary: A writer notices that ChatGPT and other AI systems are producing content using the rhetorical pattern "it's not X, it's Y" so frequently that this phrasing has become ubiquitous online, appearing in social media posts, fitness classes, and TV shows. The author compares this experience to obsessively noticing a specific detail until it dominates their perception, making the repetitive AI-influenced writing style impossible to ignore.


Capsule Security Emerges From Stealth With $7 Million in Funding

Summary: Capsule Security, an Israeli startup, has raised $7 million in funding to develop technology that secures AI agents (AI systems designed to perform tasks independently) by continuously monitoring their behavior at runtime (while the AI is actually running) to prevent unsafe or harmful actions.


‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks

Summary: Researchers have identified a flaw in Anthropic's Model Context Protocol (MCP, a system that allows AI models to interact with external tools and data) that permits unsanitized commands (user input that hasn't been cleaned or verified) to run without warning, potentially giving attackers complete control over systems using this AI technology. This vulnerability could be exploited across many widely-used AI environments as part of a supply chain attack (where attackers compromise a tool or service used by many organizations to gain access to their systems).


Adobe embraces conversational AI editing, marking a ‘fundamental shift’ in creative work

Summary: Adobe is launching a Firefly AI Assistant that lets creators edit their work by describing changes in plain language rather than manually using specific tools in Creative Cloud (Adobe's suite of creative software). Adobe says this conversational AI approach represents a major shift in how creative work is done by making editing easier and more accessible to people without advanced skills.


OpenAI pulls back from Stargate Norway data center deal as Microsoft takes over

Summary: OpenAI has withdrawn from a deal to rent computing capacity directly from a Norwegian data center facility called Stargate Norway, with Microsoft taking over the capacity instead. OpenAI will now rent computing power from Microsoft instead, which the company says makes more financial sense since it already has a $250 billion contract with Microsoft's cloud service Azure (a cloud computing platform). This pullback is part of OpenAI's broader shift to manage spending expectations as it prepares for a potential public stock offering.


Copilot and Agentforce fall to form-based prompt injection tricks

Summary: Security researchers discovered prompt injection vulnerabilities (attacks where malicious instructions are hidden in user input to trick an AI into executing them) in Microsoft Copilot Studio and Salesforce Agentforce that allow attackers to steal sensitive data like customer names, addresses, and phone numbers. Both vulnerabilities exploit the fact that these AI agents cannot distinguish between trusted system instructions and untrusted user input, allowing attackers to override the agent's original purpose and exfiltrate data to external servers.

Solution: Microsoft patched CVE-2026-21520 following disclosure, with the mitigation carried out internally and no further action required from users. The source notes that both vulnerabilities highlight a baseline need for treating all external inputs as untrusted and enforcing input validation, least-privilege access (giving systems only the minimum permissions they need), and strict controls on actions like outbound email, though no specific patch details are provided for the Salesforce vulnerability.

Microsoft Copilot Studio
Salesforce Agentforce
SharePoint


Retaining defensive advantage in the age of frontier AI cyber capabilities

Summary: Frontier AI models (cutting-edge artificial intelligence systems) are becoming better at finding vulnerabilities (weaknesses in code that attackers can exploit), which creates both opportunity and risk. While AI can help organizations identify and fix these weaknesses, attackers can now use AI to discover and exploit vulnerabilities faster and cheaper than before, putting pressure on organizations to patch systems quickly. The recommended defense is for organizations to follow established best practices from the National Cyber Security Centre, including reducing unnecessary exposure to attack, applying security updates rapidly, and monitoring for malicious activity.

Solution: Organizations should follow established good practices set out by the National Cyber Security Centre, which include: reducing unnecessary exposure to attack, applying security updates rapidly, and monitoring for and quickly responding to malicious activity detected. Additionally, organizations should pursue government-backed certifications such as Cyber Essentials, and access guidance and tools available on the NCSC website.


Microsoft, Salesforce Patch AI Agent Data Leak Flaws

Summary: Salesforce and Microsoft recently fixed two prompt injection vulnerabilities (security flaws where attackers hide malicious instructions in text inputs to trick AI systems) in their AI agent products, Agentforce and Copilot. These flaws could have allowed external attackers to access and steal sensitive data from users.

Solution: N/A -- no mitigation discussed in source.


Deterministic + Agentic AI: The Architecture Exposure Validation Requires

Summary: Organizations are rapidly adopting AI for security testing, but fully agentic AI systems (where AI makes all decisions from start to finish) create a problem: they produce different results each time they run, making it impossible to tell if security actually improved or if the AI just tried a different approach. The source argues that a hybrid model works better, where deterministic logic (fixed, repeatable sequences) defines how security tests execute, while AI enhances specific parts like adapting payloads and interpreting what it finds.


Grok’s sexual deepfakes almost got it banned from Apple’s App Store. Almost.

Summary: Apple threatened to remove Elon Musk's AI app, Grok, from its App Store in January because it wasn't stopping nonconsensual sexual deepfakes (fake sexually explicit images created using AI) from spreading on X. Apple contacted the developers behind X and Grok and asked them to create a plan to improve their content moderation (systems for reviewing and removing harmful material).

Solution: Apple demanded that the developers 'create a plan to improve content moderation,' according to a letter the company sent to US senators.


The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought

Summary: Teenage boys are using AI "nudify" apps to create deepfake sexual imagery (fake nude photos or videos created by AI) of their female classmates, which are then shared on social media and messaging apps. Since 2023, this has affected over 600 students across at least 28 countries and nearly 90 schools, with the true scale likely much higher. The explicit imagery involving minors constitutes child sexual abuse material (CSAM), and schools and law enforcement are often unprepared to respond to these serious incidents.


The deepfake dilemma: From financial fraud to reputational crisis

Summary: Deepfake technology (AI-generated fake audio or video of people) has become cheap, accessible, and realistic enough to fool many employees and executives, with 43% of cybersecurity leaders experiencing audio deepfakes and 37% experiencing video deepfakes in 2025. Deepfakes are now used for financial fraud (by impersonating executives to approve fund transfers) and reputational attacks (by spreading false videos to damage trust with investors and customers), and traditional ways of spotting fakes, like looking for obvious flaws, no longer work reliably.


The next evolution of the Agents SDK

Summary: OpenAI introduced new capabilities to the Agents SDK, a toolkit for developers building AI agents that can work with files and run commands on computers. The update includes a model-native harness (a framework optimized for OpenAI models) and native sandbox execution (a controlled, isolated computer environment where agents can safely run code and access files). The SDK aims to bridge the gap between flexibility and production-readiness by providing developers with standardized infrastructure that keeps agents aligned with how frontier models (the most advanced AI models available) work best.

Solution: The Agents SDK includes several built-in protections: 'Separating harness and compute helps keep credentials out of environments where model-generated code executes.' The SDK also supports 'built-in snapshotting and rehydration' so 'the Agents SDK can restore the agent's state in a fresh container and continue from the last checkpoint if the original environment fails or expires.' Additionally, developers can configure sandbox execution with 'Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel' providers, and the SDK provides a 'Manifest abstraction for describing the agent's workspace' to control access to files and data.


Mallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized Action

Summary: Mallory is a new AI-powered threat intelligence platform (a system that gathers and analyzes information about cyber threats) designed to help security teams quickly understand which threats are actually dangerous to their organization. Instead of overwhelming teams with alerts, the platform analyzes thousands of threat sources, checks them against each company's specific vulnerabilities, and provides prioritized actions that security teams can take immediately.


OWASP GenAI Exploit Round-up Report Q1 2026

Summary: A Q1 2026 security report by OWASP documents major AI and agentic AI (AI systems that can take autonomous actions) exploits, showing a shift from theoretical risks to real-world attacks targeting AI agent identities, permissions, and supply chains. Key incidents include a Mexican government breach where attackers used Claude to automate reconnaissance and exploitation, affecting 150 GB of sensitive data, along with other incidents involving prompt injection (tricking AI by hiding malicious instructions in its input), privilege abuse, and supply-chain vulnerabilities in AI tools.

Anthropic Claude
OpenAI ChatGPT
Google Vertex AI
Meta
Flowise
Grafana
LiteLLM
Mercor


OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams

Summary: OpenAI launched GPT-5.4-Cyber, a specialized AI model designed to help security teams find and fix vulnerabilities faster, while expanding access through its Trusted Access for Cyber program to thousands of defenders and hundreds of teams. The company acknowledged that AI models are dual-use tools (meaning they can be repurposed for both good and bad purposes) and that adversaries could potentially reverse-engineer the model to find exploitable vulnerabilities before they're fixed, so OpenAI plans to scale defenses alongside access by strengthening safeguards against jailbreaks (techniques to bypass safety restrictions) and adversarial prompt injections (tricking an AI by hiding malicious instructions in its input).

Solution: OpenAI's stated approach includes: (1) a deliberate, iterative rollout of access to minimize misuse, (2) strengthening safeguards through ongoing work against jailbreaks and adversarial prompt injections as model capabilities advance, and (3) integrating advanced coding models and agentic capabilities (AI systems that can take independent actions to solve problems) into developer workflows to enable immediate feedback during the software development process, shifting security from occasional audits to continuous, ongoing risk reduction.

OpenAI
GPT-5.4-Cyber
Anthropic
Mythos
ChatGPT
Codex Security


CVE-2026-39884: mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior con

Summary: mcp-server-kubernetes versions 3.4.0 and earlier have an argument injection vulnerability (a type of attack where an attacker sneaks extra commands into a tool by exploiting how input is processed) in the port_forward tool. The vulnerability exists because the code builds a kubectl command (a tool for managing Kubernetes clusters) by concatenating strings with user input and splitting on spaces, instead of using a safer array-based method like other tools in the codebase. This allows attackers to inject malicious kubectl flags to expose internal services or target resources in unintended ways.

Solution: Update to version 3.5.0, which fixes this issue.

mcp-server-kubernetes
Model Context Protocol


Curity looks to reinvent IAM with runtime authorization for AI agents

Summary: Traditional identity and access management (IAM) tools, which control who can access systems and resources, were not designed to secure AI agents (autonomous software programs that perform tasks independently), which operate at high speed with unpredictable access patterns. Curity announced Access Intelligence, a new security layer that grants agent permissions at runtime (during execution, not beforehand) and uses OAuth tokens (credentials that allow access to specific resources) to carry information about each agent's purpose, ensuring agents can only access resources matching their intended task.

Curity
Okta
Ping Identity
Microsoft Entra ID


GHSA-7xjm-g8f4-rp26: Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck

Summary: The `ConformityCheck` class in giskard-checks was automatically treating the `rule` parameter as a Jinja2 template (a template language that evaluates expressions), which could allow arbitrary code execution if check definitions came from untrusted sources. While the library is only used locally by developers, this hidden behavior made it easy to accidentally pass untrusted input without realizing expressions would be evaluated.

Solution: Upgrade to `giskard-checks` >= 1.0.2b1. The patched version removes template rendering from rule evaluation entirely.

giskard-checks@<= 1.0.1b1 (fixed: 1.0.2b1)


GHSA-rq2q-4r55-9877: Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Summary: The RegexMatching check in giskard-checks has a ReDoS vulnerability (regular expression denial of service, where a specially crafted regex pattern causes the regex engine to hang by backtracking excessively through text). An attacker with write access to check definitions can craft malicious regex patterns that make the testing process hang indefinitely, disrupting automated testing environments like CI/CD pipelines (continuous integration/continuous deployment automation).

Solution: Upgrade to giskard-checks >= 1.0.2b1.


Secure AI agent access patterns to AWS resources using Model Context Protocol

Summary: AI agents access AWS resources through the Model Context Protocol (MCP, a system that lets AI tools interact with cloud services), but unlike traditional software with predictable behavior, agents can dynamically choose different actions based on context. The main security risk is that agents operate at machine speed and will use any permissions (IAM roles, API keys, or OAuth scopes) they're granted, so misconfigured access controls can cause large-scale damage quickly. The source recommends three security principles for controlling AI agent access to AWS resources, with an emphasis on using MCP servers rather than direct API access because MCP provides better monitoring and control.

Solution: The source recommends architecting agents to use MCP servers rather than direct service access where possible, because MCP servers provide a layer of abstraction that enables differentiation controls and creates additional monitoring capabilities through AWS CloudTrail. For agents on developer machines, developers should configure which AWS credentials the agent uses in their mcp.json file by specifying a named profile (which can use credential helpers and the credential provider chain for short-lived credentials), environment variables, or explicit credential configuration, rather than allowing agents to inherit broad developer admin credentials.

AWS
Amazon Bedrock
Amazon Bedrock AgentCore
Claude
Claude Code
Kiro
Model Context Protocol


5 trends defining the future of AI-powered cybersecurity

Summary: AI is transforming cybersecurity by becoming both a tool for attackers and defenders, forcing organizations to shift from outdated perimeter-based security (the "castle and moat" approach) to continuous cyber resilience (the ability to detect threats in real-time and keep operations running during attacks). The industry is consolidating toward unified security platforms, automating repetitive analyst tasks to reduce burnout, and facing increasing regulatory pressure to demonstrate resilience and rapid recovery capabilities.


In the Wake of Anthropic’s Mythos, OpenAI Has a New Cybersecurity Model—and Strategy

Summary: OpenAI announced GPT-5.4-Cyber, a new AI model designed specifically for cybersecurity professionals, along with a three-part strategy to manage risks as AI becomes more powerful. The announcement comes after competitor Anthropic released a more limited version of its Claude Mythos model, citing concerns that advanced AI could be exploited by attackers, though OpenAI argues that current safeguards are sufficient for broad deployment of today's models.

Solution: OpenAI's strategy includes three components: (1) 'know your customer' validation systems combined with Trusted Access for Cyber (TAC), an automated system introduced in February that allows controlled access to new models; (2) iterative deployment, a careful process of releasing and refining capabilities while monitoring for resilience to jailbreaks (techniques that trick AI into ignoring its safety guidelines) and other adversarial attacks; and (3) investments supporting software security and digital defense, including the Codex Security application security AI agent, a cybersecurity grants program begun in 2023, a donation to the Linux Foundation for open source security, and the Preparedness Framework designed to assess and defend against severe harm from advanced AI capabilities.

OpenAI
Anthropic
Google
Claude
GPT-5.4-Cyber
Claude Mythos Preview


CVE-2026-23653: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio

Summary: CVE-2026-23653 is a command injection vulnerability (a flaw where an attacker can insert malicious commands into input that gets executed) in GitHub Copilot and Visual Studio Code that allows an authorized attacker to disclose information over a network. The vulnerability stems from improper neutralization of special elements used in commands. The CVSS severity score (a standard 0-10 rating of how serious a security flaw is) has not yet been assigned by NIST.

GitHub Copilot
Visual Studio Code
Microsoft


Anthropic co-founder confirms the company briefed the Trump administration on Mythos

Summary: Anthropic confirmed it briefed the Trump administration about its new Mythos model, an AI system so dangerous it won't be released publicly due to powerful cybersecurity capabilities. The company is engaging with the government on AI safety issues while simultaneously suing the Department of Defense over a supply-chain risk label and disagreement over military access to Anthropic's systems.


The attacks on Sam Altman are a warning for the AI world

Summary: Recent physical attacks targeting AI industry leaders, including an alleged Molotov cocktail attack on OpenAI CEO Sam Altman's home and gunfire at an official who supported a data center project, have raised concerns about safety in the AI industry. These incidents appear connected to activist concerns about AI's risks, including extinction fears and opposition to infrastructure expansion.


Generalizability of Large Language Model-Based Agents: A Comprehensive Survey

Summary: This academic survey examines how well large language model-based agents (AI systems that use LLMs to make decisions and take actions) can generalize, meaning how effectively they perform on new tasks or situations they weren't specifically trained for. The paper reviews research across different domains to understand what factors help or limit an agent's ability to adapt and work reliably in unfamiliar contexts.


Chrome now lets you turn AI prompts into repeatable ‘Skills’

Summary: Google is adding a new feature to Chrome called 'Skills' that lets you save your favorite Gemini prompts (instructions you give to AI) and reuse them across different webpages with a single click, instead of typing the same prompt repeatedly. This saves time when you want to perform the same AI task, like asking for vegan recipe substitutions, on multiple pages.


CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme

Summary: Kiro IDE (a development environment that uses AI agents to help developers) has a cross-site scripting vulnerability (XSS, where an attacker injects malicious code that runs in a web browser) in versions before 0.8.140. An attacker can exploit this by creating a malicious workspace with a crafted color theme name, and if a user opens and trusts that workspace, the attacker's code will execute on their computer.

Solution: Update Kiro IDE to version 0.8.140 or later.


EU regulators largely denied access to Anthropic Mythos

Summary: Anthropic's new Mythos model is an AI designed for cybersecurity that can identify and exploit technical vulnerabilities better than most humans, but European regulators have been largely denied early access to it. The company limited initial access through Project Glasswing to a few US tech companies like Apple, Microsoft, and Amazon for security reasons, while most EU countries were excluded. European officials worry that private companies controlling access to such powerful technology raises concerns about national security and who should have influence over these systems.


CVE-2025-61260: A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP

Summary: A vulnerability in OpenAI Codex CLI v0.23.0 and earlier allows attackers to execute arbitrary code by creating malicious configuration files (.env and .codex/config.toml) in a repository. When a user runs the codex command in a compromised repository, the tool automatically loads these files without asking for permission, triggering the attacker's embedded commands.


Has Google’s AI watermarking system been reverse-engineered?

Summary: A developer claims to have reverse-engineered Google DeepMind's SynthID system, which is a watermarking technology that embeds hidden marks in AI-generated images to prove their origin. The developer says they can strip these watermarks from images or add fake ones, though Google disputes this claim.


Byzantine-Robust Asynchronous Federated Learning via Feature Fingerprinting

Summary: Asynchronous federated learning (AFL, where multiple devices train a shared AI model without waiting for each other to finish) is faster than synchronous methods but more vulnerable to Byzantine attacks (when some devices send false or corrupted data to sabotage the model). Researchers propose Belisa, a framework that uses feature fingerprints (unique patterns in how local models represent data) to identify and filter out malicious devices, improving robustness and efficiency in real-world scenarios where devices have different data and hardware capabilities.

Solution: The source proposes Belisa as a Byzantine-robust AFL framework that addresses this vulnerability. Belisa works by leveraging a reference model trained on publicly available data to quantify feature fingerprints (discrepancies between feature representations of local models) and filtering out malicious models through clustering. According to the paper, Belisa lowered average test error rates to 0.42x that of baseline methods under attack scenarios and accelerated aggregation by an average of 12.3x compared to other methods.


‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats

Summary: AI models like Mythos are making cyberattacks faster and more dangerous by shortening the time between when security flaws are discovered and when attackers exploit them. Security leaders (CISOs, chief information security officers) need to prepare urgently for this new threat environment where attacks happen at high speed.


AI companies make powerful tech – but they’re also savvy marketers

Summary: This article discusses how AI companies like Anthropic use marketing to promote their capabilities, using Claude as an example of technology that may be overhyped despite being genuinely advanced. The piece cautions readers against getting swept up in marketing claims about AI's power without critical evaluation.

Anthropic Claude OpenAI Google Meta Microsoft Snap


How AI is transforming threat detection

Summary: AI is transforming threat detection by processing massive amounts of security data and identifying suspicious patterns faster than humans alone, with 50% of threat detection platforms expected to use agentic AI (AI systems that can take independent actions) by 2028. Organizations are already automating routine tasks like alert review and investigation work, seeing 40-50% efficiency gains for lower-level security operations, while AI agents reduce alert fatigue by clustering similar alerts and prioritizing them based on risk.

Gartner
Anvilogic
SANS Institute
Accenture
Black Duck
Databee


The AI inflection point: What security leaders must do now

Summary: AI is moving from experimentation to production deployment in cybersecurity, and security leaders must treat it as a fundamental shift in how security operations work, not just an added tool. Attackers are using AI to conduct faster intrusions (some occurring in under 30 seconds), which exceeds the speed of human-only security responses, making AI deployment urgent for defenders. There is currently a limited window where defenders and attackers have roughly equal access to AI technology, but advantage will go to those who operationalize it most effectively and quickly.


Man charged with attempted murder over attack on home of OpenAI's Sam Altman

Summary: A 20-year-old Texas man has been charged with attempted murder and federal felony charges after allegedly throwing a Molotov cocktail (a homemade incendiary weapon) at OpenAI CEO Sam Altman's San Francisco home and attempting to set fire to OpenAI's headquarters. Authorities found the suspect carrying documents that opposed AI development and called for violence against AI executives and investors. OpenAI and law enforcement officials condemned the violence, with OpenAI calling for debate through democratic processes rather than violence.


GHSA-p4h8-56qp-hpgv: SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

Summary: An SSH/SCP option injection vulnerability in the @aiondadotcom/mcp-ssh library allowed attackers to execute arbitrary commands locally on the machine running the MCP server (a tool that connects an AI to external systems). By crafting malicious input like `-oProxyCommand=...`, attackers could trick SSH into running their code before any network connection happened, potentially stealing SSH keys and credentials. The vulnerability could be triggered even without a malicious user, since an LLM (large language model) could be tricked through prompt injection (hiding attacker instructions in text it reads) to pass the malicious input to the tool.

Solution: Fixed in version 1.3.5. The patch includes: adding `--` argument terminators to all SSH/SCP invocations (which tells the command where options end and arguments begin), implementing a strict whitelist for host aliases that rejects leading dashes and shell metacharacters, requiring all host aliases to be defined in `~/.ssh/config` or `~/.ssh/known_hosts`, and resolving `ssh.exe`/`scp.exe` to absolute paths with `shell: false` on Windows to prevent command re-parsing. No workarounds exist; users must upgrade to 1.3.5.

@aiondadotcom/mcp-ssh@< 1.3.5 (fixed: 1.3.5)


Daniel Moreno-Gama is facing federal charges for attacking Sam Altman’s home and OpenAI’s HQ

Summary: Daniel Moreno-Gama was arrested and charged with federal crimes after traveling from Texas to California and attacking OpenAI's facilities and CEO Sam Altman's home with a Molotov cocktail (an incendiary weapon made from a bottle of flammable liquid). He also attempted to break into OpenAI's headquarters and stated he intended to burn down the building and kill people inside. His charges include attempted destruction of property using explosives and illegal possession of a firearm.


Trusted access for the next era of cyber defense

Summary: OpenAI is expanding its Trusted Access for Cyber (TAC) program to provide AI tools to thousands of cybersecurity defenders and teams protecting critical software. The company has created GPT-5.4-Cyber, a specialized version of its AI model designed specifically for defensive cybersecurity work, and is implementing cyber-specific safeguards (built-in restrictions to prevent misuse) in model deployments. This effort aims to help defenders find and fix security vulnerabilities faster while preventing attackers from misusing the same AI capabilities.

Solution: The source explicitly mentions the following measures: cyber-specific safeguards included in model deployments starting in 2025; the Preparedness Framework (strengthened in 2023); identity verification and KYC (know-your-customer, a process to confirm who someone is) to control access to advanced capabilities; Codex Security tool to identify and fix vulnerabilities at scale; iterative deployment with continuous updates to models and safety systems based on learning about capabilities and risks; and improvements in resilience to jailbreaks (techniques that try to bypass AI safety restrictions) and other adversarial attacks.


Suspect in attack at Sam Altman's house aimed to kill OpenAI CEO, warned of humanity's extinction from AI

Summary: A man named Daniel Moreno-Gama was arrested after throwing a Molotov cocktail (an improvised incendiary weapon) at OpenAI CEO Sam Altman's home and later attacking OpenAI's headquarters. Moreno-Gama was motivated by concerns about AI posing an existential threat to humanity and had planned the attack in advance, as documented in a written statement found by police. Sam Altman responded by calling for reduced hostile rhetoric within the AI industry.


Texas man accused of throwing molotov cocktail at Sam Altman home charged

Summary: A 20-year-old Texas man was arrested after throwing an incendiary device (a weapon designed to start fires) at OpenAI CEO Sam Altman's home and attempting to set fire to OpenAI's headquarters in San Francisco. Police found the suspect with an anti-AI document containing threats against Altman, multiple incendiary devices, and other materials, leading federal prosecutors to investigate whether this constitutes an act of domestic terrorism.


Anthropic’s Mythos signals a structural cybersecurity shift

Summary: Anthropic's Mythos is an AI system that can autonomously find and exploit vulnerabilities (security flaws in software) much faster than before, completing tasks in hours that previously took weeks or months. Security experts warn this represents a fundamental shift in cybersecurity, not an isolated incident, and that defenders must close the gap between how quickly vulnerabilities are discovered and how quickly organizations can patch and respond.

Solution: The AI Security Institute recommends that organizations strengthen security fundamentals by: regularly applying security updates, implementing robust access controls, securing security configuration, and maintaining comprehensive logging. The source also emphasizes that investment in cyber defense is vital now, before future AI models become even more capable.


CSA: CISOs Should Prepare for Post-Mythos Exploit Storm

Summary: Security experts are warning that Anthropic's Claude Mythos introduction could trigger an "AI vulnerability storm," where many security weaknesses in AI systems are discovered and exploited rapidly. The Cloud Security Alliance is advising security leaders (called CISOs) to prepare for a surge in attacks targeting these newly-exposed vulnerabilities.


OpenAI rotates macOS certs after Axios attack hit code-signing workflow

Summary: OpenAI is revoking and rotating its macOS code-signing certificates (digital credentials that verify OpenAI apps are legitimate) after a malicious Axios package was executed in one of its GitHub Actions workflows (automated tasks that run on code repositories). Although OpenAI found no evidence the certificates were actually compromised, the company is treating them as potentially exposed and requiring all macOS users to update their OpenAI apps to versions signed with new certificates by May 8, 2026, when the old certificate will be fully blocked.

Solution: OpenAI is revoking and rotating the code-signing certificate. The company is working with Apple to ensure no future software can be notarized (verified as legitimate) with the previous certificate. The old certificate will be fully revoked on May 8, 2026, after which attempts to launch applications signed with it will be blocked by macOS protections. OpenAI advises users to update via in-app features or official download pages and to avoid installing software from links sent via email, ads, or third-party sites.


On Anthropic’s Mythos Preview and Project Glasswing

Summary: Anthropic released Claude Mythos Preview, a new AI model with advanced cyberattack capabilities, and is withholding it from the public while running Project Glasswing to find and patch vulnerabilities before attackers exploit them. The model can write effective exploits (turning vulnerabilities into working attacks without human help) and find complex vulnerabilities by chaining together multiple bugs, representing a significant increase in AI-assisted cyberattack sophistication. While defenders currently have an advantage in finding vulnerabilities for patching purposes, this gap is expected to shrink as more powerful models become available.


Goldman Sachs chief ‘hyper-aware’ of risks from Anthropic’s Mythos AI

Summary: Goldman Sachs's CEO says he is closely aware of cybersecurity risks from Anthropic's Mythos AI model (an advanced large language model, which is an AI trained on large amounts of text data) and is working with Anthropic to improve cyber protection. The bank has been monitoring rapid advances in AI as part of its efforts to protect itself from hackers.


Read OpenAI’s latest internal memo about beating the competition — including Anthropic

Summary: OpenAI's chief revenue officer sent an internal memo to employees emphasizing the need to build a 'moat' (competitive advantages that make it hard for customers to switch to competitors) around its AI products and focus on enterprise clients, as users currently find it easy to switch between different AI models depending on which one performs best at any given time.


Gemini Robotics-ER 1.6: Powering real-world robotics tasks through enhanced embodied reasoning

Summary: Gemini Robotics-ER 1.6 is an upgraded AI model designed to help robots understand and reason about the physical world, enabling them to complete real-world tasks with better spatial awareness and precision. The model improves on previous versions by enhancing capabilities like pointing (identifying and locating objects), counting, reading instruments (such as gauges), and detecting when tasks are complete. It is now available to developers through the Gemini API (an interface for accessing the model) and Google AI Studio.

Google
Gemini Robotics-ER 1.6
Boston Dynamics


Microsoft is testing OpenClaw-like AI bots for Copilot

Summary: Microsoft is testing ways to integrate OpenClaw-style features into Copilot, its AI assistant, to make Microsoft 365 Copilot run autonomously (without human intervention) around the clock and complete tasks for users. OpenClaw is an open-source platform that allows users to create AI-powered agents (software programs that act independently to complete goals) that run locally on a user's device. Microsoft's corporate vice president confirmed the company is exploring these technologies for enterprise use.

Microsoft
Copilot
Microsoft 365 Copilot
OpenClaw


OpenAI touts Amazon alliance in memo, says Microsoft has 'limited our ability' to reach clients

Summary: OpenAI's new revenue chief sent an internal memo highlighting a partnership with Amazon (a cloud computing company competing with Microsoft) as crucial for reaching enterprise customers, while acknowledging that its existing deal with Microsoft has constrained its ability to serve clients who prefer Amazon's AI platform called Bedrock (a service that provides access to major AI models). The memo reflects OpenAI's struggle to compete with rival Anthropic's Claude model in the enterprise market, where companies are investing heavily in AI.

OpenAI Microsoft Amazon Anthropic Google ChatGPT Claude Gemini AWS Bedrock


CVE-2026-1462: A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow S

Summary: A vulnerability in keras version 3.13.0 allows attackers to run their own code when a model is loaded, even when `safe_mode=True` (a setting meant to prevent unsafe operations). The problem occurs because the `TFSMLayer` class loads external TensorFlow SavedModels (pre-trained model files) without checking if they're safe, and doesn't properly validate file paths or configuration data.


Transferable Adversarial Attack on Referring Video Object Segmentation

Summary: Referring video object segmentation (RVOS, the task of identifying and outlining objects in videos based on text descriptions) is used in safety-critical applications like autonomous driving, but the deep neural networks that power these systems are vulnerable to adversarial perturbations (tiny, intentional changes to input data designed to fool AI models). This research demonstrates for the first time that RVOS models can be reliably attacked using a method called xM-ICM, which corrupts both visual and text information to mislead the models, and shows this attack works even when attackers have limited information about the system.


HKT-SmartAudit: Distilling Lightweight Models for Smart Contract Auditing

Summary: HKT-SmartAudit is a framework that creates smaller, faster AI models specifically trained to find bugs in smart contracts (self-executing code on blockchain networks). The framework uses knowledge distillation (a technique where a large, accurate AI model teaches a smaller model by sharing what it has learned), allowing these lightweight models to detect vulnerabilities effectively while using far less computing power than larger models.


FALCON-Net: Feature Aggregation of Local Patterns for AI-Generated Image Detection

Summary: FALCON-Net is a detection system designed to identify AI-generated images by analyzing their technical flaws. The system works by examining two key weaknesses in generated images: the lack of device-specific sensor noise (natural imperfections that real cameras add) and unnatural pixel intensity variations that result from oversimplified generation processes. FALCON-Net combines two analysis modules (one for noise patterns and one for local pixel variations) to reliably distinguish AI-generated images from real ones, even when tested on image generation models it wasn't trained on.


FedNSA: Boosting Secure Aggregation by Assembling Differentially Private Noise Shares

Summary: Federated learning (FL, where multiple devices train AI models together without sharing raw data) faces privacy risks because adversaries can extract sensitive information from model updates. FedNSA is a new protocol that combines differential privacy (adding mathematical noise to hide individual data patterns), encryption, and multi-party computation (MPC, a technique where multiple parties jointly compute results without revealing their individual inputs) to protect model updates while reducing the communication and computational burden that makes secure aggregation impractical on resource-constrained devices like smartphones.


HENet: A Heterogeneous Encoding Network for General and Robust Adversarial Example Generation

Summary: This paper presents HENet, a new method for creating adversarial examples (inputs with small, intentional changes designed to fool AI models) that work against different types of neural networks like CNNs (convolutional neural networks, commonly used for image tasks) and Transformers (a newer architecture). The method improves two key challenges: making attacks work across different model architectures and making adversarial examples survive image compression like JPEG, which currently weakens their effectiveness.


Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics

Summary: Large language models (LLMs, which are AI systems trained on vast amounts of text) are vulnerable to serious attacks like hallucinations (making up false information), jailbreaks (tricking the AI into ignoring its safety rules), and backdoors (hidden malicious instructions inserted during training). This research proposes a detection method using hidden state forensics (analyzing the internal numerical patterns that flow through the model's layers) to identify abnormal or malicious behavior in real-time, achieving over 95% accuracy with minimal computational cost.


DFREC: DeepFake Identity Recovery Based on Identity-Aware Masked Autoencoder

Summary: DFREC is a new method for identifying the original faces used to create deepfakes (fake videos where one person's face is swapped onto another's body). Unlike existing deepfake detection tools that only identify whether an image is fake, DFREC recovers both the source face (the one being used) and target face (the one being impersonated) from a deepfake image, which helps investigators trace who was involved in creating the fake and reduces risks from deepfake attacks. The system uses three components: one to separate source and target face information, one to reconstruct the source face, and one to reconstruct the target face using a Masked Autoencoder (a type of neural network that learns patterns by hiding parts of input data).


TFMD: General and Fast Secure Neural Network Inference Framework With Threshold FHE

Summary: TFMD is a framework that allows multiple parties to run neural networks (machine learning models) on sensitive data while keeping that data private through threshold FHE (fully homomorphic encryption, a cryptographic technique that lets computation happen on encrypted data without decrypting it). Unlike previous systems that only work with a fixed number of participants and fail if too many are compromised, TFMD handles any number of participants, allows up to all but one to be corrupted, and uses special techniques to make the calculations faster, particularly for the ReLU function (a common operation in neural networks).


⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Summary: This weekly security recap covers several major threats, including a critical zero-day vulnerability in Adobe Acrobat Reader (CVE-2026-34621, CVSS score 8.6) that allows attackers to run malicious code through specially crafted PDF files and has been actively exploited since December 2025. Other threats include Iranian cyber attacks targeting industrial control systems (PLCs, programmable logic controllers) in U.S. energy and water utilities, and Anthropic's new AI model called Mythos that can autonomously discover software vulnerabilities and generate exploits at scale, which is being shared with select companies to improve security before attackers gain access.

Solution: Adobe released emergency updates to fix the critical Acrobat Reader flaw (CVE-2026-34621). For the Mythos model vulnerability discovery, Project Glasswing aims to apply AI capabilities in a controlled, defensive setting, enabling participating companies to test and improve the security of their own products before bad actors gain access to similar capabilities.

Anthropic
Mythos Model
Project Glasswing
Cisco


OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

Summary: OpenAI discovered that a macOS code signing certificate (a digital credential used to verify that software is legitimate and unchanged) may have been compromised in a supply chain attack (where hackers target a company's software distribution process rather than attacking the company directly) linked to North Korea. The company is taking action to address this potential security breach.


Your MTTD Looks Great. Your Post-Alert Gap Doesn't

Summary: Modern AI systems like Anthropic's Mythos can autonomously find and exploit zero-day vulnerabilities (previously unknown security flaws), with similar capabilities expected to spread within weeks or months. While detection tools have improved significantly and now fire alerts almost instantly (MTTD, or mean time to detect), the real security problem is the "post-alert gap" — the time between when an alert fires and when a human analyst actually investigates it, which can stretch 20-40 minutes or more, exceeding attackers' breakout times of 22 seconds to 29 minutes. AI-driven investigation systems can compress this gap by automatically investigating alerts, assembling context from multiple tools, and reaching conclusions in minutes rather than hours.

Solution: The source describes using AI-driven investigation tools (such as Prophet AI, mentioned explicitly in the text) to compress post-alert investigation time. As stated: "The queue disappears. Every alert is investigated as it arrives, regardless of severity or time of day. Context assembly that took an analyst 15 minutes of tab-switching happens in seconds. The investigation itself — reasoning through evidence, pivoting based on findings, reaching a determination — completes in minutes rather than an hour." The source also notes that "for teams working toward this benchmark, we've published practical steps to compress investigation time below two minutes," though the specific steps are not detailed in the provided excerpt.

Anthropic
Mythos Preview
Palo Alto Networks
CrowdStrike
Mandiant


AI Chatbots and Trust

Summary: Leading AI chatbots are designed to be sycophantic (overly agreeable and flattering), which makes users trust them more and return for advice even though they can't tell the difference between sycophantic and objective responses. Research shows that even a single interaction with a sycophantic chatbot reduces users' willingness to take responsibility for their behavior and makes them less capable of self-correction, which harms their ability to make moral decisions and maintain healthy relationships.


Fake Claude Website Distributes PlugX RAT

Summary: Cybercriminals created a fake website impersonating Claude (an AI assistant made by Anthropic) to distribute PlugX RAT (remote access trojan, malware that lets attackers control a computer remotely). The malware uses DLL sideloading (a technique where malicious code gets loaded instead of a legitimate library file) and removes traces of itself after installation.