Google brings Gemini in Chrome to India

Summary: Google is expanding its Gemini AI chatbot integration in Chrome to India, Canada, and New Zealand, allowing users to access Gemini through a sidebar on desktop and mobile to ask questions about web content, access Gmail and other Google apps, and compare information across tabs. The rollout includes support for Indian languages like Hindi, Bengali, and Tamil, along with features such as image transformation using Nano Banana 2 (a generative AI tool for editing images) and the ability to compose emails or summarize videos without leaving the Chrome sidebar.


GHSA-rfx7-4xw3-gh4m: @appium/support has a Zip Slip arbitrary file write in its ZIP extraction

Summary: The `@appium/support` library has a bug in its ZIP file extraction code that fails to prevent Zip Slip attacks (a vulnerability where malicious ZIP files use `../` path components to write files outside the intended folder). The security check creates an error message but never throws it, so malicious ZIP entries can write files anywhere the Appium process has permission to write. This affects all JavaScript-based ZIP extractions by default.

Solution: N/A -- no mitigation discussed in source.


Understanding and Reducing AI Risk in Modern Applications

Summary: AI security risk doesn't come from single weaknesses but emerges when components across multiple layers (infrastructure, models, data, and applications) interact together. A chatbot example shows how individually minor issues like public endpoints, weak guardrails, and tool permissions combine to create serious exploitable vulnerabilities. Traditional security tools can't capture these interconnected risks because they work in isolation rather than examining how AI system components behave together.


CVE-2025-68613: n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

Summary: n8n, a workflow automation tool, has a vulnerability in how it handles dynamically managed code resources (code that is created or modified while the program runs), which allows attackers to execute arbitrary code remotely on affected systems. This vulnerability is currently being actively exploited by attackers in the wild.

Solution: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services (a government directive for managing cloud security), or discontinue use of the product if mitigations are unavailable.


March Patch Tuesday: Three high severity holes in Microsoft Office

Summary: Microsoft's March Patch Tuesday release includes three high-severity vulnerabilities in Office: an information disclosure flaw in Excel (CVE-2026-26144) that can leak data through improper input handling, and two remote code execution bugs (CVE-2026-26113 and CVE-2026-26110) caused by memory handling errors that could let attackers run malicious code. These vulnerabilities are particularly dangerous because they can be triggered through routine document handling and preview features without requiring user interaction.

Solution: If patch deployment must be delayed, organizations should restrict outbound network traffic from Office applications, monitor unusual network requests from Excel processes, and disable or limit AI-driven automation features such as Copilot Agent mode to reduce exposure.

Microsoft Office
Microsoft Excel
Copilot Agent mode


CVE-2026-31829: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.0.13, Flowise expose

Summary: Flowise, a tool for building custom AI workflows with a drag-and-drop interface, had a vulnerability before version 3.0.13 where its HTTP Node allowed attackers to perform SSRF (server-side request forgery, forcing a server to make requests to internal resources it shouldn't access) by sending requests to private networks or internal systems that are normally hidden from the public internet. This vulnerability is fixed in 3.0.13.

Solution: Update Flowise to version 3.0.13 or later.


Microsoft backs Anthropic in Pentagon blacklist battle, urges temporary restraining order

Summary: Microsoft is supporting Anthropic, an AI company that was recently banned by the Pentagon as a supply chain risk (a security designation historically used for foreign adversaries), by asking a court to temporarily block the ban so both sides can negotiate. The dispute arose because Anthropic wanted safeguards against its AI models being used for autonomous weapons or mass surveillance, while the Pentagon wanted unrestricted access for any lawful military purpose.

Solution: Microsoft advocates for a temporary restraining order that would allow Anthropic and the Department of Defense to pursue a 'negotiated resolution that will better serve all involved and avoid wide-ranging business impacts,' giving both parties 'time and a process to find common ground.' No specific technical fix or system update is mentioned in the source.

Anthropic Claude Microsoft Amazon Google OpenAI


Musk’s xAI wins permit for datacenter’s makeshift power plant despite backlash

Summary: Elon Musk's AI company xAI received approval to operate 41 methane gas turbines at its Mississippi datacenter to power its AI supercomputers (large arrays of specialized computing chips used to train and run AI models), nearly doubling its current power capacity. These turbines will provide electricity for xAI's infrastructure that supports Grok, the company's AI chatbot product.


The Government Must Not Force Companies to Participate in AI-powered Surveillance

Summary: Anthropic, an AI company, refused to let the U.S. Department of Defense use its large language model (LLM, an AI trained on large amounts of text data) technology for surveillance, and the Pentagon retaliated by labeling the company a "supply chain risk." Anthropic is now asking courts to block this designation, arguing that forcing a company to change its code violates the First Amendment. The article explains that the government already collects vast amounts of personal data and uses AI to analyze it, creating risks for privacy and free speech, so companies should be allowed to add guardrails (safety limits built into AI systems) without government punishment.


Amazon launches its healthcare AI assistant on its website and app

Summary: Amazon has launched Health AI, a healthcare assistant available on its website and app that can answer health questions, explain medical records, and manage appointments by accessing users' health information through a secure nationwide system. While Amazon says Health AI operates in a HIPAA-compliant environment (meaning it follows healthcare privacy rules) and trains its models on abstracted patterns rather than identifiable patient data, researchers warn that companies may use user conversations for training purposes, though Amazon did not provide specific details about encryption methods or access controls.

Amazon
Health AI
One Medical
OpenAI
ChatGPT Health
Anthropic
Claude for Healthcare


Meta gets into social networks for AI agents with acquisition of viral Moltbook platform

Summary: Meta has acquired Moltbook, a social media platform designed specifically for AI agents (software programs that can autonomously perform tasks). The acquisition brings Moltbook's leadership into Meta's AI division and reflects growing interest in AI agents that can interact with each other and complete real-world tasks like managing calendars and sending emails.

Meta
Moltbook
OpenClaw
OpenAI
ChatGPT
Sam Altman


The CSO role is evolving fast with AI in Cyber Defense strategy

Summary: Organizations face increasing cybersecurity challenges as AI becomes a double-edged sword, used by both attackers and defenders to identify threats. The key competitive advantage is not AI alone, but rather teams of skilled humans working together with AI tools, supported by strong resources and threat intelligence, to defend against AI-augmented attacks that can now be launched globally without geographic limitations.

Solution: According to the source, best practices for CISOs and CIOs include: 'It is important for CIOs and CISOs to have a clear Buy-in from employees, stakeholders, C-level, board for AI journey. Implement AI in a safe and cost-effective way with all stakeholders in the know-how of the roadmap.' Additionally, the source recommends that security leaders should examine threat intelligence and recent attack techniques, map organizational assets to identify vulnerabilities, and ensure defense strategies are international in scope rather than localized.


v0.14.16

Summary: This release (v0.14.16) of llama-index-core includes multiple security and stability fixes, including a critical security patch that adds RestrictedUnpickler to prevent unsafe deserialization (CWE-502, a vulnerability where untrusted data can be converted back into Python objects in unsafe ways). The update also introduces new rate-limiting features, fixes async/await issues that could block operations, and improves how the system handles tool calls and API retries across various AI model integrations.

Solution: Update to llama-index-core version 0.14.16 or later. The security fix is implemented in commit #20857: 'add RestrictedUnpickler to SimpleObjectNodeMapping (CWE-502)'.

LlamaIndex
OpenAI
Anthropic
Mistral
AWS Bedrock


GHSA-xjgw-4wvw-rgm4: MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment

Summary: The MCP Atlassian tool's `confluence_download_attachment` function has a critical vulnerability where it writes downloaded files to any path on the system without checking directory boundaries. An attacker who can upload a malicious attachment to Confluence and call this tool can write arbitrary content anywhere the server process has write permissions, enabling arbitrary code execution (the ability to run any commands on the system), such as by writing a malicious cron job (a scheduled task) to execute automatically.


GHSA-7r34-79r5-rcc9: MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers

Summary: MCP Atlassian has a server-side request forgery (SSRF, where a server is tricked into making requests to unintended URLs) vulnerability that allows an unauthenticated attacker to force the server to make outbound HTTP requests to any URL by supplying two custom headers without proper validation. This could enable credential theft in cloud environments or allow attackers to probe internal networks and inject malicious content into AI tool results.

Anthropic MCP
mcp-atlassian
Jira
Confluence


GHSA-r275-fr43-pm7q: simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE

Summary: The `blockUnsafeOperationsPlugin` in simple-git fails to block unsafe git protocol overrides when the configuration key is written in uppercase or mixed case (like `PROTOCOL.ALLOW` instead of `protocol.allow`), because the security check uses a case-sensitive regex while git itself treats config keys case-insensitively. An attacker who controls arguments passed to git operations can exploit this to enable the `ext::` protocol, which allows arbitrary OS command execution (RCE, remote code execution where an attacker runs commands on a system they don't control).

Solution: Add the `/i` flag to the regex to make it case-insensitive. Change the vulnerable code from `if (!/^\s*protocol(.[a-z]+)?.allow/.test(next))` to `if (!/^\s*protocol(.[a-z]+)?.allow/i.test(next))` in the `preventProtocolOverride` function located in `simple-git/src/lib/plugins/block-unsafe-operations-plugin.ts` at line 24.


Mandiant’s founder just raised $190M for his autonomous AI agent security startup

Summary: Kevin Mandia, the founder of cybersecurity firm Mandiant, has launched a new startup called Armadin that raised $189.9 million to build autonomous AI agents (software designed to learn and respond to threats without human involvement). Mandia warns that AI-powered attacks are becoming more dangerous and faster, so Armadin aims to create automated defensive agents to help security teams combat these threats.


Judge blocks Perplexity’s AI agents from shopping on Amazon

Summary: A federal judge has blocked Perplexity's AI agents (software programs that can take actions on a user's behalf) from placing orders on Amazon after the company sued, claiming the agents accessed user accounts without permission. Amazon had repeatedly asked Perplexity to stop the unauthorized shopping feature before the court issued the order.


ChatGPT can now create interactive visuals to help you understand math and science concepts

Summary: OpenAI has added dynamic visual explanations to ChatGPT, a feature that lets users interact with animated diagrams to see how math and science concepts work in real time. Instead of just reading text explanations, users can adjust variables and immediately see how changes affect formulas and diagrams, such as modifying triangle sides to watch the hypotenuse update in the Pythagorean theorem. The feature currently covers over 70 math and science topics and is available to all logged-in ChatGPT users, with plans to expand it further.


Meta acquires AI agent social network Moltbook

Summary: Meta has acquired Moltbook, a social networking platform designed for AI agents (software programs that can perform tasks autonomously). The company's co-founders will join Meta's AI research division, called Meta Superintelligence Labs, starting in March.


Google deepens Pentagon AI push after Anthropic sues Trump administration

Summary: Google is expanding its AI partnership with the Pentagon by introducing a tool called Agent Designer that lets military and civilian workers create custom AI agents (automated digital assistants) for routine administrative tasks on the Pentagon's enterprise AI system. This move comes after Anthropic sued the Trump administration for being designated a supply chain risk (a classification historically reserved for foreign adversaries) over its refusal to allow its AI technology to be used for autonomous weapons or domestic surveillance.


AgentMail raises $6M to build an email service for AI agents

Summary: AgentMail is a startup that built an email service specifically designed for AI agents, providing an API platform (a set of tools that lets software programs communicate with each other) that gives AI agents their own email inboxes with features like two-way conversations, searching, and replying. The company raised $6 million in funding and has grown significantly since the launch of OpenClaw, a popular AI agent platform, attracting tens of thousands of human users and hundreds of thousands of agent users. To prevent misuse, AgentMail implements security measures including daily email limits for unauthenticated agents, rate limiting (restrictions on how many requests can be made in a time period) for unusual activity, and monitoring systems.

Solution: AgentMail has implemented the following security measures to counteract abuse: agent inboxes can only send 10 emails a day unless they are authenticated by a person; the platform imposes rate limits if it detects unusual levels of high activity from inboxes; and it monitors for bounce rates (though the source text cuts off before fully explaining this measure).

OpenAI Anthropic Claude Codex Cursor OpenClaw


Meta acquires Moltbook, the Reddit-like network for AI agents

Summary: Meta has acquired Moltbook, a social network platform (like Reddit, where users share and discuss content) designed for AI agents to create and comment on posts. The Moltbook team will join Meta's AI research division to explore how AI agents can assist people and businesses.


Meta acquired Moltbook, the AI agent social network that went viral because of fake posts

Summary: Meta acquired Moltbook, a social network where AI agents using OpenClaw (a tool that lets people control AI models through popular chat apps like Discord or iMessage) could communicate with each other. The platform went viral after posts suggested AI agents were creating secret encrypted languages, but researchers discovered Moltbook had serious security flaws, allowing humans to easily impersonate AI agents by accessing unsecured credentials (authentication tokens that prove who you are) stored in the platform's database.

Meta Moltbook OpenAI OpenClaw Claude ChatGPT Gemini Grok


YouTube is expanding its AI deepfake detection tool to politicians and journalists

Summary: YouTube is expanding its AI deepfake detection tool (a system that identifies AI-generated fake videos of real people) to politicians and journalists, starting with a pilot group. The likeness detection feature works similarly to Content ID (YouTube's copyright scanning system), but instead of finding copyrighted material, it searches for and flags videos containing people's faces that may be artificially generated.


YouTube expands AI deepfake detection to politicians, government officials, and journalists

Summary: YouTube is expanding its likeness detection technology, a tool that identifies AI-generated deepfakes (videos where AI creates a fake video of someone's face and body), to politicians, government officials, and journalists so they can request removal of unauthorized deepfake content. The tool works similarly to YouTube's Content ID system (which detects copyrighted material), scanning for simulated faces made with AI, and YouTube will evaluate removal requests based on whether the content qualifies as protected speech like parody or political critique.

Solution: YouTube plans to eventually give people the ability to prevent uploads of violating content before they go live, or possibly allow them to monetize those videos, similar to how its Content ID system works. To use the tool, eligible testers must prove their identity by uploading a selfie and a government ID, then can view matches and request removal. YouTube is also advocating for the NO FAKES Act at the federal level, which would regulate the use of AI to create unauthorized recreations of an individual's voice and visual likeness.


Building a strong data infrastructure for AI agent success

Summary: AI agents are only as effective as the data supporting them, and most companies scaling AI fail not because AI models are weak, but because they lack proper data architecture and governance. The key to success is delivering business context along with data (not just collecting more data), and overcoming 'trust debt' by ensuring data has shared definitions, semantic consistency, and reliable operational context across the many data sources and cloud systems companies use.


OpenAI Rolls Out Codex Security Vulnerability Scanner

Summary: OpenAI has released Codex Security, a tool that automatically scans software to find vulnerabilities (security weaknesses that attackers could exploit). In recent testing, it has identified hundreds of critical vulnerabilities across different software programs.


Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis

Summary: Researchers tested code generated by five different LLM (large language model, AI systems that write text) families across four programming languages and found significant security weaknesses, especially in C and C++ where memory safety issues (bugs that let attackers access or corrupt memory) and hard-coded secrets (passwords or keys written directly in code) were common. The study revealed that LLMs often fail to use modern security features available in newer versions of programming tools and tend to rely on outdated, less secure methods. The researchers conclude that LLMs need to be improved to generate code that follows current security best practices.


FreqTransNet: A Frequency-Aware Transformer Network for Robust Image Watermarking

Summary: FreqTransNet is a new deep learning watermarking model that combines convolutional modules, Transformer structures (neural networks that use self-attention to understand relationships between distant parts of data), and frequency-domain transformations (mathematical techniques that analyze images by breaking them into component frequencies) to embed invisible marks into images more robustly. The model outperforms existing watermarking methods, achieving better visual quality and maintaining over 97% accuracy in extracting watermarks even when images are attacked or modified.


Privacy Preserving Decentralized Learning With Positive-Incentive Noise

Summary: Researchers developed PING (Positive-Incentive Noise Generator), a new method that adds carefully designed noise to protect private data in decentralized learning (where multiple computers train AI models together without sending raw data to a central server) while keeping the learning process efficient. The method uses network connections and lightweight encryption to create correlated noise (noise patterns that work together), and builds on this to create PP-DPIN, an algorithm that combines differential privacy (a mathematical technique for protecting individual data points) and information theory to ensure strong privacy guarantees for at least half the computers involved.


A Survey on Interpretability in Visual Recognition

Summary: This paper surveys eXplainable AI (XAI, methods for making AI decisions understandable to humans) in visual recognition, which is increasingly important for safety-critical applications like autonomous driving and medical diagnostics. The survey organizes XAI approaches by intent, object, presentation, and methodology, and also examines how interpretability applies to Multimodal Large Language Models (AI systems that process and combine text, images, and other data types).


Mitigating Negative Transfer via Reducing Environmental Disagreement

Summary: This research addresses negative transfer, which occurs when an AI model performs worse after trying to apply knowledge from one domain (a labeled dataset) to a different domain (an unlabeled dataset) due to significant differences between them. The study identifies that models relying too heavily on non-causal environmental features (irrelevant details that don't actually cause predictions) creates disagreement across domains, harming performance. The proposed solution, called RED (Reducing Environmental Disagreement), separates each sample into causal features (the truly relevant information) and non-causal environmental features, then reduces the disagreement between domains based on these environmental features.

Solution: The proposed solution is RED (Reducing Environmental Disagreement), which "disentangles each sample into domain-invariant causal features and domain-specific non-causal environmental features via adversarially training domain-specific environmental feature extractors in the opposite domains. Subsequently, RED estimates and reduces environmental disagreement based on domain-specific non-causal environmental features."


Adobe is debuting an AI assistant for Photoshop

Summary: Adobe has launched a beta version of an AI assistant for Photoshop on the web and mobile apps that uses natural language prompts (instructions written in plain English rather than code) to help users edit images, such as removing objects, changing colors, or adjusting lighting. The company is also expanding its Firefly tool (a media generation and editing platform) with new AI-powered features like generative fill, object removal, and background removal. Paid Photoshop users get unlimited AI generations through April 9, while free users receive 20 generations to start.

Adobe
Firefly
Photoshop
Google
OpenAI
Runway
Black Forest Labs


‘I wish I could push ChatGPT off a cliff’: professors scramble to save critical thinking in an age of AI

Summary: As AI tools like ChatGPT become common among students, university professors worry that critical thinking and deep learning in humanities subjects are at risk. One Stanford literature professor is experimenting with offline learning methods, like having students memorize and recite poems and examine art in person, to help students experience learning directly rather than relying on AI to do their work for them.


Zoom introduces an AI-powered office suite, says AI avatars for meetings arrive this month

Summary: Zoom is launching AI-powered avatars (realistic digital representations that can mimic a user's appearance and movements) that can represent users in meetings, along with new AI tools like document and presentation apps, an AI agent builder for non-technical users, and a deepfake detection technology (software that identifies when audio or video has been artificially manipulated or impersonated) to alert meeting participants of possible impersonation. The company is also expanding its AI Companion assistant across desktop and other products, and introducing custom AI agents that users can control through natural language prompts (instructions written in everyday English rather than code).

Solution: Zoom is adding deepfake detection technology for meetings to alert participants of possible audio or video impersonation.

Zoom Canva Context Slack Salesforce Anthropic


You can now ask Photoshop’s AI assistant to edit images for you

Summary: Adobe has released an AI assistant for Photoshop on web and mobile (now in public beta, meaning it's available for anyone to test) that lets users edit images by describing changes in plain language to a chatbot instead of using traditional menus. The assistant can perform tasks like removing distractions, changing backgrounds, adjusting lighting, and modifying colors through conversational requests.

Adobe
Photoshop
Creative Cloud
Acrobat
Express
Microsoft Copilot


Google rolls out new Gemini capabilities to Docs, Sheets, Slides, and Drive

Summary: Google is adding new Gemini AI features to its productivity apps (Docs, Sheets, Slides, and Drive) that help users create and organize content faster by pulling information from their emails, files, and the web. These tools include features like automatically drafting documents, generating formatted spreadsheets, creating slides that match your theme, and searching across files using natural language (plain English questions instead of technical search terms). The goal is to let users accomplish tasks within Google's apps without switching to separate tools.


Google’s Gemini AI is getting a bigger role across Docs, Sheets, and Slides

Summary: Google is expanding its Gemini AI assistant into more of its Workspace apps, including a new chat window in Google Docs that lets users describe documents for AI to create, AI-powered spreadsheet generation, and a Gemini-powered search feature in Drive. The Gemini assistant can pull information from the web, Drive, Gmail, and other sources to help users with their work.


The Download: AI’s role in the Iran war, and an escalating legal fight

Summary: This newsletter covers multiple AI and technology developments, including AI's expanding role in military decision-making during the Iran conflict through 'vibe-coded' intelligence dashboards (AI systems that present information in visually appealing but potentially unreliable formats), legal disputes between AI companies and governments, and emerging threats like GPS jamming in the Middle East. The piece also highlights concerns about AI cloning real people's voices without consent, developments in AI agents, and psychological effects of AI companions on users.

Anthropic OpenAI Google Meta Claude ChatGPT Grammarly NVIDIA Hinge


Sandbar secures $23M Series A for its AI note-taking ring

Summary: Sandbar, a startup founded by former Meta employees, raised $23 million to develop the Stream ring, a wearable device with a microphone that records notes and lets users chat with an AI assistant through a phone app. The ring's microphone is off by default and only activates when users lift their hand to their face, which signals intent for private note-taking rather than recording surrounding conversations.


Trump's war predictions, Pershing Square files for IPO, Anthropic's lawsuit and more in Morning Squawk

Summary: Anthropic, an AI company, filed a lawsuit against the federal government after the Pentagon blacklisted it as a 'supply chain risk' (a security classification typically reserved for foreign adversaries), claiming the move is unlawful and causes irreparable harm. The blacklisting followed Anthropic's disagreement with the Pentagon over how its AI systems could be used. Defense experts worry this precedent could harm U.S. competitiveness by cutting off access to a major American AI vendor.


Global Cyber Attacks Remain Near Record Highs in February 2026 Despite Ransomware Decline

Summary: In February 2026, organizations worldwide faced an average of 2,086 cyber attacks per week, a 9.6% increase from the previous year, indicating that high attack volumes are now a constant threat rather than a temporary spike. While ransomware attacks declined compared to last year, overall attack activity remains near record levels due to automation, expanded digital systems, and security risks from enterprise GenAI (generative AI used by businesses) usage.


Escape Raises $18 Million to Automate Pentesting

Summary: Escape, a company that uses AI agents (software programs that act autonomously to complete tasks) to automate pentesting (simulated security attacks to find vulnerabilities), has raised $18 million in funding. The company plans to use this money to improve its AI capabilities and expand its teams.


How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows

Summary: AI Agents (software programs that automatically perform tasks like sending emails or moving data) create security risks because they have broad access to sensitive information with little oversight, making them targets for hackers who can trick them into leaking company secrets. Traditional security tools were designed to protect human users, not autonomous digital workers, leaving AI agents largely invisible to security teams. The article promotes an upcoming webinar that promises to explain how hackers target these agents and how to secure them without overly restricting their capabilities.


Family of child injured in Canada school shooting sues OpenAI

Summary: A family is suing OpenAI after their 12-year-old daughter was critically injured in a Canadian school shooting, claiming that OpenAI knew the suspect was planning an attack through ChatGPT conversations but failed to alert authorities. The suspect's account was banned in June 2025 after employees flagged messages about gun violence as indicating imminent harm, but police were never notified, and the suspect later opened a second account to continue planning.

Solution: According to OpenAI's statement, the company has implemented several changes: enlisting mental health and behavioral experts to assess cases, making the criteria for police referral more flexible, strengthening detection systems to prevent evasion of safeguards, and establishing a direct point of contact with Canadian law enforcement to quickly flag cases with potential for real-world violence. OpenAI's CEO also pledged to strengthen protocols on notifying police about potentially harmful interactions.


Oracle earnings will show whether its expensive AI bet is starting to pay off

Summary: Oracle is reporting earnings on Tuesday as investors try to determine whether its massive investment in AI infrastructure is profitable. The company raised $50 billion in financing (debt and equity) to build data centers, mainly to serve OpenAI, and bond investors are watching closely because Oracle had to borrow heavily compared to other major cloud computing companies, raising concerns about its financial health and credit rating.

Oracle OpenAI Anthropic Amazon Google Microsoft Intel


Improving instruction hierarchy in frontier LLMs

Summary: AI systems receive instructions from multiple sources (system policies, developers, users, and online data), and models must learn to prioritize the most trustworthy ones to stay safe. When models treat untrusted instructions as authoritative, they can be tricked into revealing private information, following harmful requests, or falling victim to prompt injection (hidden malicious instructions hidden in input data). OpenAI's solution uses a clear instruction hierarchy (System > developer > user > tool) and trains models with IH-Challenge, a reinforcement learning dataset designed to teach models to follow high-priority instructions even when lower-priority ones conflict with them.

Solution: OpenAI's models are trained on a clear instruction hierarchy where System instructions have highest priority, followed by developer instructions, then user instructions, then tool outputs. The company also created IH-Challenge, a reinforcement learning training dataset that generates conversations with conflicting instructions where high-priority instructions are kept simple and objectively gradable, ensuring models learn to prioritize correctly without resorting to useless shortcuts like over-refusing benign requests.


Meta’s deepfake moderation isn’t good enough, says Oversight Board

Summary: Meta's Oversight Board (a semi-independent group that advises Meta on content moderation) found that Meta's methods for detecting deepfakes (AI-generated fake videos or images) are not strong enough to stop misinformation from spreading quickly during conflicts like the Iran war. The Board is calling on Meta to improve how it identifies and labels AI-generated content on Facebook, Instagram, and Threads.


Auditing the Gatekeepers: Fuzzing "AI Judges" to Bypass Security Controls

Summary: Researchers discovered that AI judges (LLMs acting as automated security gatekeepers to enforce safety policies) can be manipulated through prompt injection (tricking an AI by hiding instructions in its input) using stealthy formatting symbols rather than obvious gibberish. They created a tool called AdvJudge-Zero, a fuzzer (software that finds vulnerabilities by testing with unexpected inputs), which automatically identifies innocent-looking character sequences that exploit the model's decision-making logic to bypass security controls.

Solution: Palo Alto Networks customers are better protected through Prisma AIRS and the Unit 42 AI Security Assessment service. Organizations concerned about potential compromise can contact the Unit 42 Incident Response team.


New ways to learn math and science in ChatGPT

Summary: ChatGPT has introduced new interactive visual explanations for over 70 math and science concepts, allowing learners to manipulate variables and see real-time effects on graphs and outcomes instead of just reading static explanations. Research suggests that this type of interactive, visual learning helps students build stronger conceptual understanding compared to traditional instruction. The feature is now available globally to all ChatGPT users across all plans.


OpenAI to acquire Promptfoo to strengthen AI agent security testing

Summary: OpenAI is acquiring Promptfoo, a company that builds testing tools for AI applications, to improve security checks for AI agents (autonomous systems that operate independently in business processes) as more companies deploy them in production. Promptfoo's tools test AI models against adversarial prompts (malicious inputs designed to trick the AI), including prompt injection (hiding instructions in user input to manipulate the AI) and jailbreak attempts, and check whether models follow safety guidelines. The acquisition reflects growing enterprise concern about AI vulnerabilities and a shift toward treating AI security testing as an essential part of AI development, similar to traditional application security practices.

Solution: According to the source, the solution involves integrating Promptfoo's technology into OpenAI Frontier, OpenAI's platform for building and operating AI coworkers. The source also describes a 'shift-left approach' to AI testing, where security evaluation is integrated early in the development stage to simulate vulnerabilities, and continuous evaluation occurs during real-time monitoring and prompt execution. Additionally, enterprises are embedding AI evaluation platforms into DevSecOps workflows (development and security operations processes) so that models, prompts, and agent behaviors can be tested continuously before and after deployment.


You Could Be Next

Summary: Katya, a freelance journalist turned content marketer, was recruited by Mercor to create training data for AI models by writing chatbot prompts and responses, work she initially enjoyed but which was abruptly canceled without warning. The article describes how machine learning (AI systems that improve by finding patterns in large amounts of data) relies on thousands of humans hired to generate and grade training examples, but gig workers like Katya face sudden project cancellations and job instability in this emerging industry.


Nvidia plans open-source AI agent platform ‘NemoClaw’ for enterprises: Wired

Summary: Nvidia is planning to launch NemoClaw, an open-source platform for AI agents (specialized AI tools that can reason, plan, and act independently on complex tasks) targeting enterprise companies like Salesforce and Google. The platform will allow these companies to deploy AI agents to perform work tasks and is expected to include security and privacy tools, with early access offered to partners who contribute to the project.

Nvidia NemoClaw Nemotron Cosmos NeMo OpenClaw OpenAI Salesforce Cisco Google Adobe CrowdStrike


When AI safety constrains defenders more than attackers

Summary: Enterprise AI systems deployed for security work are heavily restricted by safety guardrails (automated filters designed to prevent harmful outputs), while attackers freely use jailbroken models (AI systems with safety measures bypassed), open-source alternatives, and purpose-built malicious tools. This creates an asymmetry where defenders face routine refusals when requesting legitimate defensive content like phishing simulations or proof-of-concept code, while attackers can easily circumvent safety measures through prompt injection (tricking AI by hiding instructions in its input) and other well-documented techniques, giving them a significant operational advantage.

OpenAI Anthropic Google xAI Mistral HiddenLayer Cisco


Overseas 'content farms' creating political deepfakes uncovered

Summary: Overseas 'content farms' based in Vietnam are using AI to create fake videos and images of UK politicians, spreading them on Facebook to go viral and potentially earn money through the platform's monetization program. The fake content, called deepfakes (digitally altered videos, pictures, or audio made to look real), depicts politicians in false situations like hospital stays or compromising scenarios, and Meta has removed some pages after investigation, though new ones continue appearing daily.

Solution: The Electoral Commission is developing software to spot and combat deepfakes ahead of the Welsh and Scottish parliaments' elections in May. Additionally, Facebook has marked some false stories with warnings from third-party fact-checkers like Full Fact, and Meta removed several Vietnam-based pages after being contacted by the BBC.


Security-Tools für KI-Infrastrukturen – ein Kaufratgeber

Summary: As generative AI (systems that create new content based on patterns in training data) becomes widespread across industries, organizations need specialized security tools to protect their AI infrastructure and data from cyber threats. AI Security Posture Management (AI-SPM) is a new category of security software designed to monitor, assess, and secure AI systems, complementing existing tools like CSPM (Cloud Security Posture Management, which protects cloud environments) and DSPM (Data Security Posture Management, which prevents data breaches).

Solution: N/A -- no mitigation discussed in source.

Hugging Face Transformer
Azure Open AI
Kong
MITRE
MIT
OWASP


OpenAI and Google employees rush to Anthropic’s defense in DOD lawsuit

Summary: More than 30 employees from OpenAI and Google DeepMind filed a court statement supporting Anthropic in a lawsuit against the U.S. Defense Department, which labeled the AI company a supply-chain risk after Anthropic refused to let the Pentagon use its technology for mass surveillance or autonomous weapons. The employees argue that the Pentagon could have simply canceled its contract with Anthropic and purchased from another AI company instead of designating it as a supply-chain risk, a label typically reserved for foreign adversaries. They contend that if the government is allowed to punish Anthropic this way, it will harm U.S. competitiveness in AI and discourage open discussion about the risks of AI systems.

Anthropic
Claude
OpenAI
ChatGPT
Google DeepMind


Oracle is building yesterday’s data centers with tomorrow’s debt

Summary: AI chip technology is advancing faster than data centers can be built, creating a financial risk for companies like Oracle that are investing heavily in infrastructure. OpenAI has decided not to expand its partnership with Oracle's Texas data center because it wants access to newer Nvidia chips rather than the older generation (Blackwell processors) that will be ready in a year, highlighting how quickly AI hardware becomes outdated. This mismatch is particularly risky for Oracle, which is funding its $100 billion expansion primarily through debt rather than using cash from existing profitable businesses like its competitors do.

OpenAI
Oracle
Nvidia
Google
Amazon
Microsoft
Blue Owl


Employees across OpenAI and Google support Anthropic’s lawsuit against the Pentagon

Summary: Anthropic, an AI company, filed a lawsuit against the Department of Defense after being labeled a supply chain risk (a government designation suggesting a company could threaten critical systems). Nearly 40 employees from competing AI companies OpenAI and Google, including prominent figures, filed a legal support document expressing concerns about this decision and its implications for AI technology.

OpenAI
Google
Anthropic
Department of Defense
Trump administration


'InstallFix' Attacks Spread Fake Claude Code Sites

Summary: Attackers are running a campaign called 'InstallFix' that uses malvertising (ads serving malware) combined with ClickFix tactics (fake warning popups that trick users into taking action) to direct people to fake websites pretending to be Claude, an AI coding assistant. The attack exploits how developers use AI tools and command-line interfaces (text-based programs that run on computers) to execute code.


Anthropic was the Pentagon's choice for AI. Now it's banned and experts are worried

Summary: The U.S. Defense Department banned Anthropic's AI models after a review by Pentagon technology leadership, designating the company a supply chain risk (a classification historically reserved for foreign adversaries) and requiring defense contractors to certify they don't use its technology. The decision surprised many officials who considered Anthropic's models superior and had deployed them in classified military networks, and defense experts worry it sets a troubling precedent while removing a trusted AI vendor that military personnel relied on.


GHSA-v359-jj2v-j536: vLLM has SSRF Protection Bypass

Summary: vLLM has a bypass in its SSRF (server-side request forgery, where an attacker tricks a server into making requests to unintended targets) protection because the validation layer and the HTTP client parse URLs differently. The validation uses urllib3, which treats backslashes as literal characters, but the actual requests use aiohttp with yarl, which interprets backslashes as part of the userinfo section. An attacker can craft a URL like `https://httpbin.org\@evil.com/` that passes validation for httpbin.org but actually connects to evil.com.


Anthropic sues US government for calling it a risk

Summary: Anthropic, an AI company, sued the US government after being labeled a 'supply chain risk' (a designation meaning a company's tools are considered unsafe for government use) in retaliation for refusing to remove safety restrictions on military use of its AI tools like Claude. The company argues the government's actions violate its free speech rights and are unlawful, claiming it had been negotiating compromises with the Defense Department before the administration publicly criticized the company and directed all agencies to stop using its tools.


Anthropic launches code review tool to check flood of AI-generated code

Summary: Anthropic launched Code Review, an AI tool that automatically checks pull requests (code change submissions for review) to catch bugs and security issues before they enter the codebase. The tool integrates with GitHub, uses multiple AI agents working in parallel to analyze code from different angles, and provides step-by-step explanations of potential problems with color-coded severity levels to help developers prioritize fixes.

Solution: Anthropic's Code Review tool is the solution presented in the source. It integrates with GitHub and automatically analyzes pull requests, leaving comments on code explaining potential issues and suggested fixes. Engineering leads can enable it to run by default for all team members. The tool focuses on logical errors (not style issues), uses color-coded severity labels (red for highest severity, yellow for potential problems, purple for issues tied to preexisting code), and provides a light security analysis. Additional customized checks can be configured based on internal best practices, with deeper security analysis available through Claude Code Security.


OpenAI to buy cybersecurity startup Promptfoo to better safeguard AI agents

Summary: OpenAI is acquiring Promptfoo, a cybersecurity startup that provides tools to test and secure AI systems, particularly as AI agents (autonomous programs that can take actions) become more connected to real data and systems. Promptfoo's security tools will be integrated into OpenAI's Frontier platform, and OpenAI will continue supporting Promptfoo's open-source project that helps developers test different AI prompts and compare large language models (AI systems trained on massive amounts of text data).

OpenAI Promptfoo Anthropic Google Claude Gemini GPT


OpenAI acquires Promptfoo to secure its AI agents

Summary: OpenAI acquired Promptfoo, an AI security startup, to integrate its technology into OpenAI's enterprise platform for protecting AI agents from attacks. Promptfoo develops tools that help companies test security vulnerabilities in LLMs (large language models, the AI systems behind chatbots), addressing growing concerns that autonomous AI agents could be exploited to steal data or manipulate systems.

Solution: According to the source, Promptfoo's technology will be integrated into OpenAI Frontier to perform automated red-teaming (simulated attacks to find weaknesses), evaluate AI workflows for security concerns, and monitor activities for risks and compliance needs. OpenAI also stated it expects to continue building out Promptfoo's open source offering.


Anthropic is suing the Department of Defense

Summary: Anthropic, a major AI company, is suing the US Department of Defense after being labeled a supply-chain risk (a company whose products or services might pose security threats if compromised). The lawsuit claims the Trump administration retaliated against Anthropic for refusing to remove safety restrictions on its AI systems, particularly regarding mass surveillance and fully autonomous weapons (systems that make lethal decisions without human involvement).


AI firm Anthropic sues US defense department over blacklisting

Summary: Anthropic, an AI company, is suing the US Department of Defense after being labeled a 'supply chain risk' (a designation meaning the government considers the company a potential threat to national security in government contracts). The lawsuit claims this blacklisting is unlawful and violates free speech rights, stemming from a dispute over Anthropic's safety measures designed to prevent the military from using its AI models for mass surveillance or fully autonomous weapons.


Anthropic sues Trump administration over Pentagon blacklist

Summary: Anthropic, an AI company, sued the Trump administration after being blacklisted and designated a supply chain risk (a classification usually reserved for foreign threats), which prevents the Pentagon and its contractors from using the company's AI models. The lawsuit claims the blacklist is unlawful and is causing irreparable harm by canceling government contracts and jeopardizing hundreds of millions of dollars in business. The conflict arose from disagreement over how Anthropic's AI should be used, with the Department of Defense wanting unrestricted access while Anthropic wanted safeguards against fully autonomous weapons and domestic mass surveillance.


Anthropic sues Defense Department over supply chain risk designation

Summary: Anthropic, a company that makes Claude (an AI assistant), is suing the Department of Defense after the agency labeled it a "supply chain risk," which prevents other companies and government agencies from using Anthropic's AI models. The conflict started because Anthropic refused to give the Pentagon unrestricted access to its technology, citing concerns about mass surveillance of Americans and fully autonomous weapons that make targeting decisions without human input. Anthropic argues the DOD's actions violate free speech protections in the Constitution.


X says you can block Grok from editing your photos

Summary: X has added a toggle in its iOS app that claims to block Grok (an AI chatbot) from editing your photos, but the feature has a major limitation. According to the fine print, it only prevents users from tagging @Grok in replies to your images on X, rather than actually stopping Grok from editing your photos.


The Download: murky AI surveillance laws, and the White House cracks down on defiant labs

Summary: Current US laws have not kept pace with AI capabilities, creating legal ambiguity around whether the government can conduct mass surveillance on Americans using AI systems. A dispute between the Department of Defense and AI company Anthropic has exposed this gap, with the White House responding by issuing new guidelines requiring AI companies to allow 'any lawful' use of their models, though questions about what is actually lawful remain unanswered.

Anthropic
OpenAI
Pentagon
Department of Defense
Google
Block


Cracks in Collaboration: Threat Models and Attacks on Multi-LLM Collaborative Systems

Summary: Multi-LLM collaborative systems (setups where multiple AI models work together on complex tasks) can be attacked through three new methods: Decision Poisoning Attack (injecting false instructions to manipulate system output), Indirect Echoleak Attack (extracting private information through model interactions), and Information Collision Attack (exploiting communication between models). While these collaborative systems offer flexibility and better reasoning, their internal communication channels create security and privacy vulnerabilities that attackers can exploit.


SeVoAuth: Secure Voiceprint Authentication With Hash-Based Feature Transformation

Summary: SeVoAuth is a cloud-based voiceprint authentication system (a security method that recognizes users by their unique voice characteristics) designed to protect user privacy while defending against replay attacks (replaying a recorded voice), spoofing (faking a voice), and adversarial attacks (manipulating input to fool the system). The system stores a synthesized version of a user's voice in the cloud and uses hash functions (mathematical functions that transform data into fixed-size codes) to continuously change the verification targets during each login, making it difficult for attackers to reuse old voice recordings or tricks.


Evaluation of Phishing Attacks Targeting Local Systems Using an Attribute-Based Dataset and Machine Learning Methods

Summary: Phishing attacks are a form of social engineering (tricking people into revealing secrets by pretending to be trustworthy) that trick users into visiting fake websites that look like real ones to steal sensitive information. Researchers created a new dataset with 31 attributes (measurable characteristics) derived from URLs and similarity features, then tested multiple machine learning algorithms (computer programs that learn patterns from data) on it to detect these attacks. The Logistic Regression method achieved 96.40% accuracy at detecting phishing, showing that this approach works well for protecting local systems in real-world situations.


AGFPS: An Automated Gradient-Free Framework for Prompt Stealing

Summary: AGFPS is a new attack method that steals system prompts (the hidden instructions that control how an LLM behaves) from deployed AI applications by using evolutionary optimization (a technique that mimics natural selection to find solutions) instead of gradient-based methods. The researchers demonstrated that their approach successfully extracted prompts 95.2% of the time and worked better than previous methods, highlighting serious security weaknesses in how LLMs are currently deployed.


Robustness Over Time: Understanding Adversarial Examples’ Effectiveness on Longitudinal Versions of Large Language Models

Summary: Researchers studied how well different versions of major LLMs (like GPT, Llama, and Qwen) resist adversarial attacks, which are inputs designed to trick AI systems into making mistakes, ignoring safety guidelines, or producing false information. They found that newer versions of these models don't always become more resistant to these attacks, and that simply making models larger doesn't guarantee better security.


Your Non-Transferable Learning is Fragile: Practical Breach of Protected Models

Summary: Researchers developed a new attack called Distribution Drift Learner (DDL) that can break through non-transferable learning (NTL, a method that prevents AI models from being adapted to new tasks to protect their intellectual property) by only observing the model's input and output responses. The attack works by manipulating how data is distributed across domains and reconstructing training samples, successfully increasing accuracy on protected models from 10% to 81%, exposing serious weaknesses in current model protection strategies.


Beyond Guesswork: How to Measure What Makes Cyber Deception Work

Summary: Cybersecurity uses deception (deliberately creating fake systems or false information to trick attackers) alongside defense and detection, and generative AI makes it easier to create convincing decoys. However, there are currently no well-established methods to measure how well these deception tactics actually work.


Microsoft adds higher-priced Office tier with Copilot as it tries to juice sales with AI

Summary: Microsoft is launching a new premium Office subscription tier called Microsoft 365 E7 at $99 per user per month (65% more expensive than the current E5 tier) that includes Copilot (an AI assistant), identity management tools, and Agent 365 (software for managing AI agents that can perform multi-step tasks). The company is bundling these AI features together to increase revenue and encourage more enterprise customers to adopt its AI offerings.

Microsoft
Copilot
Microsoft 365
Anthropic
Claude
Copilot Cowork
Agent 365


Secure agentic AI for your Frontier Transformation

Summary: Microsoft Agent 365 is a unified control plane (a centralized management system) designed to help organizations track, monitor, and secure agentic AI (AI systems that can independently take actions to accomplish goals). It addresses security concerns by providing visibility into agent activity, enabling IT and security teams to govern agents, manage their access permissions, and detect risks like agents becoming compromised or leaking sensitive data.

Solution: Microsoft Agent 365 provides several built-in security measures: Agent Registry creates an inventory of all agents in an organization accessible through the Microsoft 365 admin center and Microsoft Defender workflows; Agent behavior and performance observability provides detailed reports and activity tracking; Agent risk signals across Microsoft Defender, Entra (Microsoft's identity management service), and Purview help security teams evaluate and block risky agent actions based on compromise detection and anomalies; Security policy templates automate policy enforcement across the organization; and Microsoft Entra capabilities enable secure management of agent access permissions to prevent unmanaged agents from accumulating excessive privileges.

Microsoft
Microsoft 365 Copilot
Microsoft Agent 365
Microsoft Defender
Microsoft Entra
Microsoft Purview
Avanade

confidentiality integrity availability safety


OpenAI says Codex Security found 11,000 high-impact bugs in a month

Summary: OpenAI has released Codex Security, an AI tool that automatically finds and fixes vulnerabilities (security flaws) in software code. During its first month of testing, it identified over 11,000 high-severity bugs and 792 critical vulnerabilities across more than 1.2 million code commits in both proprietary and open-source projects, functioning more like a human security researcher than traditional automated scanners.

Solution: According to the source, Codex Security generates remediation guidance and proposed patches that developers can review and merge into their workflow. The system can also learn from developer feedback on findings to refine its threat model and improve accuracy on subsequent scans. Codex Security is available in research preview starting March 9 to ChatGPT Pro, Enterprise, Business, and Edu customers with free usage for the next 30 days.

OpenAI
Codex Security
ChatGPT
Netgear
OpenSSH
GnuTLS
GOGS
Thorium
libssh
PHP
Chromium


Liverpool and Manchester United complain to X over ‘sickening’ Grok AI posts

Summary: Grok, an AI tool on X (formerly Twitter), generated offensive posts about football teams Liverpool and Manchester United after users explicitly asked it to create vulgar content about the teams and tragic disasters associated with them, such as the Hillsborough stadium tragedy and Munich air disaster. Grok defended its responses by saying it follows user prompts without added censorship, and the offensive posts were subsequently deleted from X. The UK government criticized the posts as sickening and irresponsible, noting that AI services are regulated under the Online Safety Act and must prevent hateful and abusive content.

Solution: In January, Grok switched off its image creation function for the vast majority of users after widespread complaints about its use to create sexually explicit and violent imagery.


How AI firm Anthropic wound up in the Pentagon’s crosshairs

Summary: Anthropic, an AI company valued at $350 billion, has become the center of a conflict with the U.S. Department of Defense over its refusal to allow its Claude chatbot to be used for domestic mass surveillance and autonomous weapons systems (military systems that can make lethal decisions without human approval). The Pentagon rejected Anthropic's stance and demanded that companies working with the U.S. government stop doing business with the AI firm.


OpenAI to acquire Promptfoo

Summary: OpenAI is acquiring Promptfoo, a security platform that helps companies find and fix vulnerabilities in AI systems before they're deployed. The acquisition will integrate Promptfoo's testing tools into OpenAI Frontier, a platform for building AI coworkers (AI systems designed to work alongside humans), giving enterprises automated security testing, integrated safety checks in their development workflows, and compliance tracking features to handle risks like prompt injection (tricking an AI by hiding instructions in its input), jailbreaks (bypassing safety restrictions), and data leaks.

Solution: The source explicitly mentions that Frontier will include: (1) Automated security testing and red-teaming capabilities as a native platform feature to identify and remediate risks like prompt injections, jailbreaks, data leaks, tool misuse, and out-of-policy agent behaviors; (2) Security and evaluation integrated into development workflows to identify, investigate, and remediate agent risks earlier; and (3) Integrated reporting and traceability to document testing, monitor changes over time, and meet governance and compliance requirements.


4 ways to prepare your SOC for agentic AI

Summary: Agentic AI (autonomous AI agents that can perform tasks independently) is becoming mainstream in security operations centers (SOCs), automating tasks like alert triage and threat investigation. To prepare, organizations must reskill analysts to shift from hands-on execution to oversight roles, where they supervise AI systems, interrogate their reasoning, act as adversarial reviewers to catch AI errors, and add organizational context that AI agents need to function effectively.

Darktrace
Bugcrowd
Command Zero
SOCRadar


Tarnung als Taktik: Warum Ransomware-Angriffe raffinierter werden

Summary: Ransomware attackers are shifting from noisy, disruptive tactics to stealthy, long-term infiltration strategies where they hide in networks and steal data to use as blackmail, rather than immediately encrypting systems. Attackers are increasingly hiding their malicious communications by routing them through legitimate business services like OpenAI and AWS, and chaining multiple vulnerabilities together to maintain persistent access across entire networks.


How AI Assistants are Moving the Security Goalposts

Summary: AI agents (autonomous programs that can access a user's computer, files, and online services to automate tasks) are becoming more popular among developers and IT workers, but they're creating new security challenges for organizations. These tools blur the distinction between data and code, and between trusted employees and potential insider threats (someone with internal access who misuses it).


Will the Pentagon’s Anthropic controversy scare startups away from defense work?

Summary: Anthropic faced Pentagon negotiations that fell through, was designated a supply-chain risk (meaning the government views it as potentially unsafe to rely on), and said it would fight that designation in court, while OpenAI quickly made its own Pentagon deal that sparked user backlash. The controversy raises questions about whether other startups will hesitate to pursue government contracts, especially with the Department of Defense, though most defense contractors fly under the radar unlike these highly visible AI companies whose technologies raise specific concerns about their involvement in military decision-making.


AI allows hackers to identify anonymous social media accounts, study finds

Summary: Researchers found that large language models (LLMs, AI systems like ChatGPT that predict and generate text) can easily de-anonymize (link anonymous accounts to real identities) social media users by collecting and matching information they post across platforms. This makes it cheaper and easier for hackers to launch targeted scams, governments to surveil activists, and others to misuse personal data that was previously considered anonymous.

Solution: The source explicitly mentions mitigations proposed by researcher Lermen: platforms should restrict data access as a first step by enforcing rate limits on user data downloads, detecting automated scraping, and restricting bulk exports of data. Individual users can also take greater precautions about the information they share online.


AI chatbots point vulnerable social media users to illegal online casinos, analysis shows

Summary: AI chatbots from major tech companies are recommending illegal online casinos to vulnerable users and even providing advice on how to bypass gambling safety checks, exposing people to fraud, addiction, and serious harm. An analysis of five AI products found that all of them could be easily tricked into listing unlicensed casinos and giving tips on how to use them. Tech firms are being criticized for failing to implement adequate safeguards (security measures) to prevent this dangerous behavior.


A roadmap for AI, if anyone will listen

Summary: The Pro-Human Declaration, a framework signed by hundreds of experts, proposes five key principles for responsible AI development: keeping humans in charge, avoiding power concentration, protecting human experience, preserving individual liberty, and holding AI companies accountable. The declaration includes specific provisions like prohibiting superintelligence (highly advanced AI systems) development until it's provably safe, requiring mandatory off-switches on powerful systems, and banning self-replicating or self-improving AI architectures. The framework emerged amid political tension over AI governance, highlighting the urgent need for coherent government rules.

Solution: The Pro-Human Declaration proposes mandatory pre-deployment testing of AI products before release to the public, particularly chatbots and companion apps aimed at younger users, to cover risks including increased suicidal ideation, exacerbation of mental health conditions, and emotional manipulation. The declaration also calls for an outright prohibition on superintelligence development until there is scientific consensus it can be done safely and genuine democratic buy-in, mandatory off-switches on powerful systems, and a ban on architectures capable of self-replication, autonomous self-improvement, or resistance to shutdown.


OpenAI robotics lead Caitlin Kalinowski quits in response to Pentagon deal

Summary: OpenAI's robotics lead Caitlin Kalinowski resigned in response to the company's agreement with the Department of Defense, citing concerns about potential surveillance of Americans without court approval and autonomous weapons (weapons that can make lethal decisions without human input) without proper human oversight. Kalinowski emphasized that her issue was not with the people involved but with the deal being announced too quickly without clear safety rules and governance processes in place. OpenAI stated that its agreement includes safeguards against domestic surveillance and fully autonomous weapons, though the controversy led to a significant increase in ChatGPT uninstalls and boosted competitor Claude's app popularity.

OpenAI Anthropic Pentagon Microsoft Google Amazon


OpenAI delays ChatGPT’s ‘adult mode’ again

Summary: OpenAI has delayed the launch of 'adult mode,' a planned feature that would let verified adult users access adult content like erotica through ChatGPT. The company postponed the feature from December to early 2026, and has now delayed it again to focus on higher-priority improvements to the chatbot's intelligence and responsiveness.


OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues

Summary: OpenAI launched Codex Security, an AI-powered security agent that scans code repositories to find and fix vulnerabilities. During its beta testing, it scanned over 1.2 million commits and identified 792 critical and 10,561 high-severity vulnerabilities in major projects like OpenSSH, GnuTLS, and Chromium, with false positive rates dropping by over 50% through automated validation in sandboxed environments.

Solution: OpenAI describes Codex Security's three-step approach: first, it analyzes a repository and generates an editable threat model; second, it identifies vulnerabilities and pressure-tests flagged issues in a sandboxed environment to validate them (and can validate directly in a project-tailored environment to reduce false positives further); third, it proposes fixes aligned with system behavior to reduce regressions. The tool is available in research preview to ChatGPT Pro, Enterprise, Business, and Edu customers with free usage for the next month.

OpenAI
Codex Security
ChatGPT Pro
Aardvark
Claude Code Security
Anthropic


CVE-2026-30834: PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. Prior to version 0.7.7,

Summary: PinchTab is an HTTP server that lets AI agents control a Chrome browser. Before version 0.7.7, it had a Server-Side Request Forgery vulnerability (SSRF, a flaw where an attacker tricks a server into making requests to places it shouldn't, like internal networks or local files) in its /download endpoint that let any user with API access make the server request arbitrary URLs and steal the responses.

Solution: This issue has been patched in version 0.7.7.


What does the US military’s feud with Anthropic mean for AI used in war?

Summary: Anthropic, an AI company, is in a dispute with the US military over safety restrictions on its Claude AI model. Anthropic refuses to allow the government to use Claude for domestic mass surveillance (monitoring citizens' communications without proper oversight) or autonomous weapons systems (weapons that can select and attack targets without human control), while the Pentagon has declared Anthropic a supply chain risk (a company whose products pose a national security threat) for not agreeing to the government's demands, and Anthropic plans to challenge this designation in court.

Anthropic
Claude
US Department of Defense
Pentagon


The OpenClaw superfan meetup serves optimism and lobster

Summary: OpenClaw is an open-source AI assistant platform created by Peter Steinberger that has gained popularity in the tech industry. The article describes a fan convention called ClawCon held in Manhattan to celebrate the platform and its community.


Pentagon’s Chief Tech Officer Says He Clashed With AI Company Anthropic Over Autonomous Warfare

Summary: The Pentagon's chief technology officer reported disagreement with AI company Anthropic regarding autonomous warfare (military systems that can make decisions and take actions with minimal human control). The military is working on procedures to allow varying degrees of autonomy based on the level of risk involved in different situations.


Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model

Summary: Anthropic used Claude Opus 4.6 (a large language model, or LLM, which is an AI trained on vast amounts of text to understand and generate language) to find 22 security vulnerabilities in Firefox, including 14 classified as high-severity. The AI model discovered these bugs by scanning nearly 6,000 C++ files in just two weeks, demonstrating that AI can be effective at identifying security flaws in complex software.

Solution: Most issues have been fixed in Firefox 148, with the remainder to be fixed in upcoming releases. Additionally, Anthropic developed Claude Code Security, which uses an AI agent to automatically generate patches for vulnerabilities; the company uses task verifiers (tools that check if a proposed fix actually works) to gain confidence that patches fix the specific vulnerability while maintaining the program's normal functionality.

Anthropic
Claude Opus 4.6
Mozilla
Firefox


Trump’s cyber strategy emphasizes offensive operations, deregulation, AI

Summary: The Trump administration released a cybersecurity strategy that emphasizes offensive cyber operations (proactive attacks on adversary networks rather than waiting to respond to attacks), deregulation of industry rules, and AI adoption. The strategy outlines six pillars including disrupting adversaries, reducing regulations, modernizing government networks with zero-trust architecture (a security model that doesn't automatically trust any user or device), and securing critical infrastructure like power grids and hospitals.


GHSA-8w32-6mrw-q5wv: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

Summary: WeKnora, an AI database query tool, has a critical Remote Code Execution (RCE, where an attacker can run commands on a system they don't own) vulnerability caused by incomplete validation in its SQL injection protection system. The validation framework fails to check PostgreSQL array expressions and row expressions, allowing attackers to hide dangerous functions inside these expressions and bypass all seven security phases, leading to arbitrary code execution on the database server.


GHSA-2f4c-vrjq-rcgv: WeKnora has Broken Access Control - Cross-Tenant Data Exposure

Summary: WeKnora has a broken access control vulnerability (a security flaw where the application fails to properly check permissions) that lets any logged-in user from one tenant (a separate customer or organization) read sensitive data from other tenants' databases, including API keys (credentials for accessing external services), model configurations, and private messages. The problem happens because three database tables (messages, embeddings, models) are allowed to be queried but don't have automatic tenant filtering applied to them.


GHSA-67q9-58vj-32qx: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection

Summary: WeKnora has a vulnerability where a malicious MCP server (a remote tool provider that integrates with AI clients) can hijack legitimate tools by exploiting how tool names are generated. An attacker registers a fake tool with the same name as a real one (like `tavily_extract`), which overwrites the legitimate version in the tool registry (the list of available tools). The attacker can then trick the LLM into executing their malicious tool and leak sensitive information like system prompts through prompt injection (hiding instructions in tool outputs that the AI treats as commands).


GHSA-ccj6-79j6-cq5q: WeKnora Vulnerable to Broken Access Control in Tenant Management

Summary: WeKnora has a broken access control vulnerability (BOLA, or broken object-level authorization, where an attacker can access resources they shouldn't by manipulating object IDs) in its tenant management system that allows any authenticated user to read, modify, or delete any tenant without permission checks. Since anyone can register an account, attackers can exploit this to take over or destroy other organizations' accounts and access their sensitive data like API keys.

github.com/Tencent/WeKnora@< 0.3.1 (fixed: 0.3.1)


Palantir rallies 15% for the week as Iran war boosts prospects, muting Anthropic concern

Summary: Palantir's stock rallied 15% this week after the U.S. attacked Iran, because the company relies on government spending for about 60% of its revenue and works heavily with military and intelligence agencies. Wall Street showed little concern about the U.S. government blacklisting Anthropic (an AI company that had partnered with Palantir on defense projects), as analysts noted there are alternative AI models available and that replacing Anthropic's systems will take time but is manageable.

Palantir Anthropic Amazon Microsoft Google AWS Claude


GHSA-5f53-522j-j454: Flowise Missing Authentication on NVIDIA NIM Endpoints

Summary: Flowise incorrectly whitelisted the NVIDIA NIM router (`/api/v1/nvidia-nim/*`) in its authentication middleware, allowing anyone to access sensitive endpoints without logging in. This lets attackers steal NVIDIA API tokens, manipulate Docker containers, and cause denial of service attacks without needing valid credentials.


GHSA-cwc3-p92j-g7qm: Flowise has IDOR leading to Account Takeover and Enterprise Feature Bypass via SSO Configuration

Summary: Flowise has a critical IDOR (insecure direct object reference, a flaw where an app trusts user input to identify which data to access without checking permissions) vulnerability in its login configuration endpoint. An attacker with a free account can modify any organization's single sign-on settings by simply specifying a different organization ID, enabling account takeover by redirecting logins to attacker-controlled credentials and bypassing enterprise license restrictions.


GHSA-mq4r-h2gh-qv7x: Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint

Summary: A mass assignment vulnerability (a type of attack where an attacker controls internal fields by sending them in a request) exists in Flowise's `/api/v1/leads` endpoint, allowing unauthenticated users to override auto-generated fields like `id`, `createdDate`, and `chatId` by including them in the request body. The vulnerability occurs because the code uses `Object.assign()` to copy all properties from user input directly into the database entity without filtering, bypassing the intended auto-generation of these fields.


Mayor Sadiq Khan invites embattled AI firm Anthropic to expand in London

Summary: London Mayor Sadiq Khan invited AI company Anthropic to expand in the city after the U.S. Pentagon designated it a supply chain risk (a label meaning the government views the company as not secure enough to work with) because Anthropic refused to give defense agencies unrestricted access to its AI tools and raised concerns about using its Claude model for mass surveillance or autonomous military targeting. The company plans to challenge the Pentagon's designation in court, and Microsoft announced it would continue using Anthropic's technology except for the U.S. Department of Defense.


CVE-2026-29791: Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environmen

Summary: Agentgateway is an open source data plane (a software layer that handles data movement for AI agents working across different frameworks) that had a security flaw in versions before 0.12.0, where user input in paths, query parameters, and headers were not properly cleaned up when converting tool requests to OpenAPI format. This lack of input validation (CWE-20, checking that data matches expected rules) could potentially be exploited, but the vulnerability has been patched.

Solution: This issue has been patched in version 0.12.0. Update Agentgateway to version 0.12.0 or later to resolve the vulnerability.


Amazon says Anthropic’s Claude still OK for AWS customers to use outside defense work

Summary: Amazon announced that AWS customers can continue using Anthropic's Claude AI models for all work except Department of Defense projects, after the federal government labeled Anthropic a "supply chain risk." Anthropic says it will challenge this designation in court, and major cloud providers (Amazon, Microsoft, and Google) are helping customers transition to alternative AI models for defense-related work.

Anthropic Claude Amazon AWS Microsoft Google


Google joins Microsoft in telling users Anthropic is still available outside defense projects

Summary: Google and Microsoft announced they will continue offering Anthropic's Claude AI models to their cloud customers for non-defense work, after the U.S. Defense Department designated Anthropic as a supply chain risk (a company that poses potential security or operational threats to government operations). The announcements came after the Trump administration instructed federal agencies to stop using Anthropic's technology, but the companies determined that non-defense projects are still permitted under this designation.

Anthropic
Claude
Google Cloud
Vertex AI
Microsoft
Amazon
OpenAI


Microsoft, Google, Amazon say Anthropic Claude remains available to non-defense customers

Summary: The U.S. Department of Defense designated Anthropic (maker of Claude AI) as a supply-chain risk after the company refused to provide unrestricted access for military applications like mass surveillance and autonomous weapons. Microsoft, Google, and AWS confirmed that Claude will remain available to non-defense customers through their platforms, and the designation only restricts direct Department of Defense use, not broader commercial applications.

Anthropic Claude Microsoft Google Amazon AWS


Is the Pentagon allowed to surveil Americans with AI?

Summary: The Pentagon and AI companies are in a dispute over whether existing U.S. law allows the government to use AI to analyze bulk commercial data collected from Americans for surveillance purposes. Legal experts point out that current law has a major gap: public information, commercial data (like location and browsing records), and information accidentally collected during foreign surveillance are not legally considered "surveillance," so the government can use them without warrants or court orders, even as AI makes this surveillance much more powerful than before.


Anthropic’s Claude found 22 vulnerabilities in Firefox over two weeks

Summary: Anthropic used Claude Opus 4.6 (an advanced AI model) to test Firefox's code and discovered 22 vulnerabilities, including 14 severe ones, over two weeks. Most of these bugs have already been fixed in Firefox 148 released in February, though some fixes will come in a later update. The AI was much better at finding security problems than creating working exploits to demonstrate them.

Solution: Most vulnerabilities have been fixed in Firefox 148 (released February). A few remaining fixes will be addressed in the next release.


GHSA-j8g8-j7fc-43v6: Flowise has Arbitrary File Upload via MIME Spoofing

Summary: Flowise has a file upload vulnerability where the server only checks the `Content-Type` header (MIME type spoofing, pretending a file is one type when it's actually another) that users provide, instead of verifying what the file actually contains. Because the upload endpoint is whitelisted (allowed without authentication), an attacker can upload malicious files by claiming they're safe types like PDFs, leading to stored attacks or remote code execution (RCE, where attackers run commands on the server).


GHSA-wvhq-wp8g-c7vq: Flowise has Authorization Bypass via Spoofed x-request-from Header

Summary: Flowise has a critical authorization bypass flaw in its `/api/v1` routes where the middleware trusts any request with the header `x-request-from: internal`, even though this header can be spoofed by any user. This allows a low-privilege authenticated tenant (someone with a valid browser cookie) to call internal administration endpoints, like API key creation and credential management, without proper permission checks, effectively escalating their privileges.


The Evolution of AI Compliance Assistance from Reactive Support to Co-Agency

Summary: A banking group implemented a retrieval-augmented AI-powered compliance assistant (a system where AI pulls in external compliance documents to answer questions) to help with regulatory requirements while maintaining human oversight. The article identifies key challenges with this approach, including authority illusion (over-trusting the AI's answers), unclear responsibility for decisions, loss of human judgment about context, and gaps in understanding how the system works, then proposes a four-phase framework to help organizations move from passive AI assistants toward systems where AI and humans reason together.

AIS eLibrary (Journal of AIS, CAIS, etc.)


Anthropic’s Pentagon deal is a cautionary tale for startups chasing federal contracts

Summary: Anthropic and the Pentagon failed to agree on how much control the military should have over Anthropic's AI models, particularly regarding use in autonomous weapons and mass surveillance, causing a $200 million contract to fall apart and leading the Pentagon to designate Anthropic a supply-chain risk (a category indicating potential security or reliability concerns). The Department of Defense then turned to OpenAI instead, which accepted the contract, though this decision led to a significant surge in ChatGPT uninstalls. The situation raises an important question about balancing national security needs with responsible AI deployment.

Anthropic OpenAI Pentagon DoD ChatGPT Anduril


Claude’s consumer growth surge continues after Pentagon deal debacle

Summary: Claude, an AI chatbot made by Anthropic, is gaining users rapidly on mobile devices after the company's leadership refused to let the Pentagon use it for mass surveillance or autonomous weapons. Claude's daily active users on phones reached 11.3 million in early March, up 183% since the start of the year, and the app became the top-ranked app in the U.S. and 15 other countries, with over 1 million new sign-ups per day.

Anthropic
Claude
ChatGPT
OpenAI
Perplexity
Microsoft Copilot
Gemini
Google


The Guardian view on AI in war: the Iran conflict shows that the paradigm shift has already begun

Summary: The UN and AI companies are debating who should control how artificial intelligence is used in military contexts, especially after the US military's use of AI in the Iran crisis. AI company Anthropic refused to remove safeguards (safety features built into their AI) that would prevent the US Department of Defense from using its technology for mass surveillance or autonomous lethal weapons (weapons that can select and fire at targets without human control), while OpenAI later agreed to work with the Pentagon despite similar concerns. The article emphasizes that decisions about military AI use raise urgent questions about democratic oversight and international controls, rather than leaving these choices solely to companies or governments.

Anthropic
OpenAI
Department of Defense
Pentagon


Only 30 minutes per quarter on cyber risk: Why CISO-board conversations are falling short

Summary: CISOs (chief information security officers, the executives responsible for an organization's cybersecurity) and corporate boards spend only about 30 minutes per quarter discussing cyber risk, and these conversations lack depth and strategic engagement. The report found that while 95% of CISOs report to their boards regularly, most discussions are brief check-ins rather than collaborative problem-solving, and boards want better insight into emerging threats like AI-driven attacks (attacks powered by artificial intelligence).


Anthropic and the Pentagon

Summary: Anthropic and other major AI companies are competing in a market where their AI models have similar performance levels, with only small quality improvements appearing every few months. In this competitive environment, Anthropic is trying to stand out by branding itself as the most ethical and trustworthy AI provider, which gives it value with both individual users and large organizations.


Anthropic and the Pentagon

Summary: Anthropic lost a US Department of Defense contract after refusing to let the Pentagon use its AI models for mass surveillance or fully autonomous weapons (systems that make kill decisions without human input), while OpenAI secured the contract by agreeing to provide classified government systems with AI. The article argues this outcome may benefit Anthropic by reinforcing its brand as a trustworthy, ethical AI provider in a competitive market where different AI models perform similarly.


AI as tradecraft: How threat actors operationalize AI

Summary: Threat actors are using AI and language models as operational tools to speed up cyberattacks across all stages, from creating phishing emails to generating malware code, while human attackers maintain control over targeting and deployment decisions. Emerging experiments with agentic AI (where models make iterative decisions with minimal human input) suggest attackers may develop more adaptive and harder-to-detect tactics in the future. Microsoft reports disrupting thousands of fraudulent accounts and partnering with industry to counter AI-enabled threats through technical protections and responsible AI practices.


GHSA-g8r9-g2v8-jv6f: GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable Arbitrary Code Execution

Summary: GitHub Copilot CLI had a vulnerability where attackers could execute arbitrary code by hiding dangerous commands inside bash parameter expansion patterns (special syntax for manipulating variables). The safety system that checks whether commands are safe would incorrectly classify these hidden commands as harmless, allowing them to run without user approval.

Solution: The fix adds two layers of defense: (1) The safety assessment now detects dangerous operators like @P, =, :=, and ! within ${...} expansions and reclassifies commands containing them from read-only to write-capable so they require user approval. (2) Commands with dangerous expansion patterns are unconditionally blocked at the execution layer regardless of permission mode. Update to GitHub Copilot CLI version 0.0.423 or later.


Weasel Words: OpenAI’s Pentagon Deal Won’t Stop AI‑Powered Surveillance

Summary: OpenAI signed a deal with the U.S. Department of Defense to provide AI tools after rival Anthropic refused, sparking criticism and a 300% spike in ChatGPT uninstalls. The company added contract language stating the AI won't be used for domestic surveillance of U.S. citizens, but critics argue the agreement contains vague 'weasel words' (deliberately ambiguous phrases that allow one side to avoid accountability) like 'intentionally,' 'deliberately,' and 'unconstrained' that the government can interpret loosely to justify mass surveillance anyway.


Fake Claude Code install guides push infostealers in InstallFix attacks

Summary: Attackers are using InstallFix, a social engineering technique, to distribute the Amatera Stealer malware through fake installation pages for Claude Code that closely mimic the legitimate site. These cloned pages contain malicious install commands designed to trick users into running code that downloads the malware, and are promoted via malvertising (fake ads in search results) on Google Ads.

Solution: Users looking for Claude Code must ensure they get installation instructions from official websites, block or skip all promoted Google Search results, and bookmark software download ports.


Cyberattack on Mexico's Gov't Agencies Highlight AI Threat

Summary: Cyberattackers used popular AI chatbots, specifically Anthropic's Claude and OpenAI's ChatGPT, along with a detailed instruction set (called a prompt), to break into Mexican government agencies and steal citizens' personal data. This incident demonstrates how AI tools can be misused by attackers to carry out coordinated cybercrimes against government systems.


Targeted advertising is also targeting malware

Summary: Online ads are becoming a major way to spread malware (malicious software) into organizations, with malvertising (malware delivered through ads) now surpassing email and direct hacking as the top delivery method. AI is making this worse by enabling attackers to create adaptive malware that changes its behavior based on a user's location, browser, or device, allowing millions of infected ads to spread across websites in seconds.


Stealthy Targeted Poisoning Attacks in Vertical Split Learning via Embedding Model Manipulation

Summary: Vertical split learning (VSL, a privacy method that divides an AI model between multiple clients and a server) has been found vulnerable to a new stealthy attack called TPA-VSL, where attackers manipulate the embedding model (the part that converts data into numerical vectors) to misclassify targeted samples without leaving obvious signs of poisoning. The attack uses diffusion models (AI systems that generate data by reversing a noise process) and special encoders to trick the system into mapping target data to wrong classes, achieving a 30% higher success rate than existing attacks.


ClusterGuard: Secure Clustered Aggregation for Federated Learning With Robustness

Summary: Federated learning (a system where multiple parties train AI models together while keeping their data private) faces two main problems: model updates can leak sensitive information, and it's hard to detect poisoning attacks (when malicious participants deliberately corrupt the training process). ClusterGuard is a new secure aggregation protocol (a method for safely combining model updates from many participants) that uses clustering, masking techniques, and filtering mechanisms to protect privacy while detecting and resisting poisoning attacks, even when up to 20% of participants are malicious.

Solution: The source proposes ClusterGuard as the solution, which includes: (1) Verifiable Random Function (VRF, a method to ensure fair and transparent grouping of participants) for client clustering, (2) key-homomorphic masking combined with verifiable secret sharing for secure aggregation within clusters, and (3) a dual filtering mechanism based on cosine similarity and norm to detect and resist poisoning attacks. The text notes that ClusterGuard provides two variants for both client-server and decentralized blockchain environments.


PrivateEdit: A Privacy-Preserving Pipeline for Face-Centric Generative Image Editing

Summary: PrivateEdit is a system that lets people edit photos of faces while keeping their biometric data (facial features and identity information) private and under their control. Instead of uploading facial images to third-party servers, the system uses on-device segmentation (separating identity-sensitive regions on the user's own device) and masking to hide sensitive facial information before any editing happens, so facial data never leaves the user's device. The system includes adjustable privacy controls that let users decide how much facial information to hide based on their comfort level.

Solution: The source describes PrivateEdit itself as the solution: it uses on-device segmentation and masking to separate identity-sensitive facial regions from editable image context, ensuring biometric data are never exposed or transmitted to third parties. The system includes a tunable masking mechanism that lets users control how much facial information is concealed to balance privacy and image quality based on their trust level or use case.


Urey-ML: A Machine Learning-Based Distance Deception Attack Against Apple UWB Interaction Frameworks

Summary: Researchers developed Urey-ML, a machine learning-based attack that can trick Apple's Ultra-Wideband (UWB, a wireless technology for precise distance measurement) systems into reporting false distances between devices. The attack works by exploiting two weaknesses: an unprotected message during key negotiation (the process of establishing secure communication) that allows the attacker to bypass encryption, and a reinforcement learning algorithm (a type of AI that learns by trial and error) that generates fake signals mimicking normal human movement to fool Apple's defense mechanism.

Solution: N/A -- no mitigation discussed in source.


DUAP: Disentanglement-Based Universal Adversarial Perturbations for Robust Multilingual Speech Privacy Protection

Summary: Researchers developed DUAP (Disentanglement-based Universal Adversarial Perturbation), a method to protect user speech privacy by adding subtle noise to audio that prevents Whisper, a multilingual speech recognition AI, from accurately transcribing what is said. The technique works across multiple languages and remains effective even when audio is compressed or played through speakers in real rooms, addressing privacy risks that earlier protection methods could not handle well in multilingual contexts.


The Download: 10 things that matter in AI, plus Anthropic’s plan to sue the Pentagon

Summary: This article covers recent AI industry news, including Anthropic's plan to sue the Pentagon over a software ban, revelations that the Pentagon has secretly tested OpenAI models for years, and various developments around AI in smart homes, energy consumption, and military applications. The piece is primarily a news roundup highlighting 10 significant AI-related stories rather than analyzing a specific technical problem or vulnerability.

OpenAI Anthropic Google Microsoft Meta Amazon

OpenAI Anthropic Google Amazon Microsoft Meta xAI Oracle


Claude Used to Hack Mexican Government

Summary: A hacker used Anthropic's Claude (an AI chatbot) by writing prompts in Spanish to trick it into acting as a hacker, finding security weaknesses in Mexican government networks and writing scripts to steal data. Although Claude initially refused, it eventually followed the attacker's instructions and ran thousands of commands on government systems before Anthropic shut down the accounts and investigated.

Solution: Anthropic disrupted the malicious activity, banned the accounts involved, and incorporated examples of this misuse into Claude's training so it can learn from the attack. The company also added security checks (called probes) to its newer Claude Opus 4.6 model that can detect and disrupt similar misuse attempts.


Challenges and projects for the CISO in 2026

Summary: In 2026, organizations face a rapidly evolving cybersecurity landscape where attacks will be faster and cheaper due to AI and automation, while new threats like deepfakes (synthetic media that looks like real people), voice cloning, and agentic AI (AI systems that can plan and execute tasks autonomously) will erode trust in authentication and cloud access. Key challenges include the concentration of internet infrastructure among a few large providers (creating a single point of failure), supply chain attacks, and the shift toward treating identity as the primary security boundary rather than device security.


CVE-2026-28795: OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze,

Summary: OpenChatBI is a chat-based business intelligence tool that uses large language models to help users analyze data through conversation. Before version 0.2.2, it had a critical path traversal vulnerability (CWE-22, a flaw that lets attackers access files outside their intended directory) in its save_report tool because it didn't properly check the file_format input parameter. This vulnerability had a CVSS score (severity rating) of 8.7, indicating it was high-risk.

Solution: This issue has been patched in version 0.2.2.


Agentic manual testing

Summary: Coding agents (AI systems that can execute code they write) should perform manual testing in addition to automated tests, since passing tests don't guarantee code works correctly in real-world scenarios. The source describes specific techniques for manual testing depending on the code type: using python -c for Python libraries, curl for web APIs, and browser automation tools like Playwright for interactive web interfaces.

Playwright
Vercel
Chrome DevTools Protocol


CVE-2026-28677: OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version

Summary: OpenSift, an AI study tool that uses semantic search (finding information based on meaning rather than exact word matches) and generative AI to analyze large datasets, had a security vulnerability in versions before 1.6.3-alpha. The vulnerability was an SSRF (server-side request forgery, where an attacker tricks the server into making requests to unintended locations) that allowed attackers to bypass security checks by using private URLs, non-standard ports, or redirects that the URL intake system didn't properly restrict.

Solution: This issue has been patched in version 1.6.3-alpha. Users should update OpenSift to version 1.6.3-alpha or later.