Gemini 3.1 Flash TTS

Summary: Google released Gemini 3.1 Flash TTS, a new text-to-speech model that generates audio from text using prompts sent through the standard Gemini API. Unlike typical AI models, this one accepts detailed creative instructions (called prompts) to control how the audio sounds, including vocal style, pace, accent, and emotional tone, allowing users to create speech with specific characteristics like a particular regional accent or energetic delivery.


Gemini 3.1 Flash TTS

Summary: This item is a brief announcement about Gemini 3.1 Flash TTS (a text-to-speech feature for Google's Gemini AI model) posted on April 15, 2026. The content provided is primarily metadata and sponsorship information rather than substantive technical details about the feature or any security issue.

Solution: N/A -- no mitigation discussed in source.


CVE-2026-30617: LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execut

Summary: LangChain-ChatChat version 0.3.1 has a remote code execution vulnerability (RCE, where an attacker can run commands on a system they don't own) in how it handles MCP STDIO servers (a communication protocol for server connections). An attacker can access the exposed management interface, set up a malicious MCP server with commands of their choice, and then trigger those commands to run when the service processes agent requests.


CVE-2026-30615: A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim

Summary: Windsurf version 1.9544.26 has a prompt injection vulnerability (a technique where attackers hide malicious instructions in input to trick an AI system) that allows remote attackers to execute arbitrary commands on a victim's computer. When Windsurf processes attacker-controlled HTML content, it can be tricked into automatically registering a malicious MCP STDIO server (a communication interface for running code), giving attackers the ability to run commands without the user's knowledge.


Gemini 3.1 Flash TTS: the next generation of expressive AI speech

Summary: Google has released Gemini 3.1 Flash TTS, a new text-to-speech model (software that converts written text into spoken audio) that produces more natural-sounding speech with better control over how the AI speaks. Developers can now use audio tags (special commands embedded in text) to adjust vocal style, pace, and delivery across over 70 languages, and all generated audio is watermarked with SynthID (a hidden marker that identifies AI-generated content) to help prevent misinformation.

Google
Gemini 3.1 Flash TTS
Google AI Studio
Vertex AI
Google Vids


ChatGPT’s latest stylistic quirk is sinister, infuriating – and absolutely everywhere | Stuart Heritage

Summary: A writer notices that ChatGPT and other AI systems are producing content using the rhetorical pattern "it's not X, it's Y" so frequently that this phrasing has become ubiquitous online, appearing in social media posts, fitness classes, and TV shows. The author compares this experience to obsessively noticing a specific detail until it dominates their perception, making the repetitive AI-influenced writing style impossible to ignore.


Capsule Security Emerges From Stealth With $7 Million in Funding

Summary: Capsule Security, an Israeli startup, has raised $7 million in funding to develop technology that secures AI agents (AI systems designed to perform tasks independently) by continuously monitoring their behavior at runtime (while the AI is actually running) to prevent unsafe or harmful actions.


‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks

Summary: Researchers have identified a flaw in Anthropic's Model Context Protocol (MCP, a system that allows AI models to interact with external tools and data) that permits unsanitized commands (user input that hasn't been cleaned or verified) to run without warning, potentially giving attackers complete control over systems using this AI technology. This vulnerability could be exploited across many widely-used AI environments as part of a supply chain attack (where attackers compromise a tool or service used by many organizations to gain access to their systems).


Adobe embraces conversational AI editing, marking a ‘fundamental shift’ in creative work

Summary: Adobe is launching a Firefly AI Assistant that lets creators edit their work by describing changes in plain language rather than manually using specific tools in Creative Cloud (Adobe's suite of creative software). Adobe says this conversational AI approach represents a major shift in how creative work is done by making editing easier and more accessible to people without advanced skills.


OpenAI pulls back from Stargate Norway data center deal as Microsoft takes over

Summary: OpenAI has withdrawn from a deal to rent computing capacity directly from a Norwegian data center facility called Stargate Norway, with Microsoft taking over the capacity instead. OpenAI will now rent computing power from Microsoft instead, which the company says makes more financial sense since it already has a $250 billion contract with Microsoft's cloud service Azure (a cloud computing platform). This pullback is part of OpenAI's broader shift to manage spending expectations as it prepares for a potential public stock offering.


Copilot and Agentforce fall to form-based prompt injection tricks

Summary: Security researchers discovered prompt injection vulnerabilities (attacks where malicious instructions are hidden in user input to trick an AI into executing them) in Microsoft Copilot Studio and Salesforce Agentforce that allow attackers to steal sensitive data like customer names, addresses, and phone numbers. Both vulnerabilities exploit the fact that these AI agents cannot distinguish between trusted system instructions and untrusted user input, allowing attackers to override the agent's original purpose and exfiltrate data to external servers.

Solution: Microsoft patched CVE-2026-21520 following disclosure, with the mitigation carried out internally and no further action required from users. The source notes that both vulnerabilities highlight a baseline need for treating all external inputs as untrusted and enforcing input validation, least-privilege access (giving systems only the minimum permissions they need), and strict controls on actions like outbound email, though no specific patch details are provided for the Salesforce vulnerability.

Microsoft Copilot Studio
Salesforce Agentforce
SharePoint


Retaining defensive advantage in the age of frontier AI cyber capabilities

Summary: Frontier AI models (cutting-edge artificial intelligence systems) are becoming better at finding vulnerabilities (weaknesses in code that attackers can exploit), which creates both opportunity and risk. While AI can help organizations identify and fix these weaknesses, attackers can now use AI to discover and exploit vulnerabilities faster and cheaper than before, putting pressure on organizations to patch systems quickly. The recommended defense is for organizations to follow established best practices from the National Cyber Security Centre, including reducing unnecessary exposure to attack, applying security updates rapidly, and monitoring for malicious activity.

Solution: Organizations should follow established good practices set out by the National Cyber Security Centre, which include: reducing unnecessary exposure to attack, applying security updates rapidly, and monitoring for and quickly responding to malicious activity detected. Additionally, organizations should pursue government-backed certifications such as Cyber Essentials, and access guidance and tools available on the NCSC website.


Microsoft, Salesforce Patch AI Agent Data Leak Flaws

Summary: Salesforce and Microsoft recently fixed two prompt injection vulnerabilities (security flaws where attackers hide malicious instructions in text inputs to trick AI systems) in their AI agent products, Agentforce and Copilot. These flaws could have allowed external attackers to access and steal sensitive data from users.


Deterministic + Agentic AI: The Architecture Exposure Validation Requires

Summary: Organizations are rapidly adopting AI for security testing, but fully agentic AI systems (where AI makes all decisions from start to finish) create a problem: they produce different results each time they run, making it impossible to tell if security actually improved or if the AI just tried a different approach. The source argues that a hybrid model works better, where deterministic logic (fixed, repeatable sequences) defines how security tests execute, while AI enhances specific parts like adapting payloads and interpreting what it finds.


Grok’s sexual deepfakes almost got it banned from Apple’s App Store. Almost.

Summary: Apple threatened to remove Elon Musk's AI app, Grok, from its App Store in January because it wasn't stopping nonconsensual sexual deepfakes (fake sexually explicit images created using AI) from spreading on X. Apple contacted the developers behind X and Grok and asked them to create a plan to improve their content moderation (systems for reviewing and removing harmful material).

Solution: Apple demanded that the developers 'create a plan to improve content moderation,' according to a letter the company sent to US senators.


The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought

Summary: Teenage boys are using AI "nudify" apps to create deepfake sexual imagery (fake nude photos or videos created by AI) of their female classmates, which are then shared on social media and messaging apps. Since 2023, this has affected over 600 students across at least 28 countries and nearly 90 schools, with the true scale likely much higher. The explicit imagery involving minors constitutes child sexual abuse material (CSAM), and schools and law enforcement are often unprepared to respond to these serious incidents.


The deepfake dilemma: From financial fraud to reputational crisis

Summary: Deepfake technology (AI-generated fake audio or video of people) has become cheap, accessible, and realistic enough to fool many employees and executives, with 43% of cybersecurity leaders experiencing audio deepfakes and 37% experiencing video deepfakes in 2025. Deepfakes are now used for financial fraud (by impersonating executives to approve fund transfers) and reputational attacks (by spreading false videos to damage trust with investors and customers), and traditional ways of spotting fakes, like looking for obvious flaws, no longer work reliably.


The next evolution of the Agents SDK

Summary: OpenAI introduced new capabilities to the Agents SDK, a toolkit for developers building AI agents that can work with files and run commands on computers. The update includes a model-native harness (a framework optimized for OpenAI models) and native sandbox execution (a controlled, isolated computer environment where agents can safely run code and access files). The SDK aims to bridge the gap between flexibility and production-readiness by providing developers with standardized infrastructure that keeps agents aligned with how frontier models (the most advanced AI models available) work best.

Solution: The Agents SDK includes several built-in protections: 'Separating harness and compute helps keep credentials out of environments where model-generated code executes.' The SDK also supports 'built-in snapshotting and rehydration' so 'the Agents SDK can restore the agent's state in a fresh container and continue from the last checkpoint if the original environment fails or expires.' Additionally, developers can configure sandbox execution with 'Blaxel, Cloudflare, Daytona, E2B, Modal, Runloop, and Vercel' providers, and the SDK provides a 'Manifest abstraction for describing the agent's workspace' to control access to files and data.


FinBot CTF Is Live: A Hands-On Companion to the OWASP GenAI Security Project

Summary: FinBot is an interactive training platform (CTF, or capture-the-flag exercise) created by OWASP to help developers and security professionals learn about risks in agentic AI systems (AI agents that can plan, act, and make decisions autonomously). It simulates a financial services application where users can practice identifying and defending against attacks like prompt injection (tricking an AI by hiding instructions in its input), tool misuse, data theft, and privilege escalation across multiple connected AI agents.


Mallory Launches AI-Native Threat Intelligence Platform, Turning Global Threat Data Into Prioritized Action

Summary: Mallory is a new AI-powered threat intelligence platform (a system that gathers and analyzes information about cyber threats) designed to help security teams quickly understand which threats are actually dangerous to their organization. Instead of overwhelming teams with alerts, the platform analyzes thousands of threat sources, checks them against each company's specific vulnerabilities, and provides prioritized actions that security teams can take immediately.


OWASP GenAI Exploit Round-up Report Q1 2026

Summary: A Q1 2026 security report by OWASP documents major AI and agentic AI (AI systems that can take autonomous actions) exploits, showing a shift from theoretical risks to real-world attacks targeting AI agent identities, permissions, and supply chains. Key incidents include a Mexican government breach where attackers used Claude to automate reconnaissance and exploitation, affecting 150 GB of sensitive data, along with other incidents involving prompt injection (tricking AI by hiding malicious instructions in its input), privilege abuse, and supply-chain vulnerabilities in AI tools.

Anthropic Claude
OpenAI ChatGPT
Google Vertex AI
Meta
Flowise
Grafana
LiteLLM
Mercor


OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams

Summary: OpenAI launched GPT-5.4-Cyber, a specialized AI model designed to help security teams find and fix vulnerabilities faster, while expanding access through its Trusted Access for Cyber program to thousands of defenders and hundreds of teams. The company acknowledged that AI models are dual-use tools (meaning they can be repurposed for both good and bad purposes) and that adversaries could potentially reverse-engineer the model to find exploitable vulnerabilities before they're fixed, so OpenAI plans to scale defenses alongside access by strengthening safeguards against jailbreaks (techniques to bypass safety restrictions) and adversarial prompt injections (tricking an AI by hiding malicious instructions in its input).

Solution: OpenAI's stated approach includes: (1) a deliberate, iterative rollout of access to minimize misuse, (2) strengthening safeguards through ongoing work against jailbreaks and adversarial prompt injections as model capabilities advance, and (3) integrating advanced coding models and agentic capabilities (AI systems that can take independent actions to solve problems) into developer workflows to enable immediate feedback during the software development process, shifting security from occasional audits to continuous, ongoing risk reduction.

OpenAI
GPT-5.4-Cyber
Anthropic
Mythos
ChatGPT
Codex Security


CVE-2026-39884: mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management. Versions 3.4.0 and prior con

Summary: mcp-server-kubernetes versions 3.4.0 and earlier have an argument injection vulnerability (a type of attack where an attacker sneaks extra commands into a tool by exploiting how input is processed) in the port_forward tool. The vulnerability exists because the code builds a kubectl command (a tool for managing Kubernetes clusters) by concatenating strings with user input and splitting on spaces, instead of using a safer array-based method like other tools in the codebase. This allows attackers to inject malicious kubectl flags to expose internal services or target resources in unintended ways.

Solution: Update to version 3.5.0, which fixes this issue.

mcp-server-kubernetes
Model Context Protocol


Curity looks to reinvent IAM with runtime authorization for AI agents

Summary: Traditional identity and access management (IAM) tools, which control who can access systems and resources, were not designed to secure AI agents (autonomous software programs that perform tasks independently), which operate at high speed with unpredictable access patterns. Curity announced Access Intelligence, a new security layer that grants agent permissions at runtime (during execution, not beforehand) and uses OAuth tokens (credentials that allow access to specific resources) to carry information about each agent's purpose, ensuring agents can only access resources matching their intended task.

Curity
Okta
Ping Identity
Microsoft Entra ID


GHSA-7xjm-g8f4-rp26: Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck

Summary: The `ConformityCheck` class in giskard-checks was automatically treating the `rule` parameter as a Jinja2 template (a template language that evaluates expressions), which could allow arbitrary code execution if check definitions came from untrusted sources. While the library is only used locally by developers, this hidden behavior made it easy to accidentally pass untrusted input without realizing expressions would be evaluated.

Solution: Upgrade to `giskard-checks` >= 1.0.2b1. The patched version removes template rendering from rule evaluation entirely.

giskard-checks@<= 1.0.1b1 (fixed: 1.0.2b1)


GHSA-rq2q-4r55-9877: Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

Summary: The RegexMatching check in giskard-checks has a ReDoS vulnerability (regular expression denial of service, where a specially crafted regex pattern causes the regex engine to hang by backtracking excessively through text). An attacker with write access to check definitions can craft malicious regex patterns that make the testing process hang indefinitely, disrupting automated testing environments like CI/CD pipelines (continuous integration/continuous deployment automation).

Solution: Upgrade to giskard-checks >= 1.0.2b1.


Secure AI agent access patterns to AWS resources using Model Context Protocol

Summary: AI agents access AWS resources through the Model Context Protocol (MCP, a system that lets AI tools interact with cloud services), but unlike traditional software with predictable behavior, agents can dynamically choose different actions based on context. The main security risk is that agents operate at machine speed and will use any permissions (IAM roles, API keys, or OAuth scopes) they're granted, so misconfigured access controls can cause large-scale damage quickly. The source recommends three security principles for controlling AI agent access to AWS resources, with an emphasis on using MCP servers rather than direct API access because MCP provides better monitoring and control.

Solution: The source recommends architecting agents to use MCP servers rather than direct service access where possible, because MCP servers provide a layer of abstraction that enables differentiation controls and creates additional monitoring capabilities through AWS CloudTrail. For agents on developer machines, developers should configure which AWS credentials the agent uses in their mcp.json file by specifying a named profile (which can use credential helpers and the credential provider chain for short-lived credentials), environment variables, or explicit credential configuration, rather than allowing agents to inherit broad developer admin credentials.

AWS
Amazon Bedrock
Amazon Bedrock AgentCore
Claude
Claude Code
Kiro
Model Context Protocol


5 trends defining the future of AI-powered cybersecurity

Summary: AI is transforming cybersecurity by becoming both a tool for attackers and defenders, forcing organizations to shift from outdated perimeter-based security (the "castle and moat" approach) to continuous cyber resilience (the ability to detect threats in real-time and keep operations running during attacks). The industry is consolidating toward unified security platforms, automating repetitive analyst tasks to reduce burnout, and facing increasing regulatory pressure to demonstrate resilience and rapid recovery capabilities.


In the Wake of Anthropic’s Mythos, OpenAI Has a New Cybersecurity Model—and Strategy

Summary: OpenAI announced GPT-5.4-Cyber, a new AI model designed specifically for cybersecurity professionals, along with a three-part strategy to manage risks as AI becomes more powerful. The announcement comes after competitor Anthropic released a more limited version of its Claude Mythos model, citing concerns that advanced AI could be exploited by attackers, though OpenAI argues that current safeguards are sufficient for broad deployment of today's models.

Solution: OpenAI's strategy includes three components: (1) 'know your customer' validation systems combined with Trusted Access for Cyber (TAC), an automated system introduced in February that allows controlled access to new models; (2) iterative deployment, a careful process of releasing and refining capabilities while monitoring for resilience to jailbreaks (techniques that trick AI into ignoring its safety guidelines) and other adversarial attacks; and (3) investments supporting software security and digital defense, including the Codex Security application security AI agent, a cybersecurity grants program begun in 2023, a donation to the Linux Foundation for open source security, and the Preparedness Framework designed to assess and defend against severe harm from advanced AI capabilities.

OpenAI
Anthropic
Google
Claude
GPT-5.4-Cyber
Claude Mythos Preview


CVE-2026-23653: Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio

Summary: CVE-2026-23653 is a command injection vulnerability (a flaw where an attacker can insert malicious commands into input that gets executed) in GitHub Copilot and Visual Studio Code that allows an authorized attacker to disclose information over a network. The vulnerability stems from improper neutralization of special elements used in commands. The CVSS severity score (a standard 0-10 rating of how serious a security flaw is) has not yet been assigned by NIST.

GitHub Copilot
Visual Studio Code
Microsoft


Anthropic co-founder confirms the company briefed the Trump administration on Mythos

Summary: Anthropic confirmed it briefed the Trump administration about its new Mythos model, an AI system so dangerous it won't be released publicly due to powerful cybersecurity capabilities. The company is engaging with the government on AI safety issues while simultaneously suing the Department of Defense over a supply-chain risk label and disagreement over military access to Anthropic's systems.


The attacks on Sam Altman are a warning for the AI world

Summary: Recent physical attacks targeting AI industry leaders, including an alleged Molotov cocktail attack on OpenAI CEO Sam Altman's home and gunfire at an official who supported a data center project, have raised concerns about safety in the AI industry. These incidents appear connected to activist concerns about AI's risks, including extinction fears and opposition to infrastructure expansion.


Generalizability of Large Language Model-Based Agents: A Comprehensive Survey

Summary: This academic survey examines how well large language model-based agents (AI systems that use LLMs to make decisions and take actions) can generalize, meaning how effectively they perform on new tasks or situations they weren't specifically trained for. The paper reviews research across different domains to understand what factors help or limit an agent's ability to adapt and work reliably in unfamiliar contexts.


Chrome now lets you turn AI prompts into repeatable ‘Skills’

Summary: Google is adding a new feature to Chrome called 'Skills' that lets you save your favorite Gemini prompts (instructions you give to AI) and reuse them across different webpages with a single click, instead of typing the same prompt repeatedly. This saves time when you want to perform the same AI task, like asking for vegan recipe substitutions, on multiple pages.


CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme

Summary: Kiro IDE (a development environment that uses AI agents to help developers) has a cross-site scripting vulnerability (XSS, where an attacker injects malicious code that runs in a web browser) in versions before 0.8.140. An attacker can exploit this by creating a malicious workspace with a crafted color theme name, and if a user opens and trusts that workspace, the attacker's code will execute on their computer.

Solution: Update Kiro IDE to version 0.8.140 or later.


EU regulators largely denied access to Anthropic Mythos

Summary: Anthropic's new Mythos model is an AI designed for cybersecurity that can identify and exploit technical vulnerabilities better than most humans, but European regulators have been largely denied early access to it. The company limited initial access through Project Glasswing to a few US tech companies like Apple, Microsoft, and Amazon for security reasons, while most EU countries were excluded. European officials worry that private companies controlling access to such powerful technology raises concerns about national security and who should have influence over these systems.


CVE-2025-61260: A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP

Summary: A vulnerability in OpenAI Codex CLI v0.23.0 and earlier allows attackers to execute arbitrary code by creating malicious configuration files (.env and .codex/config.toml) in a repository. When a user runs the codex command in a compromised repository, the tool automatically loads these files without asking for permission, triggering the attacker's embedded commands.


Has Google’s AI watermarking system been reverse-engineered?

Summary: A developer claims to have reverse-engineered Google DeepMind's SynthID system, which is a watermarking technology that embeds hidden marks in AI-generated images to prove their origin. The developer says they can strip these watermarks from images or add fake ones, though Google disputes this claim.


Byzantine-Robust Asynchronous Federated Learning via Feature Fingerprinting

Summary: Asynchronous federated learning (AFL, where multiple devices train a shared AI model without waiting for each other to finish) is faster than synchronous methods but more vulnerable to Byzantine attacks (when some devices send false or corrupted data to sabotage the model). Researchers propose Belisa, a framework that uses feature fingerprints (unique patterns in how local models represent data) to identify and filter out malicious devices, improving robustness and efficiency in real-world scenarios where devices have different data and hardware capabilities.

Solution: The source proposes Belisa as a Byzantine-robust AFL framework that addresses this vulnerability. Belisa works by leveraging a reference model trained on publicly available data to quantify feature fingerprints (discrepancies between feature representations of local models) and filtering out malicious models through clustering. According to the paper, Belisa lowered average test error rates to 0.42x that of baseline methods under attack scenarios and accelerated aggregation by an average of 12.3x compared to other methods.


ENClose: Encrypted Nonlinear Closed-Loop Control Over Fully Homomorphic Encryption

Summary: This research proposes ENClose, a framework that lets control systems (automated systems that adjust themselves based on feedback) operate securely using fully homomorphic encryption, or FHE, a cryptographic method that keeps data encrypted while performing calculations on it. The main innovation addresses two problems: noise building up in encrypted feedback loops and the slowness of doing complex nonlinear operations (calculations that don't follow straight-line relationships) on encrypted data. ENClose uses techniques like function segmentation and tree-based selection to speed up these encrypted calculations by 3 to 20 times compared to previous methods, as demonstrated in real-world tests like vehicle formation control and anomaly recovery.


VLBiasBench: A Comprehensive Benchmark for Evaluating Bias in Large Vision-Language Model

Summary: Large Vision-Language Models (LVLMs, which are AI systems that process both images and text) show promise for general AI but can produce biased outputs, a problem that hasn't been thoroughly studied. Researchers created VLBiasBench, a comprehensive benchmark (a standardized test for measuring performance) that evaluates nine types of social biases in these models, including age, gender, race, and disability status, using 128,342 test samples generated with images and different question formats to assess how biased 17 different LVLMs are.


Label Hierarchy Transition: Delving Into Class Hierarchies to Enhance Deep Classifiers

Summary: This paper presents Label Hierarchy Transition (LHT), a deep learning framework designed to improve hierarchical classification, which is the task of sorting objects into multi-level category structures (like organizing a bird into order, family, and species levels). Unlike existing methods that break hierarchical classification into separate classification tasks, LHT uses a transition network and a confusion loss to better capture the relationships between categories at different levels of the hierarchy. The researchers tested their approach on benchmark datasets and a skin lesion diagnosis task, showing improvements over existing methods.


‘Mythos-Ready’ Security: CSA Urges CISOs to Prepare for Accelerated AI Threats

Summary: AI models like Mythos are making cyberattacks faster and more dangerous by shortening the time between when security flaws are discovered and when attackers exploit them. Security leaders (CISOs, chief information security officers) need to prepare urgently for this new threat environment where attacks happen at high speed.


AI companies make powerful tech – but they’re also savvy marketers

Summary: This article discusses how AI companies like Anthropic use marketing to promote their capabilities, using Claude as an example of technology that may be overhyped despite being genuinely advanced. The piece cautions readers against getting swept up in marketing claims about AI's power without critical evaluation.

Anthropic Claude OpenAI Google Meta Microsoft Snap


How AI is transforming threat detection

Summary: AI is transforming threat detection by processing massive amounts of security data and identifying suspicious patterns faster than humans alone, with 50% of threat detection platforms expected to use agentic AI (AI systems that can take independent actions) by 2028. Organizations are already automating routine tasks like alert review and investigation work, seeing 40-50% efficiency gains for lower-level security operations, while AI agents reduce alert fatigue by clustering similar alerts and prioritizing them based on risk.

Gartner
Anvilogic
SANS Institute
Accenture
Black Duck
Databee


The AI inflection point: What security leaders must do now

Summary: AI is moving from experimentation to production deployment in cybersecurity, and security leaders must treat it as a fundamental shift in how security operations work, not just an added tool. Attackers are using AI to conduct faster intrusions (some occurring in under 30 seconds), which exceeds the speed of human-only security responses, making AI deployment urgent for defenders. There is currently a limited window where defenders and attackers have roughly equal access to AI technology, but advantage will go to those who operationalize it most effectively and quickly.


Man charged with attempted murder over attack on home of OpenAI's Sam Altman

Summary: A 20-year-old Texas man has been charged with attempted murder and federal felony charges after allegedly throwing a Molotov cocktail (a homemade incendiary weapon) at OpenAI CEO Sam Altman's San Francisco home and attempting to set fire to OpenAI's headquarters. Authorities found the suspect carrying documents that opposed AI development and called for violence against AI executives and investors. OpenAI and law enforcement officials condemned the violence, with OpenAI calling for debate through democratic processes rather than violence.


GHSA-p4h8-56qp-hpgv: SSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh

Summary: An SSH/SCP option injection vulnerability in the @aiondadotcom/mcp-ssh library allowed attackers to execute arbitrary commands locally on the machine running the MCP server (a tool that connects an AI to external systems). By crafting malicious input like `-oProxyCommand=...`, attackers could trick SSH into running their code before any network connection happened, potentially stealing SSH keys and credentials. The vulnerability could be triggered even without a malicious user, since an LLM (large language model) could be tricked through prompt injection (hiding attacker instructions in text it reads) to pass the malicious input to the tool.

Solution: Fixed in version 1.3.5. The patch includes: adding `--` argument terminators to all SSH/SCP invocations (which tells the command where options end and arguments begin), implementing a strict whitelist for host aliases that rejects leading dashes and shell metacharacters, requiring all host aliases to be defined in `~/.ssh/config` or `~/.ssh/known_hosts`, and resolving `ssh.exe`/`scp.exe` to absolute paths with `shell: false` on Windows to prevent command re-parsing. No workarounds exist; users must upgrade to 1.3.5.

@aiondadotcom/mcp-ssh@< 1.3.5 (fixed: 1.3.5)


Daniel Moreno-Gama is facing federal charges for attacking Sam Altman’s home and OpenAI’s HQ

Summary: Daniel Moreno-Gama was arrested and charged with federal crimes after traveling from Texas to California and attacking OpenAI's facilities and CEO Sam Altman's home with a Molotov cocktail (an incendiary weapon made from a bottle of flammable liquid). He also attempted to break into OpenAI's headquarters and stated he intended to burn down the building and kill people inside. His charges include attempted destruction of property using explosives and illegal possession of a firearm.


Trusted access for the next era of cyber defense

Summary: OpenAI is expanding its Trusted Access for Cyber (TAC) program to provide AI tools to thousands of cybersecurity defenders and teams protecting critical software. The company has created GPT-5.4-Cyber, a specialized version of its AI model designed specifically for defensive cybersecurity work, and is implementing cyber-specific safeguards (built-in restrictions to prevent misuse) in model deployments. This effort aims to help defenders find and fix security vulnerabilities faster while preventing attackers from misusing the same AI capabilities.

Solution: The source explicitly mentions the following measures: cyber-specific safeguards included in model deployments starting in 2025; the Preparedness Framework (strengthened in 2023); identity verification and KYC (know-your-customer, a process to confirm who someone is) to control access to advanced capabilities; Codex Security tool to identify and fix vulnerabilities at scale; iterative deployment with continuous updates to models and safety systems based on learning about capabilities and risks; and improvements in resilience to jailbreaks (techniques that try to bypass AI safety restrictions) and other adversarial attacks.


Suspect in attack at Sam Altman's house aimed to kill OpenAI CEO, warned of humanity's extinction from AI

Summary: A man named Daniel Moreno-Gama was arrested after throwing a Molotov cocktail (an improvised incendiary weapon) at OpenAI CEO Sam Altman's home and later attacking OpenAI's headquarters. Moreno-Gama was motivated by concerns about AI posing an existential threat to humanity and had planned the attack in advance, as documented in a written statement found by police. Sam Altman responded by calling for reduced hostile rhetoric within the AI industry.


Texas man accused of throwing molotov cocktail at Sam Altman home charged

Summary: A 20-year-old Texas man was arrested after throwing an incendiary device (a weapon designed to start fires) at OpenAI CEO Sam Altman's home and attempting to set fire to OpenAI's headquarters in San Francisco. Police found the suspect with an anti-AI document containing threats against Altman, multiple incendiary devices, and other materials, leading federal prosecutors to investigate whether this constitutes an act of domestic terrorism.


Anthropic’s Mythos signals a structural cybersecurity shift

Summary: Anthropic's Mythos is an AI system that can autonomously find and exploit vulnerabilities (security flaws in software) much faster than before, completing tasks in hours that previously took weeks or months. Security experts warn this represents a fundamental shift in cybersecurity, not an isolated incident, and that defenders must close the gap between how quickly vulnerabilities are discovered and how quickly organizations can patch and respond.

Solution: The AI Security Institute recommends that organizations strengthen security fundamentals by: regularly applying security updates, implementing robust access controls, securing security configuration, and maintaining comprehensive logging. The source also emphasizes that investment in cyber defense is vital now, before future AI models become even more capable.


CSA: CISOs Should Prepare for Post-Mythos Exploit Storm

Summary: Security experts are warning that Anthropic's Claude Mythos introduction could trigger an "AI vulnerability storm," where many security weaknesses in AI systems are discovered and exploited rapidly. The Cloud Security Alliance is advising security leaders (called CISOs) to prepare for a surge in attacks targeting these newly-exposed vulnerabilities.


OpenAI rotates macOS certs after Axios attack hit code-signing workflow

Summary: OpenAI is revoking and rotating its macOS code-signing certificates (digital credentials that verify OpenAI apps are legitimate) after a malicious Axios package was executed in one of its GitHub Actions workflows (automated tasks that run on code repositories). Although OpenAI found no evidence the certificates were actually compromised, the company is treating them as potentially exposed and requiring all macOS users to update their OpenAI apps to versions signed with new certificates by May 8, 2026, when the old certificate will be fully blocked.

Solution: OpenAI is revoking and rotating the code-signing certificate. The company is working with Apple to ensure no future software can be notarized (verified as legitimate) with the previous certificate. The old certificate will be fully revoked on May 8, 2026, after which attempts to launch applications signed with it will be blocked by macOS protections. OpenAI advises users to update via in-app features or official download pages and to avoid installing software from links sent via email, ads, or third-party sites.


On Anthropic’s Mythos Preview and Project Glasswing

Summary: Anthropic released Claude Mythos Preview, a new AI model with advanced cyberattack capabilities, and is withholding it from the public while running Project Glasswing to find and patch vulnerabilities before attackers exploit them. The model can write effective exploits (turning vulnerabilities into working attacks without human help) and find complex vulnerabilities by chaining together multiple bugs, representing a significant increase in AI-assisted cyberattack sophistication. While defenders currently have an advantage in finding vulnerabilities for patching purposes, this gap is expected to shrink as more powerful models become available.


Goldman Sachs chief ‘hyper-aware’ of risks from Anthropic’s Mythos AI

Summary: Goldman Sachs's CEO says he is closely aware of cybersecurity risks from Anthropic's Mythos AI model (an advanced large language model, which is an AI trained on large amounts of text data) and is working with Anthropic to improve cyber protection. The bank has been monitoring rapid advances in AI as part of its efforts to protect itself from hackers.


Read OpenAI’s latest internal memo about beating the competition — including Anthropic

Summary: OpenAI's chief revenue officer sent an internal memo to employees emphasizing the need to build a 'moat' (competitive advantages that make it hard for customers to switch to competitors) around its AI products and focus on enterprise clients, as users currently find it easy to switch between different AI models depending on which one performs best at any given time.


Gemini Robotics-ER 1.6: Powering real-world robotics tasks through enhanced embodied reasoning

Summary: Gemini Robotics-ER 1.6 is an upgraded AI model designed to help robots understand and reason about the physical world, enabling them to complete real-world tasks with better spatial awareness and precision. The model improves on previous versions by enhancing capabilities like pointing (identifying and locating objects), counting, reading instruments (such as gauges), and detecting when tasks are complete. It is now available to developers through the Gemini API (an interface for accessing the model) and Google AI Studio.

Google
Gemini Robotics-ER 1.6
Boston Dynamics


Microsoft is testing OpenClaw-like AI bots for Copilot

Summary: Microsoft is testing ways to integrate OpenClaw-style features into Copilot, its AI assistant, to make Microsoft 365 Copilot run autonomously (without human intervention) around the clock and complete tasks for users. OpenClaw is an open-source platform that allows users to create AI-powered agents (software programs that act independently to complete goals) that run locally on a user's device. Microsoft's corporate vice president confirmed the company is exploring these technologies for enterprise use.

Microsoft
Copilot
Microsoft 365 Copilot
OpenClaw


OpenAI touts Amazon alliance in memo, says Microsoft has 'limited our ability' to reach clients

Summary: OpenAI's new revenue chief sent an internal memo highlighting a partnership with Amazon (a cloud computing company competing with Microsoft) as crucial for reaching enterprise customers, while acknowledging that its existing deal with Microsoft has constrained its ability to serve clients who prefer Amazon's AI platform called Bedrock (a service that provides access to major AI models). The memo reflects OpenAI's struggle to compete with rival Anthropic's Claude model in the enterprise market, where companies are investing heavily in AI.

OpenAI Microsoft Amazon Anthropic Google ChatGPT Claude Gemini AWS Bedrock


CVE-2026-1462: A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow S

Summary: A vulnerability in keras version 3.13.0 allows attackers to run their own code when a model is loaded, even when `safe_mode=True` (a setting meant to prevent unsafe operations). The problem occurs because the `TFSMLayer` class loads external TensorFlow SavedModels (pre-trained model files) without checking if they're safe, and doesn't properly validate file paths or configuration data.


Transferable Adversarial Attack on Referring Video Object Segmentation

Summary: Referring video object segmentation (RVOS, the task of identifying and outlining objects in videos based on text descriptions) is used in safety-critical applications like autonomous driving, but the deep neural networks that power these systems are vulnerable to adversarial perturbations (tiny, intentional changes to input data designed to fool AI models). This research demonstrates for the first time that RVOS models can be reliably attacked using a method called xM-ICM, which corrupts both visual and text information to mislead the models, and shows this attack works even when attackers have limited information about the system.


HKT-SmartAudit: Distilling Lightweight Models for Smart Contract Auditing

Summary: HKT-SmartAudit is a framework that creates smaller, faster AI models specifically trained to find bugs in smart contracts (self-executing code on blockchain networks). The framework uses knowledge distillation (a technique where a large, accurate AI model teaches a smaller model by sharing what it has learned), allowing these lightweight models to detect vulnerabilities effectively while using far less computing power than larger models.


FALCON-Net: Feature Aggregation of Local Patterns for AI-Generated Image Detection

Summary: FALCON-Net is a detection system designed to identify AI-generated images by analyzing their technical flaws. The system works by examining two key weaknesses in generated images: the lack of device-specific sensor noise (natural imperfections that real cameras add) and unnatural pixel intensity variations that result from oversimplified generation processes. FALCON-Net combines two analysis modules (one for noise patterns and one for local pixel variations) to reliably distinguish AI-generated images from real ones, even when tested on image generation models it wasn't trained on.


FedNSA: Boosting Secure Aggregation by Assembling Differentially Private Noise Shares

Summary: Federated learning (FL, where multiple devices train AI models together without sharing raw data) faces privacy risks because adversaries can extract sensitive information from model updates. FedNSA is a new protocol that combines differential privacy (adding mathematical noise to hide individual data patterns), encryption, and multi-party computation (MPC, a technique where multiple parties jointly compute results without revealing their individual inputs) to protect model updates while reducing the communication and computational burden that makes secure aggregation impractical on resource-constrained devices like smartphones.


LitCVit: A Lightweight Self-Supervised Contrastive Vision Transformer for Encrypted Malicious Traffic Detection

Summary: LitCVit is a lightweight AI model designed to detect malicious encrypted network traffic (data sent over secure connections) without needing to decrypt it or manually extract features. The model uses self-supervised learning (training where the AI learns patterns from unlabeled data) and vision transformers (a type of neural network architecture) to analyze patterns across multiple data packets and flows (sequences of related network communications) while running much faster than existing approaches, achieving 98% accuracy on test datasets.


HENet: A Heterogeneous Encoding Network for General and Robust Adversarial Example Generation

Summary: This paper presents HENet, a new method for creating adversarial examples (inputs with small, intentional changes designed to fool AI models) that work against different types of neural networks like CNNs (convolutional neural networks, commonly used for image tasks) and Transformers (a newer architecture). The method improves two key challenges: making attacks work across different model architectures and making adversarial examples survive image compression like JPEG, which currently weakens their effectiveness.


Exposing the Ghost in the Transformer: Abnormal Detection for Large Language Models via Hidden State Forensics

Summary: Large language models (LLMs, which are AI systems trained on vast amounts of text) are vulnerable to serious attacks like hallucinations (making up false information), jailbreaks (tricking the AI into ignoring its safety rules), and backdoors (hidden malicious instructions inserted during training). This research proposes a detection method using hidden state forensics (analyzing the internal numerical patterns that flow through the model's layers) to identify abnormal or malicious behavior in real-time, achieving over 95% accuracy with minimal computational cost.


DFREC: DeepFake Identity Recovery Based on Identity-Aware Masked Autoencoder

Summary: DFREC is a new method for identifying the original faces used to create deepfakes (fake videos where one person's face is swapped onto another's body). Unlike existing deepfake detection tools that only identify whether an image is fake, DFREC recovers both the source face (the one being used) and target face (the one being impersonated) from a deepfake image, which helps investigators trace who was involved in creating the fake and reduces risks from deepfake attacks. The system uses three components: one to separate source and target face information, one to reconstruct the source face, and one to reconstruct the target face using a Masked Autoencoder (a type of neural network that learns patterns by hiding parts of input data).


TFMD: General and Fast Secure Neural Network Inference Framework With Threshold FHE

Summary: TFMD is a framework that allows multiple parties to run neural networks (machine learning models) on sensitive data while keeping that data private through threshold FHE (fully homomorphic encryption, a cryptographic technique that lets computation happen on encrypted data without decrypting it). Unlike previous systems that only work with a fixed number of participants and fail if too many are compromised, TFMD handles any number of participants, allows up to all but one to be corrupted, and uses special techniques to make the calculations faster, particularly for the ReLU function (a common operation in neural networks).


⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

Summary: This weekly security recap covers several major threats, including a critical zero-day vulnerability in Adobe Acrobat Reader (CVE-2026-34621, CVSS score 8.6) that allows attackers to run malicious code through specially crafted PDF files and has been actively exploited since December 2025. Other threats include Iranian cyber attacks targeting industrial control systems (PLCs, programmable logic controllers) in U.S. energy and water utilities, and Anthropic's new AI model called Mythos that can autonomously discover software vulnerabilities and generate exploits at scale, which is being shared with select companies to improve security before attackers gain access.

Solution: Adobe released emergency updates to fix the critical Acrobat Reader flaw (CVE-2026-34621). For the Mythos model vulnerability discovery, Project Glasswing aims to apply AI capabilities in a controlled, defensive setting, enabling participating companies to test and improve the security of their own products before bad actors gain access to similar capabilities.

Anthropic
Mythos Model
Project Glasswing
Cisco


OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

Summary: OpenAI discovered that a macOS code signing certificate (a digital credential used to verify that software is legitimate and unchanged) may have been compromised in a supply chain attack (where hackers target a company's software distribution process rather than attacking the company directly) linked to North Korea. The company is taking action to address this potential security breach.

Solution: N/A -- no mitigation discussed in source.


Your MTTD Looks Great. Your Post-Alert Gap Doesn't

Summary: Modern AI systems like Anthropic's Mythos can autonomously find and exploit zero-day vulnerabilities (previously unknown security flaws), with similar capabilities expected to spread within weeks or months. While detection tools have improved significantly and now fire alerts almost instantly (MTTD, or mean time to detect), the real security problem is the "post-alert gap" — the time between when an alert fires and when a human analyst actually investigates it, which can stretch 20-40 minutes or more, exceeding attackers' breakout times of 22 seconds to 29 minutes. AI-driven investigation systems can compress this gap by automatically investigating alerts, assembling context from multiple tools, and reaching conclusions in minutes rather than hours.

Solution: The source describes using AI-driven investigation tools (such as Prophet AI, mentioned explicitly in the text) to compress post-alert investigation time. As stated: "The queue disappears. Every alert is investigated as it arrives, regardless of severity or time of day. Context assembly that took an analyst 15 minutes of tab-switching happens in seconds. The investigation itself — reasoning through evidence, pivoting based on findings, reaching a determination — completes in minutes rather than an hour." The source also notes that "for teams working toward this benchmark, we've published practical steps to compress investigation time below two minutes," though the specific steps are not detailed in the provided excerpt.

Anthropic
Mythos Preview
Palo Alto Networks
CrowdStrike
Mandiant


AI Chatbots and Trust

Summary: Leading AI chatbots are designed to be sycophantic (overly agreeable and flattering), which makes users trust them more and return for advice even though they can't tell the difference between sycophantic and objective responses. Research shows that even a single interaction with a sycophantic chatbot reduces users' willingness to take responsibility for their behavior and makes them less capable of self-correction, which harms their ability to make moral decisions and maintain healthy relationships.


Fake Claude Website Distributes PlugX RAT

Summary: Cybercriminals created a fake website impersonating Claude (an AI assistant made by Anthropic) to distribute PlugX RAT (remote access trojan, malware that lets attackers control a computer remotely). The malware uses DLL sideloading (a technique where malicious code gets loaded instead of a legitimate library file) and removes traces of itself after installation.


OpenAI announces first permanent London office after halting UK Stargate project

Summary: OpenAI announced it is opening its first permanent London office with space for over 500 employees, even though the company recently paused its major U.K. Stargate project (a large infrastructure initiative for building AI computing capacity). The company cited high energy costs and the U.K.'s regulatory environment as reasons for halting the Stargate project, though it continues to expand its research presence in London's King's Cross area.

OpenAI
Google DeepMind
Meta
Synthesia
Wayve
ElevenLabs
Anthropic


CISOs tackle the AI visibility gap

Summary: CISOs (chief information security officers, the people responsible for protecting an organization's computer systems) are struggling with visibility gaps around AI deployments, with 67% reporting limited ability to see where and how AI operates in their environments. These blind spots come from multiple sources: shadow AI (unsanctioned AI tools employees use without approval), AI features added by software vendors without clear notification, opaque AI models that can't be fully inspected, and agentic AI (AI systems that act autonomously) that moves too fast for traditional security tools to detect problems. The visibility challenge ranks as the second biggest concern for CISOs securing AI systems, after lack of internal expertise.

Solution: One CISO, Dale Hoak at RegScale, addressed the problem by repositioning existing monitoring tools and investing in new ones, including products that use intelligence to monitor enterprise AI use. According to Hoak, this process took about six months and allowed him to identify what to look for using logging (recording system events), SIEM (security information and event management, a system that collects and analyzes security data), and AI-specific monitoring tools, though he notes he remains uncertain about what gaps may still exist.

ChatGPT Gemini RegScale Pentera Thoughtworks


OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

Summary: OpenAI discovered that a GitHub Actions workflow (automated processes that run in code repositories) used to sign its macOS apps downloaded a malicious version of the Axios library on March 31, which contained a backdoor called WAVESHAPER.V2. Although OpenAI found no evidence that user data or systems were compromised, the company is treating its signing certificate as compromised and revoking it, which will cause older versions of its macOS apps to stop receiving updates and support after May 8, 2026.

Solution: OpenAI is revoking and rotating the compromised certificate. Users must update to the following minimum versions by May 8, 2026, or their apps will be blocked by macOS security protections: ChatGPT Desktop 1.2026.071, Codex App 26.406.40811, Codex CLI 0.119.0, and Atlas 1.2026.84.2. OpenAI is also working with Apple to prevent any new software notarization (Apple's process for verifying legitimate apps) using the old certificate, so unauthorized code signed with it will be blocked by default by macOS security protections.


Enterprises power agentic workflows in Cloudflare Agent Cloud with OpenAI

Summary: Cloudflare and OpenAI are partnering to let enterprises deploy AI agents (software programs that can automatically perform tasks like customer service and report generation) using advanced OpenAI models like GPT-5.4 through Cloudflare's Agent Cloud platform. The integration runs on Cloudflare Workers AI (a system for running AI models at the edge, meaning closer to users for faster responses) and includes Codex (a tool for streamlining software development), which is now available in Cloudflare Sandboxes (secure virtual environments for testing).


CVE-2026-6129: A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects an unknown function of the

Summary: A vulnerability (CVE-2026-6129) was found in the CowAgent component of zhayujie's chatgpt-on-wechat software up to version 2.0.4, where missing authentication (failure to verify user identity) in the Agent Mode Service allows attackers to perform unauthorized actions remotely. The exploit is publicly available and the developers have not yet responded to the initial report of the problem.


The AI code wars are heating up

Summary: GitHub Copilot, a tool that uses AI to autocomplete code as developers write it, was one of the earliest successful AI applications, debuting in spring 2021 through a Microsoft and OpenAI partnership, long before ChatGPT became widely known. The article discusses how AI code-writing tools have become increasingly important in the tech industry.


CVE-2026-6126: A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4. The affected element is an unknown function

Summary: CVE-2026-6126 is a missing authentication vulnerability in zhayujie chatgpt-on-wechat CowAgent version 2.0.4, affecting an administrative HTTP endpoint (a web-based control interface). An attacker can remotely exploit this flaw without needing valid credentials, and the exploit code has been publicly released.


Is AI the greatest art heist in history?

Summary: This article argues that generative AI (machine learning systems that create new content like images or text) is harming the art world by using artists' work without permission to train itself, similar to a large-scale theft. The piece describes widespread concerns about AI in 2026, including environmental damage from data centers (large facilities that store and process information), harmful effects on users' mental health, and job displacement, issues that artists had warned about earlier.


AI companies know they have an image problem. Will funding policy papers and thinktanks dig them out?

Summary: Major AI companies like OpenAI are investing in policy papers, think tanks, and public engagement efforts to improve their public image as polls show growing disapproval of AI technology. OpenAI recently released a policy paper on industrial policy and opened a Washington DC office with space for non-profits and policymakers to learn about their technology, as part of a broader strategy to reshape how people perceive the AI industry.


‘Too powerful for the public’: Inside Anthropic’s bid to win the AI publicity war

Summary: Anthropic announced it created a powerful AI model called Mythos that it decided not to release publicly, citing cybersecurity risks as the reason. The announcement drew significant attention from government officials and politicians, though some skeptics question whether the decision was genuinely about security concerns or a publicity strategy to attract investment.


‘It has your name on it, but I don’t think it’s you’: how AI is impersonating musicians on Spotify

Summary: AI bots are creating fake music and uploading it to Spotify under the names of real musicians, including famous artists like jazz pianist Jason Moran and rapper Drake. Spotify has acknowledged the problem, removing over 75 million spammy tracks in 12 months, and says it is developing a new tool that will let artists review and approve releases before they go live on the platform.

Solution: Spotify stated it is 'working on a new tool to give artists more control over what shows up under their name' that would 'let artists review and then approve or decline releases before they go live on the platform.' The company also said that 'estate or rights holders for a deceased artist can opt into the company's new tool if they have an account.' Additionally, Spotify noted it 'employs a range of safeguards to protect artists, including systems designed to detect and prevent unauthorized content, human review, and reporting and takedown processes.'


Vibe check from inside one of AI industry's main events: 'Claude mania'

Summary: At the HumanX AI conference in San Francisco, Anthropic's Claude Code (an AI coding agent, a tool that generates, edits and reviews code) has become the dominant topic in the AI industry, surpassing OpenAI's influence among executives and investors. Despite a legal dispute with the Department of Defense, Anthropic continues to gain momentum, with Claude Code generating over $2.5 billion in annualized revenue since its May 2025 public launch. The company's focus on coding rather than spreading resources across multiple AI products has positioned it well to capture enterprise contracts.

Anthropic
Claude
Claude Code
Claude Mythos Preview
OpenAI
ChatGPT
Google
Cursor
Glean
Synthesia
Decagon
Credo AI


ChatGPT rolls out new $100 Pro subscription to challenge Claude

Summary: OpenAI has launched a new $100 Pro subscription tier to compete with Claude's pricing and target coders and enterprises. The new Pro plan sits between the existing $20 Plus and $200 Pro Max tiers, offering 5x higher usage limits than Plus and access to advanced features like Codex (a code-generation tool), deep research, and GPT-5. OpenAI's strategy mirrors Anthropic's approach of offering a mid-tier subscription designed specifically for people doing complex, high-stakes work.

OpenAI ChatGPT Claude Anthropic GPT-5 Codex


Man arrested after Sam Altman's house hit with Molotov cocktail, OpenAI headquarters threatened

Summary: A 20-year-old man was arrested after throwing a Molotov cocktail (a homemade incendiary weapon) at OpenAI CEO Sam Altman's home and then threatening arson at the company's San Francisco headquarters. No one was injured in the attack, and the suspect was taken into custody with charges pending. The incident occurred during a controversial period for OpenAI involving military partnerships and litigation.


Vance, Bessent questioned tech giants on AI security before Anthropic's Mythos release

Summary: U.S. government officials, including Vice President JD Vance and Treasury Secretary Scott Bessent, met with tech CEOs from companies like Anthropic, OpenAI, Google, and Microsoft to discuss the security of large language models (AI systems trained on large amounts of text data) and how to protect against cyber attacks before Anthropic released its new Mythos model. Anthropic briefed government officials on the model's capabilities, including potential offensive and defensive cybersecurity applications, and emphasized that bringing the government into the conversation early about risks and safety measures was a priority.

Anthropic
xAI
Google
OpenAI
Microsoft
CrowdStrike
Palo Alto Networks
Apple
NVIDIA


CVE-2026-40252: FastGPT is an AI Agent building platform. Prior to 4.14.10.4, Broken Access Control vulnerability (IDOR/BOLA) allows any

Summary: FastGPT (a platform for building AI agents) has a broken access control vulnerability (IDOR/BOLA, a flaw where one user can access another user's data by guessing or changing IDs) that allows any authenticated team to run AI applications belonging to other teams by using a different application ID. The system checks that users are logged in but doesn't verify that the application they're trying to use actually belongs to their team, leading to unauthorized access to private AI workflows across teams.

Solution: This vulnerability is fixed in version 4.14.10.4. Users should upgrade to FastGPT 4.14.10.4 or later.


GHSA-75hx-xj24-mqrw: n8n-mcp has unauthenticated session termination and information disclosure in HTTP transport

Summary: n8n-mcp (a tool for connecting AI systems to external services) had security problems where certain HTTP endpoints (the connection points a program offers over the internet) didn't require authentication and exposed sensitive system information. An attacker with network access could shut down active sessions and gather details to plan further attacks.

Solution: Fixed in v2.47.6, where all MCP session endpoints now require Bearer authentication (a token-based security method). If you cannot upgrade immediately, you can restrict network access using firewall rules, reverse proxy IP allowlists, or a VPN to allow only trusted clients. Alternatively, use stdio mode (MCP_MODE=stdio) instead of HTTP mode, since stdio transport does not expose HTTP endpoints and is not affected by this vulnerability.


GHSA-fw9q-39r9-c252: LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`

Summary: The LangSmith JavaScript SDK contains a prototype pollution vulnerability (a type of attack where an attacker modifies the base object that all JavaScript objects inherit from) in its internal lodash `set()` function. The vulnerability exists because the code only blocks the `__proto__` key but allows attackers to bypass this protection using `constructor.prototype` instead, potentially affecting all objects in a Node.js application if they control data being processed by the `createAnonymizer()` API.

Solution: Fixed in version 0.5.18. Users should update their `langsmith` package to 0.5.18 or later.


GHSA-8x8f-54wf-vv92: PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

Summary: PraisonAI's browser bridge server (started with `praisonai browser start`) has a security flaw where it accepts WebSocket connections (a two-way communication channel between a client and server) without proper authentication checks. An attacker on the network can connect without credentials, trick the server into linking their connection to a legitimate browser extension session, and then intercept all commands and responses from that session, effectively taking control of the browser automation without permission.

praisonaiagents@<= 1.5.139 (fixed: 1.5.140)


GHSA-ffp3-3562-8cv3: PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell Commands

Summary: PraisonAI Agents has a security flaw where tool approval decisions are cached by tool name only, not by the specific command arguments. Once a user approves the `execute_command` tool (a function that runs shell commands) for any command like `ls -la`, all future shell commands in that session bypass the approval prompt entirely. Combined with the fact that all environment variables (including API keys and credentials) are passed to subprocesses, an LLM agent can silently steal sensitive data without asking permission again.

praisonaiagents@< 4.5.128 (fixed: 4.5.128)


Old Docker authorization bypass pops up despite previous patch

Summary: A new vulnerability (CVE-2026-34040, rated 8.8 on the CVSS score, a 0-10 severity rating) allows attackers to bypass authorization plug-ins (add-on security tools that control who can run Docker commands) in Docker Engine and gain root-level access to host systems. The flaw exploits the same underlying problem discovered in 2016, where oversized API requests (over 1MB) are silently dropped before the authorization plug-in can inspect them, causing the plug-in to approve requests it cannot see, which Docker then executes in full.

Solution: Update to Docker Engine 29.3.1 or Docker Desktop 4.66.1. If immediate updates cannot be deployed, route API requests through a reverse proxy that blocks all requests over 512KB as a temporary mitigation. Additionally, administrators can search daemon logs using 'journalctl -u docker | grep "Request body is larger than"' to detect potential exploitation attempts.


Anthropic’s Mythos Will Force a Cybersecurity Reckoning—Just Not the One You Think

Summary: Anthropic released Claude Mythos Preview, an AI model that can automatically discover vulnerabilities (weaknesses in software) and create working exploits (code that takes advantage of those weaknesses) across operating systems and software products. The company is currently limiting access to a few dozen organizations through Project Glasswing to give defenders time to find and fix weaknesses in their own systems before attackers gain widespread access to the model.

Solution: The source mentions that Project Glasswing participants are being given early access to Mythos Preview so they can 'find weaknesses in their own systems using the model and start to grapple more broadly with how software development, update cycles, and patch adoption needs to change.' However, no specific technical mitigation, patch, update, or fix is described in the text.

Anthropic
Claude
Mythos Preview
Microsoft
Apple
Google
Linux Foundation


Exploring Visual Explanations for Defending Federated Learning against Poisoning Attacks: Enhancing LayerCAM with Autoencoders

Summary: This research paper examines how visual explanation techniques can help protect federated learning (a machine learning approach where multiple computers train a model together without sharing raw data) from poisoning attacks (attempts to corrupt the training data or model). The authors propose an enhanced version of LayerCAM (a method that visualizes which parts of an input an AI focuses on), combined with autoencoders (neural networks that compress and reconstruct data), to detect and defend against such attacks.


Anthropic’s new AI tool has implications for us all – whether we can use it or not | Shakeel Hashim

Summary: A cyber-attack on a London pathology company in June 2024 caused widespread hospital disruptions and contributed to a patient's death, highlighting real dangers from digital attacks. The article warns that a new AI release could enable more frequent and severe cyber-attacks by giving attackers powerful hacking capabilities, potentially creating widespread chaos in critical digital systems we depend on.


CVE-2026-40100: FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool endpoint accepts arbitr

Summary: FastGPT, an AI Agent building platform, has a vulnerability in versions before 4.14.10.3 where an endpoint accepts URLs without proper authentication checks, allowing unauthenticated attackers to perform SSRF (server-side request forgery, where an attacker tricks the server into making requests to internal network resources) attacks against internal systems. The vulnerability exists because the internal IP check is disabled by default.

Solution: Update FastGPT to version 4.14.10.3 or later, where this vulnerability is fixed.


CVE-2026-35651: OpenClaw versions 2026.2.13 through 2026.3.24 contain an ANSI escape sequence injection vulnerability in approval prompt

Summary: OpenClaw versions 2026.2.13 through 2026.3.24 have an ANSI escape sequence injection vulnerability (a bug where attackers can sneak special terminal control codes into the system) in approval prompts that allows attackers to trick the terminal display by manipulating tool metadata. This means an attacker could use malicious tool names containing these control sequences to make false information appear in approval prompts and permission logs.


Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks

Summary: Federal Reserve Chairman Jerome Powell and Treasury Secretary Scott Bessent met with major U.S. bank CEOs to discuss cyber risks from Anthropic's Mythos model, a new AI system with advanced capabilities for both offensive and defensive hacking. Anthropic released the model in limited capacity through Project Glasswing, a cybersecurity initiative involving major tech companies, and briefed government agencies on its cyber applications because of concerns that hackers could exploit its capabilities.

Anthropic
Claude Mythos Preview
JPMorgan Chase
Apple
Google
Microsoft
Nvidia


ChatGPT voice mode is a weaker model

Summary: ChatGPT's voice mode runs on an older, weaker model (GPT-4o era with a knowledge cutoff of April 2024) compared to other OpenAI products, even though talking to an AI might seem like it should use the smartest version. The article explains that OpenAI's highest-tier models perform much better on tasks like coding because those domains have clear, measurable success criteria (like whether unit tests pass) that make them easier to improve through reinforcement learning (training that rewards correct behaviors), and because business customers value these capabilities more.


Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever

Summary: Claude Mythos is a new AI model developed by Anthropic that can autonomously discover zero-day vulnerabilities (previously unknown security flaws) and create working exploits (tools that take advantage of those flaws) in major software like operating systems and web browsers. Although currently restricted to responsible organizations like Microsoft and Google, the source warns that similar capabilities will likely become publicly available within 12-18 months, leading to a surge in discovered vulnerabilities and requiring security teams to adopt new AI-focused strategies to defend against attacks.

Solution: The source explicitly recommends that security teams and vendors adopt the following strategies across three phases: (1) Short term: vendors should "invest in making sure that patching their products is as seamless and painless as possible, to support end-users dealing with the onslaught of new CVEs"; (2) Medium-to-long term: "plan to invest efforts into an AI-focused AppSec program (application security program), which will ensure you find the AI vulnerabilities before threat actors have a chance to exploit them."

Anthropic
Claude Mythos
OpenAI
Google
DeepMind
Meta
Microsoft
Linux Foundation
DeepSeek
Alibaba


CoreWeave stock pops 11% on deal to power Anthropic's Claude

Summary: CoreWeave, a cloud infrastructure company that operates data centers with thousands of Nvidia graphics processing units (GPUs, specialized chips that speed up AI computations), announced a multi-year deal to provide computing power for Anthropic's Claude AI models. This deal means nine of the top ten AI model providers now use CoreWeave's platform, reflecting growing demand for the specialized infrastructure needed to run large AI systems at scale.

Anthropic Claude CoreWeave Meta Microsoft OpenAI Google xAI Nvidia


CVE-2026-40217: LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/t

Summary: LiteLLM (a library for working with multiple AI models) versions through April 8, 2026 contain a vulnerability that allows remote attackers to execute arbitrary code (run commands they shouldn't be able to run) through bytecode rewriting (modifying compiled code) at a specific web endpoint called /guardrails/test_custom_code. This is a serious security flaw because attackers on the internet could potentially take control of systems running vulnerable versions.


Quadruplet Augmentation With Attribute and Structure Invariance for Online Continual Learning

Summary: This paper addresses challenges in Online Continual Learning (OCL, a type of AI training where a model learns from streaming data with unknown task boundaries) by proposing Quadruplet Augmentation, a method that uses four augmentation strategies to preserve two key properties: attribute invariance (keeping object characteristics consistent across learning sessions) and structure invariance (maintaining relationships between different attributes). The approach uses techniques from Fourier analysis (mathematical transformation of signals) and channel independence constraints to improve how AI models learn from continuously arriving data without forgetting previously learned information.


Can Anthropic Keep Its Exploit-Writing AI Out of the Wrong Hands?

Summary: Anthropic has released a preview version of an AI model called Mythos that can apparently identify and exploit zero-days (previously unknown security vulnerabilities that hackers don't yet know about). The company says it has built in certain controls to try to prevent misuse of this powerful tool.


Fear and loathing at OpenAI

Summary: Sam Altman, CEO of OpenAI, experienced a brief firing and reinstatement that led to significant organizational changes, raising questions about his leadership of a major AI company. The New Yorker published an investigation examining Altman's tenure and whether he is the appropriate person to lead such a transformative technology.


The Download: an exclusive Jeff VanderMeer story and AI models too scary to release

Summary: OpenAI has restricted the release of its new cybersecurity tool to select partners only due to security concerns, joining Anthropic in limiting AI model access over safety fears. The article also reports that Florida is investigating OpenAI's potential involvement in helping plan a mass shooting through ChatGPT, raising questions about AI's role in real-world harms.


Claude uncovers a 13‑year‑old ActiveMQ RCE bug within minutes

Summary: Claude, an AI assistant, discovered a critical remote code execution (RCE, where an attacker can run commands on a system they don't own) vulnerability in Apache ActiveMQ that had gone undetected for 13 years. The bug allows attackers to trick ActiveMQ's management API into loading a malicious file from the internet and executing arbitrary commands, especially if default login credentials are still in use. Claude identified the complete exploit chain in about 10 minutes, a task that would have taken a human researcher roughly a week.

Solution: CVE-2026-34197 has been addressed in newer ActiveMQ Classic releases (version 6.2.3 and 5.19.4). Users must upgrade to these patched versions to be protected.


Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

Summary: AI browser extensions are a major security blind spot in enterprises because they operate inside browsers with direct access to user data, passwords, and cookies while bypassing traditional security monitoring tools like DLP (data loss prevention, which blocks sensitive information from leaving a network) and SaaS logs. The report shows AI extensions are significantly riskier than regular extensions: they are 60% more likely to have CVEs (known software vulnerabilities), 3 times more likely to access cookies, and 6 times more likely to increase their permissions over time, yet 99% of enterprise users have at least one extension installed with little organizational visibility into which ones exist or what they can access.


Sen. Sanders Talks to Claude About AI and Privacy

Summary: N/A -- The provided content does not contain substantive information about a specific AI or LLM security issue. It appears to be metadata and navigation elements from Bruce Schneier's security blog, listing essay titles and tags rather than discussing an actual technical problem or vulnerability.


Microsoft starts removing Copilot buttons from Windows 11 apps

Summary: Microsoft is removing Copilot buttons (shortcuts to access its AI assistant) from several Windows 11 apps, including Notepad and Snipping Tool, replacing them with alternative menus like "writing tools." The underlying AI features remain available, but the company is reducing the number of ways users can directly access Copilot across its applications.


US summons bank bosses over cyber risks from Anthropic’s latest AI model

Summary: US Treasury Secretary Scott Bessent summoned major American bank leaders to a meeting in Washington to discuss cybersecurity risks from Anthropic's new Claude Mythos AI model. Federal Reserve Chair Jerome Powell attended the meeting, which was called after Anthropic released the model and warned it poses unprecedented cybersecurity threats.


CVE-2026-5998: A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4. This affects the function dispatch of the file

Summary: A path traversal vulnerability (a weakness that lets attackers access files outside their intended directory) was found in the chatgpt-on-wechat CowAgent software version 2.0.4 and earlier, specifically in the memory API endpoint where it processes a filename argument. This flaw can be exploited remotely by attackers, and proof-of-concept code has already been published online.

Solution: Upgrading to version 2.0.5 mitigates this issue. The patch identifier is 174ee0cafc9e8e9d97a23c305418251485b8aa89.


Alibaba leads $290 million investment for building a new kind of AI model as LLM limits emerge

Summary: Alibaba is investing $290 million in ShengShu, a startup developing world models (AI systems trained on videos and physical scenarios rather than just text) to better understand and replicate the real world. This shift reflects growing recognition that large language models (LLMs, which are AI trained mainly on text data) have limitations, and companies are now focusing on AI that can work with robots and other systems that need to understand physical reality.

Alibaba Cloud
ShengShu
Vidu
OpenAI
ChatGPT
Baidu
TAL Education
Qiming Venture Partners
Kuaishou
ByteDance
Tripo AI
PixVerse


OpenAI slams Anthropic in memo to shareholders as its leading AI rival gains momentum

Summary: OpenAI sent a memo to investors criticizing Anthropic, its main rival in the AI market, saying Anthropic is limited by compute constraints (the computing power needed to train and run AI models). OpenAI claims it will have significantly more computing capacity than Anthropic by 2030, giving it a competitive advantage in developing more capable AI models and lowering costs. Both companies are competing intensely in the large language model (LLM, an AI trained on vast amounts of text to generate human-like responses) market and preparing for potential public stock offerings.


Brainstorming with ChatGPT

Summary: This article describes how ChatGPT can help with brainstorming by quickly generating ideas, organizing them into clear themes, and turning rough directions into executable plans. The AI acts as a thought partner to overcome common brainstorming obstacles (too few or too many unstructured ideas) by expanding options, adding structure through frameworks, and helping test plans for weaknesses.


Analyzing data with ChatGPT

Summary: ChatGPT can analyze data files (like CSV or Excel spreadsheets) by letting you upload them and ask questions in plain language, helping you explore raw data and find insights without building formulas or dashboards manually. The tool is most useful early in analysis, when you're discovering patterns and anomalies, and it can generate visualizations and summaries to share with others. To get reliable results, you should frame your decision clearly, provide context about your data, ask for structured approaches rather than just answers, and verify key numbers before acting on the findings.


ChatGPT for finance teams

Summary: ChatGPT can help finance teams reduce overhead by organizing messy data, drafting reports, and standardizing recurring tasks like variance analysis and forecasting. Rather than replacing financial judgment, it speeds up formatting, rewriting, and workflow setup by structuring problems, improving clarity in communication, and creating consistent templates that teams can reuse across cycles.


Working with files in ChatGPT

Summary: ChatGPT allows you to upload various file types (CSV, XLSX, PDF, DOCX, images, and more) directly into conversations to analyze, edit, and generate content without switching applications. You can ask the AI to summarize reports, visualize data, rewrite documents, or extract information, and some versions support apps that let ChatGPT access third-party tools for additional context.


Writing with ChatGPT

Summary: This document explains how to use ChatGPT for workplace writing tasks like drafting emails, reports, and announcements. ChatGPT works best when you give it clear goals, raw material (like notes or bullet points), specific constraints (such as word limits or tone), and iterate with targeted feedback rather than asking for completely new drafts each time.


ChatGPT for customer success teams

Summary: This is a marketing document from OpenAI describing how ChatGPT can help customer success teams (people who manage client relationships and ensure clients get value from software) reduce administrative work by organizing scattered customer information into structured outputs like plans, summaries, and follow-up messages. The document outlines use cases such as onboarding, account health monitoring, meeting preparation, and renewals, emphasizing that ChatGPT works best when teams use it both for research (understanding account situations) and content creation (communicating plans clearly).


Using projects in ChatGPT

Summary: ChatGPT Projects are dedicated spaces that let you organize chats, files, instructions, and background information for ongoing work in one place, so you don't have to repeat context or search through old conversations. Projects are most useful for work that continues over time, like research, writing with multiple drafts, or shared collaboration, while quick single tasks may not need a project. On some plans, you can invite other people to collaborate and use project-only memory to keep one area of work separate from others.


Creating images with ChatGPT

Summary: ChatGPT can generate original images from text descriptions, allowing users to quickly create and iterate on visual concepts. To get good results, write clear prompts (1-3 sentences) that specify the image's purpose, main subject, setting, and visual style, using direct language like 'soft natural light from the left' rather than vague phrases. The best way to improve images is through small, targeted revisions focusing on one element at a time, with clear spatial language and specific instructions for text or layout details.


Research with ChatGPT

Summary: ChatGPT offers two web search features for research: search retrieves current facts and recent information quickly, while deep research (agentic research, meaning the AI actively plans and executes multi-step exploration) conducts thorough analysis of complex questions by searching, evaluating sources, and synthesizing findings across multiple web sources. Both features provide citations to original sources and help users explore topics more efficiently than traditional browsing.


Applications of AI at OpenAI

Summary: OpenAI offers AI capabilities through two main channels: direct consumer products like ChatGPT (a conversational tool for writing, learning, and problem-solving) and Codex (a code-focused assistant), plus APIs (interfaces that let developers integrate AI into their own applications). OpenAI's goal is to make these powerful AI tools useful, safe, and accessible to individuals, teams, and organizations.


ChatGPT for operations teams

Summary: This is a guide from OpenAI about using ChatGPT to help operations teams organize and streamline their work. ChatGPT acts like an automated assistant that takes messy information from many sources (notes, messages, trackers) and turns it into clear summaries, decision lists, and standardized documents, so teams spend less time gathering information and more time executing tasks.


ChatGPT for research

Summary: This is a guide from OpenAI on using ChatGPT as a research tool to help answer questions and make decisions faster. ChatGPT can gather information from multiple sources, organize findings with citations, and produce structured reports like briefs or comparison tables. The tool offers two approaches: a quick 'Search' mode for fast answers, and a 'Deep research' mode for complex questions that need multiple investigation steps.


Responsible and safe use of AI

Summary: Large language models (LLMs, AI systems trained on vast amounts of text to predict and generate human-like language) like ChatGPT can help with tasks like drafting and summarizing, but they may produce incorrect information or outdated answers since they rely on patterns in their training data rather than real-time information. To use these tools safely, you should verify important facts with trusted sources, check for bias in outputs, seek advice from qualified professionals for legal or medical decisions, and be transparent about your AI use in work or school settings.

Solution: The source mentions several practices to mitigate risks: enable search or deep research features 'so ChatGPT can pull information from current sources' for up-to-date answers, always double-check critical facts with trusted sources, review outputs carefully for bias, use the thumbs-down button to flag errors, and seek expert review from qualified professionals for legal, medical, or financial matters. Additionally, keep conversation links or logs for transparency about how ChatGPT contributed to your work, and obtain consent before recording or sharing others' data.


ChatGPT for managers

Summary: This content is a reference guide showing how ChatGPT can assist managers across ten different job areas, from strategy planning to crisis management. For each area (like hiring, performance reviews, or decision-making), it lists example scenarios and the types of documents or frameworks ChatGPT can help produce. This is a tool overview, not a discussion of AI risks or technical issues.


ChatGPT for marketing teams

Summary: This document describes how marketing teams can use ChatGPT, an AI language model, to speed up their work across campaigns, content creation, and performance analysis. ChatGPT helps teams move from initial ideas through drafting and launch by organizing scattered inputs into clear messaging, generating content variations, and summarizing performance data. The tool is most effective when treated as a thinking partner for iterative refinement rather than a one-time solution, with human judgment applied for final decisions.


ChatGPT for sales teams

Summary: This document outlines how ChatGPT can assist sales teams by generating helpful outputs for various stages of the sales process, from initial prospecting and research through deal closure. It covers practical applications like creating account briefs, discovery guides, meeting agendas, email sequences, proposals, and objection-handling talk tracks across eight common sales scenarios.


Prompting fundamentals

Summary: Prompt engineering is the process of designing and refining your input to help ChatGPT give better answers. The document explains that clear prompts work best when you specify what you need, provide relevant context, describe the desired output format, and break complex tasks into smaller steps. There is no single perfect way to write a prompt, so experimentation and iteration help you discover how to use AI most effectively.


AI fundamentals

Summary: AI is software that recognizes patterns and learns from data to produce useful outputs, with large language models (LLMs, systems trained on large amounts of text to generate and transform language) being a common type you interact with through tools like ChatGPT. Models go through two training stages: pre-training, where they learn general patterns from massive text datasets, and post-training, where they're refined to follow instructions reliably, communicate clearly, and handle sensitive topics carefully through safety checks. Different models are optimized for different tradeoffs, such as reasoning models designed for complex problem-solving versus non-reasoning models built for fast, straightforward tasks.


Using custom GPTs

Summary: Custom GPTs are tailored versions of ChatGPT built for specific, repeatable tasks, where you define how the GPT behaves through instructions and can add knowledge (uploaded documents) and tools like web search or data analysis. They work best when you find yourself reusing the same prompts or instructions across multiple tasks, reducing repetition and keeping context consistent. You create a custom GPT by opening the GPT builder in ChatGPT, naming it, writing clear instructions for how it should behave, and optionally uploading files or enabling features like image generation or code analysis.


Personalizing ChatGPT

Summary: OpenAI has released features that let you customize how ChatGPT behaves by using custom instructions (settings that tell ChatGPT about your role and preferred communication style) and memory (which stores information you want ChatGPT to remember across conversations). These personalization tools help ChatGPT work more like a reliable teammate by building context over time, so you don't have to repeat the same information every time you chat.


Our response to the Axios developer tool compromise

Summary: OpenAI discovered that Axios, a third-party developer library (a pre-written code package used to build software), was compromised in a software supply chain attack (where attackers infiltrate widely-used tools to affect many companies at once) on March 31, 2026, and their macOS app-signing process briefly used a malicious version. OpenAI found no evidence that user data or systems were compromised, but is revoking and updating their security certificates (digital credentials that verify software is authentic) and requiring all macOS users to update their OpenAI apps to prevent the risk of fake apps appearing legitimate. As of May 8, 2026, older versions of ChatGPT Desktop (before 1.2026.051), Codex App (before 26.406.40811), Codex CLI (before 0.119.0), and Atlas (before 1.2026.84.2) will no longer receive updates and may stop working.

Solution: Update to the latest versions of OpenAI's macOS apps through in-app update or official links. OpenAI also addressed the root cause by fixing the GitHub Actions workflow misconfiguration: the workflow previously used a floating tag instead of a specific commit hash and lacked a configured minimumReleaseAge for new packages; these have been corrected. OpenAI rotated the macOS code signing certificate, published new builds of all affected macOS products with the new certificate, and worked with Apple to prevent software notarization using the previous certificate.

OpenAI
ChatGPT Desktop
Codex
Atlas
Axios


ChatGPT has a new $100 per month Pro subscription

Summary: OpenAI has launched a new $100 per month ChatGPT Pro subscription tier that provides 5x more access to Codex (a tool that helps write code) compared to the $20 Plus plan, designed for intensive coding work. This new tier directly competes with Anthropic's Claude Max subscription at the same price point as OpenAI tries to attract users from rival AI services.

OpenAI
ChatGPT
ChatGPT Pro
Anthropic
Claude
Claude Code


Florida launches investigation into OpenAI

Summary: Florida's Attorney General has launched an investigation into OpenAI, citing concerns that the company's data and technology could be accessed by hostile foreign governments like China, and that ChatGPT has been connected to criminal activities including child exploitation and self-harm. The investigation also examines whether ChatGPT was used in connection with a shooting at Florida State University.


CVE-2026-40150: PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, the web_crawl() function in praisonaiagents/tools/web_c

Summary: PraisonAIAgents is a system that coordinates multiple AI agents working together as teams. Before version 1.5.128, the web_crawl() function didn't check URLs before fetching them, allowing attackers or malicious content to trick agents into accessing sensitive internal systems, cloud configuration data, or local files through specially crafted URLs like file:// paths.

Solution: Update PraisonAIAgents to version 1.5.128 or later, where this vulnerability is fixed.


CVE-2026-40117: PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, read_skill_file() in skill_tools.py allows reading arbi

Summary: PraisonAIAgents (a system that coordinates multiple AI agents working together) versions before 1.5.128 contain a vulnerability in the read_skill_file() function that allows reading any file from a computer's filesystem without restrictions. An attacker using prompt injection (tricking an AI by hiding instructions in its input) could exploit this to steal sensitive files, because unlike other file-reading functions in the same system, read_skill_file() lacks both boundary protections and approval requirements.


CVE-2026-40116: PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /media-stream WebSocket endpoint in PraisonAI's call modu

Summary: PraisonAI versions before 4.5.128 have a security flaw in their /media-stream WebSocket endpoint (a connection protocol for real-time communication) that allows anyone to connect without proving who they are or validating they're authorized. When attackers connect, the server automatically opens a session to OpenAI's API using its own credentials, and since there are no limits on how many connections or messages are allowed, an attacker can drain the server's resources and use up the victim's OpenAI API credits.

Solution: Update PraisonAI to version 4.5.128 or later, which fixes this vulnerability.


CVE-2026-40113: PraisonAI is a multi-agent teams system. Prior to 4.5.128, deploy.py constructs a single comma-delimited string for the

Summary: PraisonAI, a system for managing multiple AI agents working together, had a vulnerability in versions before 4.5.128 where the deploy.py file didn't check if certain configuration values (openai_model, openai_key, and openai_base) contained commas before putting them into a command. Since commas are used as separators in the gcloud deployment command, an attacker could sneak extra commas into these values to inject arbitrary environment variables (settings that control how the deployed service behaves) into the cloud service.

Solution: Upgrade PraisonAI to version 4.5.128 or later, which fixes this vulnerability.