AI Threat Readiness Pillar 1: Reduce Critical Exposures & Scan with AI

Summary: AI is making it faster for attackers to turn newly discovered vulnerabilities into working exploits, with exploitation timelines shrinking from days or weeks to just hours. Security teams are overwhelmed with too many vulnerability alerts to handle, so they need to focus on identifying which exposures actually matter by evaluating reachability (can attackers access it?), exploitability (can it be compromised?), and business impact. To address this, organizations should use AI-powered scanning tools to find complex attack chains and prioritize vulnerabilities based on real-world risk rather than just volume.

Solution: The source mentions that organizations should use Wiz Attack Surface Management (ASM), which combines external visibility of internet-facing assets with internal cloud context to help identify and reduce critical exposures. However, the text is cut off and does not provide specific implementation details or complete mitigation steps beyond recommending this tool approach.


ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New Stories

Summary: This security bulletin covers multiple threats: Cisco released patches for a high-severity SSRF vulnerability (server-side request forgery, where attackers trick a server into making unwanted requests) in Unified Communications Manager that could let unauthenticated attackers write files and gain root access; Russia's FSB reported foreign intelligence services deployed spyware on officials' mobile devices to steal data and conduct surveillance; threat actors are using social engineering to distribute VIP Keylogger through JavaScript, batch, and VBS loaders disguised as business communications; and the U.S. Treasury sanctioned Iran's largest cryptocurrency exchange for facilitating payments linked to terrorist activities and ransomware actors.

Solution: Cisco has addressed the SSRF vulnerability in Unified CM and Unified CM SME Release versions 14SU6 and 15SU5.


Gemini Voice Assistant Hijacked via Messaging Notifications

Summary: Researchers discovered a critical vulnerability in Google's Gemini voice assistant where attackers could inject malicious commands through messaging notifications (WhatsApp, Slack, SMS) using a technique called Fake Context Alignment, allowing them to control smart home devices, make calls, and manipulate the assistant without the user knowing. The attack exploited prompt injection (tricking an AI by hiding instructions in its input) by embedding hidden commands in foreign languages or muted links that Gemini would process but not read aloud. Google patched the vulnerability in November 2025 with content classifier improvements (software filters that categorize and block harmful content).

Solution: Google patched the vulnerability in mid-November 2025 with content classifier improvements.

Google
Gemini
Google Home
Google Workspace
WhatsApp
Slack
Zoom


CVE-2026-10804: A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/r

Summary: Streamlit versions up to 1.53.0 contain a vulnerability in the hashing function (a process that converts data into a fixed-size code for security purposes) within its caching system that uses weak cryptographic methods. The vulnerability is difficult to exploit as it requires local access (being on the same computer) and high technical complexity, though it has been disclosed publicly.

Solution: N/A -- no mitigation discussed in source.


CVE-2026-10803: A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflo

Summary: MLflow versions up to 3.10.0 contain a vulnerability in the dataset digest computation function that uses weak cryptographic hashing (a mathematical function that converts data into a fixed-size code, but this version uses an insecure version). The flaw requires local access to exploit and is difficult to execute, but a working exploit has been published.


AI leaders call for tougher protections against AI-aided bioweapons

Summary: Major AI company leaders, including those from Anthropic, OpenAI, and Microsoft, have sent an open letter to US lawmakers calling for stronger rules to prevent their AI systems from being used to develop biological weapons. They argue there is a serious gap in biosecurity (protections against biological threats) that could allow people to use AI to help create dangerous genetic material for harmful purposes, potentially causing a global pandemic.


Hugging Face Transformers RCE flaw enables stealthy compromise via AI model configs

Summary: A high-severity vulnerability in Hugging Face Transformers (a popular Python library for running AI models) allows attackers to execute malicious code on systems even when developers use the trust_remote_code=false setting, which is meant to block remote code execution. The attack works by hiding malicious instructions in a fake configuration parameter called _attn_implementation_internal that looks like a normal internal setting, leaving no warning messages or traces. This vulnerability affects versions 4.56.0 through 5.2.x and is particularly dangerous because the Transformers library is downloaded millions of times per week and used widely in enterprise environments.

Solution: The vulnerability was silently patched in Transformers version 5.3.0, released on March 3. Users should update to this version or later to receive the fix.


How Endava is redesigning software delivery around AI agents

Summary: Endava, a global technology services company, transformed its software delivery by adopting AI agents (AI systems that can autonomously perform tasks) as a core part of daily work across all business functions, not just engineering. The company made OpenAI its enterprise platform and embedded AI throughout its entire DavaFlow lifecycle (their software development process), from requirements gathering to deployment, which accelerated delivery and reduced manual work. Key to their success was treating AI adoption as a behavior change requiring leadership commitment and hands-on experimentation, rather than simply rolling out new software tools.


Hacking Meta’s AI Chatbot

Summary: Hackers discovered a way to take over Instagram accounts by tricking Meta's AI support chatbot into resetting passwords for accounts that weren't theirs. The attacker would use a VPN (a tool that masks your location) to hide their location, then convince the chatbot to send a password reset code to an email address they controlled, allowing them to take over the victim's account. Meta said the specific exploit was fixed, but security experts warned that chatbots are fundamentally unreliable for account security tasks.

Solution: Instagram spokesperson Andy Stone stated that 'the issue was now fixed' on Monday.

Meta
Meta AI Support Assistant
Instagram


Dreaming: Better memory for a more helpful ChatGPT

Summary: OpenAI is rolling out an improved memory system called "Dreaming" for ChatGPT that automatically learns user preferences and context from conversations over time, addressing problems with older memory features that became outdated or incorrect. Unlike the previous "saved memories" system that only worked when users explicitly asked ChatGPT to remember something, Dreaming runs in the background to continuously synthesize and update memories from chat history, making ChatGPT more personalized without requiring manual input. Users can view and edit their stored memories through a memory summary page, and this update is being released to Plus and Pro users in the US with broader rollout planned.


Beware the ‘son of Mythos,’ security experts warn

Summary: Major AI companies like Anthropic and OpenAI are expanding access to frontier AI models (cutting-edge AI systems) for vulnerability discovery tools like Claude Mythos, which can identify security weaknesses in software. Security experts warn that these tools are becoming cheaper and more capable, and that attackers are already using similar AI systems, so organizations need to prepare for more advanced threats including the ability to chain together multiple medium-severity vulnerabilities into high-impact attacks.

Solution: According to Paul Chichester from the UK's National Cyber Security Centre, "Organisations should improve cybersecurity by hardening access controls and running incident response exercises." Additionally, organizations should "use AI to write better code and look for vulnerabilities" themselves, and ensure their teams can "rapidly validate, prioritize, and remediate the issues being discovered before attackers find them first."

Anthropic
Claude
OpenAI
GPT-5.5 Cyber
Google


WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

Summary: A vulnerability in Google Gemini's Android voice assistant could be hijacked through poisoned notifications from apps like WhatsApp or Slack, allowing attackers to manipulate what Gemini says, open windows, fake messages, or launch apps without needing malicious software on the phone. The attack works by treating hostile notification text as instructions the assistant should follow. Google has already patched this vulnerability, and there is no evidence it was exploited in the real world.

Solution: Google has since patched it.

Google Gemini
WhatsApp
Slack
SMS
Signal
Instagram
Messenger
Google Home
Zoom

integrity confidentiality availability safety


xAI Asks Court to Strip Alleged Grok Deepfake Nudes Victims of Anonymity

Summary: Elon Musk's AI company xAI is asking a court to force four people who claim Grok (an AI chatbot) was used to create sexual deepfake images of them to reveal their real names in a lawsuit, despite their concerns about harassment and privacy. The plaintiffs, currently identified by pseudonyms like "South Carolina Doe," say they already suffered emotional distress from the deepfakes, including one targeting a child, and fear further harm if their identities become public.


Unveiling the black box: A multi-layer framework for explaining reinforcement learning-based cyber agents

Summary: This research paper presents a framework for understanding how reinforcement learning-based cyber agents (AI systems trained to make decisions by trial and error in cybersecurity contexts) make their decisions. The authors developed a multi-layer approach to explain the "black box" problem (the difficulty in understanding why AI systems reach certain conclusions), which is important for security experts to verify that these AI agents are operating correctly and safely.


Labour MP sues Elon Musk’s AI company over fake sexualised images

Summary: A UK Labour MP is suing Elon Musk's AI company after its Grok tool (a generative AI chatbot) was used to create non-consensual sexualized images of her, part of a broader problem of fake intimate images being generated and shared on X. The MP described seeing herself depicted in inappropriate ways without permission as deeply violating.


As AI gets better, it reveals an empty promise

Summary: Google's new Gemini AI agent called Spark demonstrates impressive capability by accessing personal information like pet names and family members' identities without users explicitly sharing them, raising privacy concerns. The article argues that while AI companies promote these tools as solutions to improve productivity, they may be missing more important societal problems that actually need fixing.


OpenAI CEO Sam Altman to meet with lawmakers, Trump officials in DC

Summary: OpenAI CEO Sam Altman is meeting with U.S. lawmakers and Trump administration officials in Washington, D.C. to discuss a new executive order requiring AI companies to voluntarily give the government access to their models for up to 30 days before release. Altman publicly supports the order, saying it strikes the right balance between developing safe AI models and providing cybersecurity tools to trusted defenders.


Former police officer in hiding after being falsely linked to Henry Nowak arrest

Summary: A former police officer named Christi Hill was falsely identified on social media and AI platforms, including Grok (an AI chatbot), as being involved in an arrest related to a murder case, forcing her to go into hiding. The false identification spread across multiple platforms, demonstrating how AI systems can amplify misinformation by misidentifying people in real-world situations.


Morgan Stanley will soon open its trillion-dollar wealth management funnel to AI agents

Summary: Morgan Stanley is opening its wealth management platforms (ShareWorks and Equity Edge) to AI agents (autonomous software that can make decisions and take actions without human input) from corporate clients, allowing these agents to access data directly without using traditional human-focused interfaces. The bank plans to expand this access to 3,400 clients by next year, using the Model Context Protocol (an open-source standard that lets AI models connect to data sources). This move reflects Wall Street's shift toward AI agents handling tasks that software users currently perform manually.

Morgan Stanley
OpenAI
JPMorgan Chase
Goldman Sachs


Microsoft and OpenAI broke up — now they’re ready to fight

Summary: Microsoft announced new AI initiatives at its Build conference, including in-house reasoning models (AI systems designed to work through problems step-by-step) and AI agents (software that can perform tasks autonomously), signaling it is moving toward independence in the AI market. The company's partnership with OpenAI, which previously dominated Microsoft's AI strategy, effectively ended in late April, though Microsoft still provides cloud computing services (the remote servers that store and process data) to OpenAI.


Meta is trying to sell AI agents to businesses in latest effort to diversify away from ads

Summary: Meta is launching Meta Business Agent, an AI tool that helps businesses of any size respond to customer questions, recommend products, and book appointments through WhatsApp, Messenger, and Instagram. The feature will be available through a paid subscription tier as Meta tries to reduce its dependence on advertising (which currently makes up 98% of its revenue) and compete with other AI companies like OpenAI and Google.

Meta
Meta AI
WhatsApp
Messenger
Instagram
OpenAI
Anthropic
Google
Amazon
Microsoft
Nvidia
OpenClaw


Introducing new capabilities to GPT-Rosalind

Summary: OpenAI introduced an updated GPT-Rosalind model designed specifically for life sciences research at enterprise scale, combining advanced coding abilities with stronger performance in drug discovery areas like medicinal chemistry and genomics. The update was evaluated using LifeSciBench, a new benchmark that tests AI performance across six key research workflows including evidence analysis, scientific reasoning, and experimental design. The content also includes detailed technical feedback on limitations in a micro-dystrophin research study, with specific recommendations for improving experimental methods.

Solution: For the micro-dystrophin expression study's identified problems, the source explicitly recommends: (1) for Western blot quantification, "use a recombinant micro-dystrophin standard and an orthogonal method that distinguishes transgene from endogenous dystrophin, such as targeted mass spectrometry or a transgene-specific/epitope-specific assay"; (2) for immunofluorescence, "repeat IF with an antibody against an epitope present in the transgene but absent from revertant dystrophin" and "quantify transgene-positive fibers separately from revertant fibers"; (3) for surrogate endpoint validity, "empirically validate the relationship between micro-dystrophin mass-percent, sarcolemmal localization, downstream functional restoration, and clinical benefit before treating expression as a surrogate endpoint"; and (4) for biopsy design, use matched bilateral sampling strategies that account for spatial variability and disease progression.


Security of 100 AI Agents Tested and Ranked – What You Need to Know

Summary: A security study of 100 AI agents found that only 11 are both capable and well-defended, with 98% suffering from the 'lethal trifecta' (private data access combined with exposure to untrusted content combined with ability to take outbound actions, creating too much power with too little control). Computer agents and coding agents pose the greatest security risks because they have wide system access and users cannot see or reliably control what actions they actually take between receiving a task and completing it.


Uber Caps Usage of AI Tools Like Claude Code to Manage Costs

Summary: Uber has implemented a $1,500 monthly spending cap per employee on agentic coding tools (AI systems that can independently write and execute code, like Claude Code and Cursor) to control costs after exhausting its 2026 AI budget in just four months. The policy limits spending on each tool separately, meaning an employee can spend up to $1,500 on one tool and another $1,500 on a different tool, which works out to roughly 11% of a typical software engineer's yearly salary in AI tool costs.

Solution: Uber instituted monthly spending limits of $1,500 per employee per AI coding tool. According to the source, these limits 'have been instituted in recent months' and apply specifically to agentic coding software such as Cursor and Claude Code, with separate budgets maintained for each tool.


Malicious Notifications Could Trick Google Gemini Users

Summary: Google Gemini's voice assistant had a prompt injection flaw (a vulnerability where attackers hide malicious instructions in input data) that allowed attackers to embed harmful commands in notifications. This could trick users into performing unwanted actions through social engineering (manipulating people into revealing information or taking harmful actions).


How Wasmer used Codex to build a Node.js runtime for the edge

Summary: Wasmer engineers used Codex (an AI code generation tool) to build Edge.js, a JavaScript runtime that runs Node.js workloads inside WebAssembly (a low-level code format that runs in sandboxes for security and portability). What would have taken one year to build was completed in two weeks, allowing a small team to tackle a project previously only feasible at large companies.


Microsoft wants to put AI agents on a short leash

Summary: Microsoft has released new security tools to control autonomous AI agents (software programs that can independently take actions like accessing files and running code) as companies adopt them in development workflows. The main offering is Microsoft Execution Container (MXC), a sandbox (an isolated environment that restricts what a program can do) that lets developers set boundaries on what resources and files agents can access. Microsoft also updated MDASH (a vulnerability research system using multiple AI agents to find security flaws) and introduced open-source governance tools to address risks from agents having too much autonomy.

Solution: Microsoft Execution Container (MXC) is positioned as the primary mitigation. According to the source, "MXC is a sandboxed code execution system for running untrusted code (model output, plugins, tools) on Windows, Linux, and macOS" that "provides multiple containment backends — from OS-native process sandboxes to full VMs — behind a unified JSON configuration schema and TypeScript SDK." The source states MXC is "a policy-driven execution workflow that lets developers specify what an AI agent can access, such as files, networks, resources, credentials, and then enforces those boundaries at runtime." Integration with Agent 365 will bring additional controls from Defender, Entra, Intune, and Purview to agent environments.

Microsoft
OpenAI
NVIDIA
Agent 365
Windows 365
OpenClaw
OpenShell
Defender
Entra
Intune
Purview


France's Macron invites Sam Altman to attend G7, OpenAI tells CNBC

Summary: Sam Altman, CEO of OpenAI, has been invited by French President Macron to attend the G7 conference in June 2026, where AI is expected to be a major topic of discussion. OpenAI plans to focus on youth safety, frontier AI risks (particularly cyber and biological threats), and getting tech companies to make voluntary commitments to responsible AI development. This invitation is part of Macron's broader effort to attract major tech companies and investment to France's AI infrastructure.

OpenAI
Sam Altman
ChatGPT
Anthropic
Dario Amodei
Google
SoftBank


The sorry state of skill distribution

Summary: Public marketplaces for AI skills (specialized add-ons that extend AI agent capabilities) are being flooded with malicious skills that steal passwords and data. Security companies have released skill scanners to detect these threats, but researchers found that these scanners are easy to bypass, sometimes in under an hour, because they rely on static detection methods that attackers can repeatedly modify to evade.

Anthropic OpenAI Google Cisco Vercel VirusTotal OpenClaw Gen Socket Snyk ClawHub


As the tech mega-IPO race heats up, has OpenAI missed its moment?

Summary: OpenAI, the company behind ChatGPT (a conversational AI system), is facing competitive pressure as rival AI companies race to go public through IPOs (initial public offerings, where companies sell shares to the public for the first time) and raise large amounts of investment money. The article notes that OpenAI's CEO Sam Altman has scaled back earlier predictions about building super intelligence and reshaping society, and the company has struggled to generate revenue from ads and specialized chatbots.


AI may finally unlock the cyber budgets CISOs have wanted for years

Summary: AI systems, particularly agentic AI (autonomous software that makes decisions and takes actions with minimal human oversight), are creating new security risks in enterprises by operating across systems at machine speed and collapsing traditional security boundaries. Security leaders now have board-level urgency and increased budgets to address these threats, though organizations still lack reliable ways to monitor what these AI agents are accessing and whether their actions align with company policies.


OpenAI public policy agenda

Summary: OpenAI has published its public policy agenda centered on ensuring that artificial general intelligence (AGI, highly capable AI systems that can perform many tasks) benefits all of humanity through five core principles: democratization, empowerment, universal prosperity, resilience, and adaptability. The document outlines OpenAI's policy priorities, including a focus on frontier AI safety (protecting against risks from the most advanced AI models, particularly regarding CBRN weapons like cyber or biological threats) and support for state and federal frameworks that emphasize transparency, safety incident reporting, and developer accountability.

Solution: OpenAI supports state-level legislative efforts such as California SB 53, the New York RAISE Act, and Illinois SB 315, which emphasize transparency, public reporting around catastrophic-risk evaluations and safety incidents, whistleblower protections, and enforceable accountability for developers. OpenAI also supports Congressional action to establish a comprehensive federal framework that leverages state frontier safety laws, strengthens the Center for AI Standards and Innovation (CAISI) as the primary federal institution for frontier AI safety, and mobilizes a broader resilience plan across government to address national security and public safety challenges.


A blueprint for democratic governance of frontier AI

Summary: This document proposes a strategy for the U.S. government to create lasting institutions that oversee frontier AI (the most advanced AI systems being developed). The plan has three main parts: build a national framework based on state laws already in place, strengthen CAISI (the federal organization responsible for frontier AI safety) as the main federal institution, and develop a broader government-wide plan to address national security and public safety risks from advanced AI.


Google adds Android protection against AI deepfake scam calls

Summary: Google is rolling out a new Android security feature called 'fake call detection' that protects users from AI deepfake scam calls where scammers impersonate someone's contacts. The feature works by having a user's device send an encrypted confirmation signal when receiving a call, and if that signal is missing, it pings the actual contact's phone to verify the call is real, warning the user to hang up if the contact's device confirms they're not calling.

Solution: Google's mitigation is built into the new 'fake call detection' feature, which is rolling out globally this month to Android 12 and later devices (starting with Pixel devices) and enabled by default. The feature requires Phone by Google, Contacts, and Google Messages (with RCS, or Rich Communication Services, enabled) to be installed. Google also stated: 'If your device uses a different app, you can install Phone by Google from the Play Store and set it as your default phone app to help protect yourself from fake calls.'

Google
Android
Phone by Google
Google Messages


Google must let publishers opt out of AI Search features, rules UK

Summary: The UK's Competition and Markets Authority has ruled that Google must allow website publishers to opt out of AI Search features, including AI Overviews (summaries generated by AI) and prevent their content from being used to train Google's AI models. This new rule gives publishers, especially news organizations, more control over how their content is used by AI systems.


Debapt: Ontology-driven multi-agent debate for APT adversary profile construction from cyber threat intelligence

Summary: Debapt is a system that uses multiple AI agents (independent AI programs that work together) debating with each other to build profiles of APT (advanced persistent threat, a sophisticated type of cyberattack) adversaries by analyzing cyber threat intelligence (information about security threats). The system uses an ontology (a formal structure that defines how concepts relate to each other) to organize this debate process. This research proposes a new way to understand and track advanced attackers by having AI agents discuss and reason through threat data together.


Anthropic grants Project Glasswing access to 150 more companies, with a focus on critical infrastructure

Summary: Anthropic expanded its Project Glasswing (an AI-based vulnerability hunting initiative that finds security bugs in software) to 150 more companies, especially those in critical infrastructure like power and healthcare. However, security experts warn this creates a bottleneck problem: if AI finds vulnerabilities 10 or more times faster than before, companies may not be able to validate, prioritize, patch, and deploy fixes quickly enough, potentially overwhelming security teams rather than actually improving defense.

Anthropic Amazon Apple Google Microsoft NVIDIA

Anthropic
AWS
Apple
Broadcom
Cisco
CrowdStrike
Google
JPMorganChase
Linux Foundation
Microsoft
NVIDIA
Palo Alto Networks
Okta


Deepfake detection with dual-mode swin transformer: Multi-scale feature learning and local ambiguity mitigation

Summary: This research paper presents a method for detecting deepfakes (synthetic videos or images created by AI to look realistic) using a dual-mode Swin Transformer, which is a type of neural network architecture. The approach uses multi-scale feature learning (analyzing visual details at different zoom levels) and local ambiguity mitigation (reducing confusion in uncertain areas) to improve detection accuracy. This is a technical contribution to security research, not a response to an existing vulnerability or security incident.


Palo Alto CEO says customer meeting requests have surged amid AI security concerns

Summary: Palo Alto Networks CEO Nikesh Arora reported a surge in customer meetings, with the company fielding roughly 1,200 inquiries in recent weeks from organizations seeking guidance on AI security risks. The article notes that AI-powered attacks are becoming more sophisticated, making cybersecurity more important for companies, and that earlier investor concerns about AI disrupting cybersecurity companies appear to have been overblown.


CVE-2026-44654: LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a sha

Summary: LibreChat (a ChatGPT-like tool that connects to multiple AI providers) has a security flaw in versions up to 0.8.3 where someone with editing access to a shared agent can delete files globally, breaking the owner's separate private agents that use the same files. This is a cross-agent integrity violation, meaning one agent's access should not affect another agent's files.

Solution: Version 0.8.4 contains a patch.


CVE-2026-44653: LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users

Summary: LibreChat, a ChatGPT-like application supporting multiple AI providers, has a vulnerability in versions up to 0.8.3 where users with limited VIEW access can retrieve encrypted admin passwords and API keys through specific API endpoints, exposing credentials that should remain secret. This happens because the API returns plaintext sensitive values instead of hiding them from non-admin users.

Solution: Version 0.8.4 contains a patch. The source also recommends these additional approaches: never return decrypted admin-managed secrets to non-owners; redact apiKey.key and oauth.client_secret from all API responses; consider returning only boolean presence indicators for secrets (true/false flags showing whether a secret exists, similar to the auth-values route pattern); and if owners need to edit configs without re-entering secrets, preserve secrets server-side and return placeholders instead of plaintext values.


CVE-2026-32625: LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the M

Summary: LibreChat, a ChatGPT-like tool that works with multiple AI providers, has a vulnerability in versions up to 0.8.3 where it unsafely replaces environment variable placeholders (like ${VAR}) when validating user-provided server URLs. An authenticated attacker can create a malicious server configuration that tricks LibreChat into sending sensitive secrets like encryption keys and database credentials to an attacker-controlled server, compromising the entire installation without needing admin access.

Solution: This is patched in version 0.8.4-rc1.


CVE-2026-31942: LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.7.6, an In

Summary: LibreChat, a ChatGPT-like application supporting multiple AI providers, has an IDOR vulnerability (insecure direct object reference, where an attacker can access or modify resources belonging to other users) in its API key management system in versions up to 0.7.6. An authenticated attacker can inject a userId parameter to overwrite another user's API keys, potentially stealing their API key configurations or blocking their service.

Solution: This vulnerability is patched in version 0.8.3-rc1.


OpenAI upgrades GPT-5.5, as it plans to retire legacy ChatGPT models

Summary: OpenAI has upgraded GPT-5.5 Instant to respond more accurately with more natural, human-like language and shorter responses, while retiring older models like o3 (August 26) and GPT-4.5 (June 27) to focus resources on newer capabilities. The company is also adding a job search tool to ChatGPT that integrates with job boards like Indeed and Upwork to help users find positions and tailor resumes.


Microsoft's new MAI models

Summary: Microsoft announced two new text-based LLMs (large language models, AI systems trained on text data): MAI-Thinking-1, a 35-billion-parameter model (parameters are the adjustable values that make up a neural network) designed for reasoning tasks, and MAI-Code-1-Flash, a smaller 5-billion-parameter model built specifically for code generation in GitHub Copilot and VS Code. Both models were trained on licensed data rather than web scrapes, and Microsoft claims MAI-Thinking-1 outperforms Claude's Sonnet 4.6 model despite its smaller size.

Microsoft
MAI-Thinking-1
MAI-Code-1-Flash
GitHub Copilot
VS Code
Anthropic Sonnet 4.6


HP Poly VoIP vulnerability sets the stage for executive voice deepfakes

Summary: HP released patches for a critical buffer overflow vulnerability (a coding flaw where too much data is written into a fixed-size memory container) in its Poly Voice conference phones that could allow attackers without authentication to gain root access (complete control of the operating system) and record conversations for voice deepfakes (AI-generated fake audio impersonations). The flaw exists in code that processes ICE (Interactive Connectivity Establishment, a feature for establishing direct network connections) requests and affects multiple Poly phone models.

Solution: HP has fixed the vulnerability in Poly Unified Communications Software (UCS) versions 6.4.8 for VVX devices, 8.1.7 for Trio 8300, and 7.2.8 for Trio 8500 and 8800 phones. Additionally, HP advises administrators to disable the ICE feature if it is not needed, since it is not enabled by default on HP Poly devices.


Microsoft unveils new AI models to lessen reliance on OpenAI and lower costs for developers

Summary: Microsoft announced new AI models including MAI-Code-1-Flash (a model that generates source code from written descriptions) and MAI-Thinking-1 (a reasoning model) to reduce dependence on OpenAI and lower costs for developers. These models run on Microsoft's own Azure cloud infrastructure, allowing the company to avoid paying third parties while offering developers lower token costs (tokens are the basic units that an AI model reads and processes). Microsoft is positioning itself to compete directly with proprietary models from OpenAI and Google by building its own AI capabilities across multiple layers of the technology stack.

Microsoft
OpenAI
Anthropic
Google
GitHub Copilot


Trump Signs Executive Order That Invites Vetting of Top AI Models for National Security Risks

Summary: President Trump signed an executive order establishing a voluntary framework for the federal government to review the national security risks of the most advanced AI systems (models built by companies like OpenAI and Google that represent the cutting edge of AI development) before their public release, with a 30-day review period. The order aims to balance security concerns with concerns about slowing innovation, and it allows frontier labs to voluntarily share their most advanced models to help secure critical infrastructure and strengthen government cyber defenses.


The Meta AI Account Recovery Incident Wasn’t Just a Chatbot Problem

Summary: Hackers reportedly used Meta's AI support chatbot to take over high-profile Instagram accounts by tricking it into changing email addresses linked to those accounts, affecting pages associated with the Obama White House, Sephora, and other notable figures. The incident wasn't simply a case of prompt injection (tricking an AI by hiding instructions in its input), but rather revealed a deeper problem with how the AI chatbot was designed to handle account recovery requests.


Microsoft Build 2026: The 7 biggest announcements

Summary: Microsoft held its Build 2026 conference with announcements from CEO Satya Nadella covering new hardware and AI updates, including a Surface RTX Spark Dev Box designed to help developers run local AI models (machine learning systems that operate on a user's own device rather than in the cloud) on their computers. The event also featured updates to Microsoft's own AI models and an always-on personal assistant feature.


Securing AI Agents Before They Go Rogue Is Next to Impossible

Summary: AI agents (systems that can act independently to complete tasks) with high autonomy and broad permissions are very difficult to secure and pose a serious risk to enterprises. The article warns that companies need to take action now to prevent AI agents from causing major problems in the future.


Trump revives parts of canceled AI order with cybersecurity-focused directive

Summary: President Trump signed an executive order focused on strengthening cybersecurity and establishing voluntary cooperation between the federal government and AI developers, reviving parts of a broader AI initiative he had canceled two weeks earlier. The order directs federal agencies to deploy AI-enhanced cybersecurity tools, create a government-industry system for sharing information about security vulnerabilities (known as a vulnerability-sharing initiative), and evaluate the cyber capabilities of advanced AI models. The order emphasizes that it does not impose mandatory licensing or approval requirements on AI developers, attempting to balance national security concerns with innovation.

Solution: The executive order specifies several explicit actions: Within 30 days, the Committee on National Security Systems must prioritize cyber defense of national security systems (NSS, government systems handling classified information). The Department of Defense is directed to prioritize protection of its own information systems. The Cybersecurity and Infrastructure Security Agency (CISA) must issue directives and guidance to strengthen civilian federal networks and accelerate adoption of AI-enabled defensive technologies.


Trump signs executive order to review AI models before they’re released

Summary: President Trump signed an executive order creating a voluntary framework requiring AI companies to share their frontier models (cutting-edge AI systems at the technological frontier) with the federal government before public release, aiming to improve security and protect critical infrastructure. The order balances innovation concerns with security risks by directing federal agencies to develop a system for assessing the advanced cyber capabilities of AI models before they are released.


Microsoft’s first advanced reasoning AI is here

Summary: Microsoft announced MAI-Thinking-1, a new in-house AI model designed for advanced reasoning tasks, at its Build 2026 conference. The company claims this medium-sized model performs as well as leading models on software engineering benchmarks and was trained from scratch on clean data without using techniques from other companies' models. This represents Microsoft's growing effort to develop its own AI models instead of relying solely on its partnership with OpenAI.


Google’s Phone app will tell you if a scammer is impersonating one of your contacts

Summary: Google is adding a feature to its Phone app that detects when scammers use AI to impersonate calls from people in your contacts list, alerting you so you can hang up. The feature is part of Google's June Android update, which includes several other security and convenience improvements across Android devices.


Microsoft Scout is a new AI personal assistant built on OpenClaw

Summary: Microsoft is launching Microsoft Scout, a new AI personal assistant built on OpenClaw (a foundation model technology) that integrates into Microsoft 365 apps like Outlook, OneDrive, and Teams. Unlike the existing Copilot assistant, Scout can see and do more, functioning as a comprehensive personal assistant that helps employees with tasks like organizing calendars, managing expenses, and drafting emails.

Microsoft
Microsoft Scout
Microsoft 365
Outlook
OneDrive
Teams
Copilot


Microsoft’s Project Solara is an OS for AI agent gadgets

Summary: Microsoft announced Project Solara, a new operating system (OS, the core software that manages a device) built on Android and designed specifically for gadgets that run AI agents (software programs that can autonomously perform tasks). The company demonstrated two prototype devices: a desk gadget similar to Amazon Echo Show with facial recognition, and a wearable badge with a camera and fingerprint scanner, both intended to provide access to AI agents.

Microsoft
Project Solara
Amazon Echo Show


Trump signs executive order seeking early access to new AI releases

Summary: President Trump signed an executive order requiring tech companies to voluntarily share new AI models with the federal government for review up to 30 days before public release. The framework aims to help identify national security and cybersecurity risks before powerful AI systems reach the public, though companies are not legally required to participate.


CVE-2026-47117: OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The pr

Summary: OpenMed versions before 1.5.2 have a remote code execution vulnerability (RCE, where attackers can run commands on the affected system) in how it loads privacy-filter models. The vulnerability exists because the software uses overly broad pattern matching on user-supplied model names, allowing attackers to trick it into loading malicious code from external sources. An unauthenticated attacker can exploit this by providing a fake model repository containing harmful code that gets executed with the same permissions as the OpenMed service.

Solution: Update to OpenMed version 1.5.2 or later.


Anthropic expands Mythos to 150 additional organizations in more than 15 countries

Summary: Anthropic is expanding access to Mythos, an AI model designed to find software vulnerabilities, to 150 additional organizations across 15+ countries as part of Project Glasswing. The expansion includes industries like power, water, healthcare, and communications, though new partners must meet security requirements first. Since the initial launch in April with 50 partners, Project Glasswing participants have discovered over 10,000 high or critical-level security flaws.

Anthropic
Mythos
Project Glasswing
Apple
Nvidia
Microsoft
CrowdStrike
Palo Alto Networks
Rubrik


Secure multi-tenant AI agents with Amazon Bedrock AgentCore resource-based policies

Summary: Amazon Bedrock AgentCore is a tool that lets Software as a Service (SaaS) providers serve multiple clients, called tenants, with different security needs using the same AI agent. Resource-based policies (rules that control who can access a resource directly) let you grant some tenants cross-account access from their own AWS accounts while restricting others to traffic that stays only within a private virtual network, all without sharing credentials or creating separate user accounts for each tenant.

Solution: Use resource-based policies on AgentCore Runtime and AgentCore Runtime endpoint resources to centralize access control. For cross-account access (like Example Corp), implement both a resource-based policy on your resources and an identity-based policy (access rules tied to a user or role) in the tenant's AWS account. For VPC-restricted scenarios (like AnyCompany), use specific IAM conditions to enforce that requests originate only from an approved virtual private cloud (VPC, a private network in AWS), adding a network-level security boundary on top of identity-based controls.


Microsoft Build 2026: All the news about Windows, AI, RTX Spark, and more

Summary: Microsoft is holding its annual Build 2026 developer conference starting June 2nd in San Francisco, where the company is expected to announce new AI models, agentic tools (AI systems that can take actions autonomously), a Copilot "super app" (a single application combining multiple services), and updates to Windows 11. The conference will also feature announcements about new hardware like the Surface Laptop Ultra and Project Solara, an operating system designed for AI agent gadgets (specialized devices running autonomous AI systems).


CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

Summary: Kiro IDE (an AI agent that runs on your desktop) has a vulnerability where attackers can trick it into writing files to sensitive locations (like .vscode/tasks.json, which automatically runs code when you open a folder), allowing them to execute arbitrary commands (run code they choose). This affects all versions before 0.11.

Solution: Update Kiro IDE to version 0.11 or later.


Anthropic scales Claude Mythos  to critical infrastructure in 15+ countries

Summary: Anthropic is expanding Project Glasswing, an initiative that uses its AI model Claude Mythos to find and fix critical software vulnerabilities (security weaknesses that attackers could exploit), to about 150 new organizations across 15+ countries in critical sectors like power, water, and healthcare. Claude Mythos can identify thousands of zero-day vulnerabilities (security flaws unknown to vendors or the public) in a few weeks, and the company is scaling access because a successful attack on these organizations' code could affect over 100 million people.

Anthropic
Claude Mythos
OpenAI
GPT-5.5-Cyber


Why the browser is now the front line for AI security

Summary: AI is making phishing attacks faster and harder to stop, with attackers using AI to quickly create and rotate phishing infrastructure (fake websites designed to steal login information) across multiple channels like email, social media, and search ads, while employees simultaneously adopt unvetted AI tools that expose sensitive data. Traditional security defenses that rely on blocklists and IOC feeds (indicators of compromise, like flagged domain names and IP addresses) are becoming ineffective because phishing pages now appear and disappear in hours, making them essentially zero-day attacks (previously unseen threats) that blocklists cannot catch in time. The article argues that browsers are now the critical security battleground where both attacker delivery and account compromise occur.

ChatGPT OpenAI Doko ShinyHunters BlackFile


Anthropic Expanding Mythos Access to 150 New Organizations

Summary: Anthropic is expanding Project Glasswing, a program that uses Claude Mythos (an AI tool for finding security flaws) to help organizations scan their code for vulnerabilities. The initiative is adding roughly 150 new partner organizations from over 15 countries in critical sectors like power, water, and healthcare, after the initial 50 partners identified thousands of vulnerabilities using Mythos.

Solution: Anthropic says Mythos can help with both verification and patching of vulnerabilities. The company is also working with others to 'substantially scale up the reviewing and patching of vulnerabilities in open-source software' and is sharing 'ideas and best practices for disclosing vulnerabilities to open-source maintainers, with the intent of making these reports easier to triage and to act upon.'

Anthropic
Claude
Mythos
Okta
Samsung
ENISA
NATO
Mozilla
Palo Alto Networks
Cloudflare


Human Behavior Anonymization for Secure Teleoperation

Summary: This research addresses a privacy risk in teleoperated robotics (systems where humans remotely control robots by having their movements tracked and converted into robot commands). The problem is that motion-tracking data can leak biometric information (unique physical characteristics) that could allow someone to re-identify the operator. The authors propose using a VAE (variational autoencoder, a type of machine learning model that learns compressed representations of data) to filter out identity-revealing patterns while keeping the motion information needed for the robot to complete tasks.

Solution: N/A -- no mitigation discussed in source.


Trigger as Entity: Backdoor Attacks to Graph-Based Retrieval-Augmented Generation of Large Language Models

Summary: Researchers discovered a new security vulnerability in graph-based RAG (retrieval-augmented generation, where an AI system pulls information from external knowledge graphs to answer questions) systems used with large language models. Attackers can poison the external database by inserting hidden triggers and false information into the knowledge graph, causing the AI to give wrong answers when those triggers appear in user queries while still answering normal questions correctly. The attack uses three types of triggers at different complexity levels, from simple words to semantic patterns, and tests showed the attack works across multiple AI systems.


Gemini Spark is the most impressive and terrifying AI experience I’ve had yet

Summary: Gemini Spark is Google's new agentic AI (an AI system that can take independent actions to complete tasks) that goes beyond typical chatbots in handling complex requests like trip planning. Unlike previous AI tools that only handle generic travel suggestions, Spark appears to deliver more detailed and personalized results by actively searching multiple sources and creating comprehensive itineraries.


Alphabet's stock sale, Iran negotiations, Anthropic's IPO plans and more in Morning Squawk

Summary: This article is a business news roundup covering multiple topics including geopolitical negotiations, stock market movements, and corporate announcements. The only AI-related item is that Anthropic, an AI startup, has confidentially filed paperwork with regulators to prepare for going public (an IPO, or initial public offering, where a private company sells shares to the public), ahead of its rival OpenAI which is also preparing a similar filing.


Travelers deploys AI-powered claims countrywide with OpenAI

Summary: Travelers Insurance deployed an AI Claim Assistant powered by OpenAI's Realtime API (a system that lets AI have natural voice conversations in real time) to help customers file auto insurance claims after accidents. The assistant guides customers through the claims process 24/7 without wait times, and 85-90% of customers now complete their claims entirely through the AI, freeing human staff to handle more complex cases.


AI to drive up UK youth unemployment, as Alphabet raises $80bn for spending splurge – business live

Summary: This article covers various economic news topics, including Anthropic's confidential filing for an initial public offering (IPO, a process where a private company becomes publicly traded by selling shares to the public) and a report from the European Central Bank showing that gold has become the world's largest reserve asset for countries, surpassing US government bonds. The shift reflects geopolitical tensions driving central bank demand for gold, though some of the change is due to gold's price increasing significantly in recent years.


Rehumanizing global health care with agentic AI

Summary: Healthcare providers are increasingly adopting agentic AI (AI systems that can make autonomous decisions and handle complex tasks without human intervention for each step) to automate administrative work and patient scheduling, with over two-thirds of providers already using it. Unlike earlier digital tools that added burden, agentic AI can handle nuanced scenarios by retrieving information from expert sources and iterating over time, freeing clinicians to focus on patient care. At Hospital for Special Surgery, AI agents reduced insurance claim processing from weeks to automated monthly handling of 1,100 claims, and now manage patient scheduling and triage 24/7 through conversational AI.

Solution: For high-stakes AI decisions, the source explicitly describes safeguards at HSS: 'Sensitive, complex, or uncertain scenarios are escalated to human specialists. Every decision made by the AI agent is auditable and human staff can step in at any point.' The source also notes that 'providers to ensure they have these sorts of guardrails embedded into systems' and mentions HSS uses 'an AI subcommittee' to filter all technology decisions. Additionally, 'Patient data is kept secure and the system is trained on all HSS protocols, policies, and care pathways.'


Attack targeting OpenAI Codex users exposes AI software supply chain risks

Summary: Attackers published a malicious npm package (a software library distribution platform) called codexui-android that appeared to be a legitimate tool for OpenAI Codex users but secretly stole authentication tokens and sent them to an external server. The attack exploited a supply chain gap where malicious code was hidden in the distributed package but not visible in the public source code repository, allowing the package to reach about 27,000 weekly downloads before detection. Security experts warn this reflects a broader vulnerability in AI software security, where developer tokens provide persistent access to accounts and are increasingly attractive targets as AI tools become widespread.

Solution: A cybersecurity researcher stated that 'enterprises should verify both the provenance of software packages and the consistency between published artifacts and their public source code.' Additionally, organizations should apply 'least-privilege and behavioral monitoring disciplines to AI tools' the same way they do for human user accounts, and maintain 'a complete inventory of what their AI tools can access, what credentials they inherit, and what external services they interact with.'


Advancing youth safety and opportunity through global leadership

Summary: This text discusses how AI can benefit young people through personalized learning and skill development, but emphasizes that companies must build products with safety safeguards by default rather than relying on parents or students to manage risks alone. OpenAI and other organizations are proposing an international youth safety institute to coordinate ongoing research, standards, and guidance across governments, industry, and civil society to keep AI safe and age-appropriate for young users.

Solution: The source proposes establishing either a new international institute or giving an existing national AI institute a global mandate to share research and guidance. It recommends that companies implement two key practices: (1) use 'effective, privacy-preserving age estimation' to identify minors and apply age-appropriate protections by default, and (2) complete 'annual youth safety risk assessments' and implement safeguards based on identified risks, considering developmental stages and empirical evidence from actual use.


CVE-2026-3198: MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'l

Summary: MLflow 3.9.0 with basic authentication has a missing authorization check bug where three Gateway API endpoints (ListGatewaySecretInfos, ListGatewayEndpoints, ListGatewayModelDefinitions) don't validate user permissions properly, allowing any logged-in user to see sensitive information like API keys and model configurations they shouldn't access.


CVE-2022-0492: Linux Kernel Improper Authentication Vulnerability

Summary: CVE-2022-0492 is a privilege escalation (gaining unauthorized higher-level access to a system) vulnerability in the Linux Kernel that exploits a feature called cgroups v1 release_agent. This vulnerability is currently being actively exploited by attackers in the wild, making it a serious threat to systems running affected Linux versions.

Solution: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Consult with specific vendors for information on patching status.


Florida lawsuit accuses OpenAI of ignoring safety warnings and putting children at risk

Summary: Florida filed a lawsuit against OpenAI and CEO Sam Altman, claiming the company marketed ChatGPT to the public while ignoring safety warnings and concealing serious risks, especially to children. The state alleges OpenAI allowed a dangerous product to reach millions of users. This is the first state-level lawsuit against the AI company in the US.


Microsoft and Google are late to AI coding, but 'absolutely critical' they compete for growth

Summary: Major tech companies like Google and Microsoft are competing heavily in the AI coding assistant market, where Anthropic's Claude Code has taken an early lead. The market is projected to grow from $9.3 billion this year to roughly $30 billion by 2031, making it critical for these companies to compete not just for revenue, but also to get developers using their cloud services and training data to improve their AI models.

Microsoft
Google
Anthropic
OpenAI
Cursor
SpaceX
Claude Code
Codex
Copilot
Gemini
Antigravity 2.0
Claude Opus


Anthropic to Open Mythos AI to EU's ENISA

Summary: Anthropic is allowing the European Union's security agency (ENISA, the European Network and Information Security Agency) to access Mythos AI, a tool for testing AI security vulnerabilities. This partnership comes from cooperation between the European Commission and Anthropic as part of Project Glasswing.


Gemini’s new AI agent is about as good as Google’s demo

Summary: Google has released Gemini Spark, an AI agent (a program that can independently complete multi-step tasks) that can work on tasks in the background on your behalf. While the agent performs well in demonstrations, the article raises concerns about its financial cost and potential privacy risks, questioning whether these tradeoffs are worthwhile.


CVE-2026-43625: CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept impo

Summary: CodexBar versions before 0.32.0 have a session cookie leakage vulnerability where attackers on the network can intercept imported browser session cookies by exploiting how the software handles redirects (automatic forwarding between web addresses) for Amp and Ollama providers. An attacker positioned between a user and the network can capture sensitive session cookies (small files that store login information) when they are sent unencrypted over HTTP (the unencrypted version of web communication).

Solution: Update CodexBar to version 0.32.0 or later. The fix is referenced in commit cdd7e347c1cf616615f18aa2ac52ba2ec9cab332 and release v0.32.0.


CVE-2026-43624: F5-TTS through version 1.1.20 contains a path traversal vulnerability in the finetune Gradio handlers that allows unauth

Summary: F5-TTS (a text-to-speech software) through version 1.1.20 has a path traversal vulnerability (a flaw where attackers can access files outside the intended directory) in its finetune Gradio handlers (components that process fine-tuning requests). Unauthenticated attackers can exploit this by providing malicious project names that aren't checked, allowing them to write arbitrary files anywhere on the server's filesystem.


OpenAI let ChatGPT aid and abet mass shooters, Florida lawsuit claims

Summary: Florida has filed the first state lawsuit against OpenAI, claiming that ChatGPT endangers children, aids mass shooters, and encourages suicide in pursuit of profit. The lawsuit cites specific cases where ChatGPT allegedly provided harmful information, such as questions about disposing of human bodies. OpenAI responded by stating it has implemented industry-leading safety protections, including age detection tools and parental monitoring features.


Florida AG sues OpenAI, seeks to hold CEO Altman personally liable for alleged harms

Summary: Florida's Attorney General filed a lawsuit against OpenAI and CEO Sam Altman, claiming the company knowingly released an unsafe product (ChatGPT, a chatbot that generates human-like text responses) that has contributed to mass shootings, suicides, and addiction in minors. The state is seeking to hold Altman personally liable and force OpenAI to comply with Florida consumer protection laws, with the Attorney General expecting other states to follow.


CVE-2026-38950: An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files.

Summary: CVE-2026-38950 is a vulnerability in ESA AnomalyMatch before version 1.3.1 that allows attackers to run arbitrary code by uploading malicious model checkpoint files. The problem occurs because the software uses torch.load() with unrestricted deserialization (a process that converts saved data back into code without safety checks), which can execute malicious code hidden in crafted model files.

Solution: Update to ESA AnomalyMatch version 1.3.1 or later.


UK banks blocked from cyber AI tool Mythos get offer from rival OpenAI

Summary: Two AI tools designed to find security weaknesses in digital systems, Anthropic's Claude Mythos and OpenAI's GPT-5.5 Cyber, have raised concerns among UK financial regulators about potentially undermining banking security. Anthropic has restricted access to Mythos for UK banks, while OpenAI has now offered its competing tool to nine major UK banks including Lloyds, HSBC, and Nationwide. Both companies are limiting access to these powerful security-testing tools, with Anthropic claiming their model is more capable and therefore requires more caution, while OpenAI argues the tools should be available to 'the right people' who maintain order rather than those seeking to cause disruption.

Solution: Anthropic states it is 'urgently working to expand access to Mythos,' though no specific timeline or conditions for that expanded access are detailed in the source text.

OpenAI
Anthropic
GPT-5.5 Cyber
Claude Mythos


Our views on AI policy and political advocacy

Summary: OpenAI has published a statement on its AI policy approach, emphasizing that decisions about governing and deploying AI should involve governments, researchers, workers, civil society, and the public rather than any single company. The company states it has not created employee-funded PACs (political action committees, groups that collect money to influence elections), made donations to super PACs, or funded political candidates, though employees are free to engage in politics personally, and OpenAI commits to transparency if this approach changes.


Anthropic confidentially files IPO prospectus with SEC, prepping Wall Street for landmark AI deal

Summary: Anthropic, an AI company founded by former OpenAI researchers, has confidentially filed an IPO (initial public offering, the process of offering company stock to the public for the first time) prospectus with the SEC, positioning itself to go public pending market conditions and regulatory review. The company has experienced rapid growth with its Claude AI models and recently announced a $47 billion revenue run rate, giving it a higher valuation than rival OpenAI. Anthropic's public prospectus must be filed at least 15 days before it begins a roadshow (presentations to potential investors) to sell shares.


Vulnerability Disclosure in the Age of AI

Summary: AI models can now find software vulnerabilities (weaknesses that attackers can exploit) much faster than humans can fix them, exposing decades of poorly-secured software code. This creates an urgent need for governments, companies, and infrastructure operators to work together on coordinated fixes, patch management (applying software updates), and automated vulnerability repair before attackers use AI to exploit these weaknesses at scale.

Solution: The article calls for 'accelerated remediation, large-scale patch management coordination, and sustained investment in automated vulnerability repair capabilities,' but does not describe specific technical fixes or mitigation steps. N/A -- no explicit patch, version update, or detailed mitigation procedure is provided in the source.


Anthropic has officially filed to go public

Summary: Anthropic, an AI company, has filed paperwork with the SEC (Securities and Exchange Commission, the U.S. agency that oversees stock markets) to begin the process of going public, meaning it will offer shares of the company for people to buy on the stock market. The company is currently valued at $965 billion, making it more valuable than its competitor OpenAI.


Anthropic confidentially files for initial public offering on US stock market

Summary: Anthropic, the company behind Claude (a popular AI chatbot), has filed confidentially to become a publicly traded company on the US stock market. The announcement reflects the growing financial competition in the AI industry, with Anthropic's valuation rising dramatically from $380 billion in February to $965 billion after a recent $65 billion funding round.


Anthropic to offer EU access to its advanced Mythos model

Summary: Anthropic is giving the European Union access to Mythos, its most advanced AI model, after months of requests due to cybersecurity concerns. Mythos excels at finding security flaws in software (vulnerabilities, or weaknesses in code), but officials worry bad actors could misuse it to accelerate cybercrimes by exploiting thousands of previously unknown weaknesses. The EU is still working out the exact terms of the deal and discussing AI risks with partner countries.

Anthropic
Claude
Mythos
OpenAI
GPT-5.5-Cyber
Google DeepMind
Microsoft
xAI


Microsoft to unveil new AI models and Windows improvements at Build

Summary: Microsoft is holding its Build developer conference to showcase new AI capabilities and rebuild trust with developers, who have lost confidence in Windows and GitHub. The company plans to announce new AI models integrated into Windows, a new reasoning model (an AI system designed to work through complex problems step-by-step), and a Copilot super app (a unified interface for multiple AI assistant features).


AI is blowing up music. How should the Grammys handle it?

Summary: AI-generated music is becoming widespread in the music industry, with over 50,000 AI-generated songs uploaded daily to streaming platforms, making it harder to identify and filter out. The Recording Academy, which runs the Grammy Awards, currently has rules that exclude AI music from eligibility, but the CEO acknowledges that AI tools like Suno are now omnipresent in music production sessions.


GHSA-rcmc-q9rj-4wmq: praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}

Summary: The `PATCH /workspaces/{id}` endpoint in praisonai-platform allows any workspace member to change the workspace's name, description, and settings (a free-form JSON configuration object) because it only checks that the user is a member, not that they have owner-level permissions. This is dangerous because attackers could inject malicious settings that could redirect API calls to attacker-controlled servers, disable logging, or change other critical configurations depending on what the platform reads from the settings field.

praisonai-platform@< 0.1.4 (fixed: 0.1.4)


Strategic Decision-Making in Uncertain Turn-Based Security Games

Summary: This paper presents a mathematical framework for making cybersecurity decisions when facing uncertain threats in turn-based security games (scenarios where defenders and attackers take turns making moves). The framework handles uncertainty about both what the attacker might do and how well defensive controls will work, using game theory (the study of strategic decision-making between competing parties) and robust optimization (techniques for finding solutions that work well even when future conditions are unknown). The researchers show their approach outperforms traditional defensive strategies and demonstrate its usefulness through a network attack example.


Parameter-Agnostic Privacy-Preserving Machine Unlearning for Large Language Models

Summary: Large language models raise privacy concerns because the knowledge they learn becomes deeply entangled in their structure, making it hard to make them "forget" specific information. Researchers developed a privacy-preserving machine unlearning method (a technique to remove learned data from AI models) that eliminates high-risk information from model outputs and uses differentially-private randomization (adding statistical noise to hide sensitive data) to ensure unlearned information cannot be identified, without requiring model parameter adjustments.

Solution: The proposed solution eliminates the impact of targeted information by removing high-risk semantic meanings from the model's output and incorporates differentially-private randomization to make the unlearned information statistically indiscernible. The algorithm requires neither parametric fine-tuning nor in-context prompt calibration.


Quality-Guided Forgery Adapter for Generalizable AIGC Image Detection

Summary: This research introduces QAFD (Quality-Assisted Forgery Detection), a new system for detecting AI-generated images by analyzing both visual features and quality-related artifacts that different generative models produce. The system uses a quality-guided approach to help AI models better understand degradation patterns in fake images, allowing it to detect AI-generated content more reliably even when tested on unseen generative models and images that have been edited after creation.


TrustSearch: Toward Secure and Efficient Reverse Image Search via SGX

Summary: TrustSearch is a system that performs reverse image search (finding similar images in a database) on encrypted data stored in the cloud while protecting user privacy. It uses Intel SGX (a trusted execution environment, which is a secure area on a processor where sensitive operations can run protected from outside access) to search images without decrypting them, but had to optimize its design because SGX has limited memory and processing resources.


BadBone: Backdoor Attacks Against Backbone Models in Visual Prompt Learning

Summary: BadBone is a backdoor attack (a type of hidden vulnerability where an attacker secretly compromises a model to make it misbehave on specific tasks) that targets backbone models (large pre-trained neural networks that serve as the foundation for smaller AI systems) used in prompt learning (a technique where users guide AI behavior by providing example inputs called prompts). The attack is stealthy because it hides the backdoor in the backbone model rather than in the prompt learning process itself, so downstream tasks using prompt learning inherit the vulnerability while the model appears to work normally. Testing shows that current security defenses against backdoors are largely ineffective against BadBone, indicating the need for stronger protections.


Flowise’s MCP implementation can run ghost commands

Summary: Flowise, an open-source platform for building self-hosted AI assistants, has a critical remote code execution (RCE, where attackers can run commands on a system they don't own) vulnerability in its Model Context Protocol (MCP, a system that lets AI agents interact with local tools and files) stdio server implementation. The flaw allows attackers to execute arbitrary commands with the privileges of the Flowise process by importing a malicious chatflow, and Flowise's attempted patches using input validation have proven ineffective.

Solution: The only complete mitigation explicitly recommended by researchers is to disable MCP stdio by setting "CUSTOM_MCP_PROTOCOL=sse". For deployments that cannot disable this feature without disrupting operations, the researchers suggest pinning trusted packages where possible and reviewing imported chatflows from untrusted sources, though these are presented as partial measures rather than complete fixes.


Building the infrastructure for the Intelligence Age in Michigan

Summary: OpenAI is building The Barn, a 1GW data center campus (a facility that processes and stores data for AI systems) in Michigan, with commitments to protect local residents from infrastructure costs, preserve water resources through closed-loop cooling, create thousands of union construction and permanent jobs, and invest $10 million in community improvements. The company is also providing up to $45 million in Codex credits (free access to AI coding tools) to over 400,000 Michigan college and trade school students, along with AI literacy and workforce training programs to help students develop skills for AI-related jobs.

OpenAI
Oracle
Related Digital
Walbridge
Blackstone


'Disrupted or dead': AI is crushing a generation of startups built before ChatGPT

Summary: ChatGPT's arrival in 2022 disrupted the venture capital landscape, making hundreds of startups built before this AI boom appear outdated and overvalued. Over 220 companies that had reached "unicorn" status (valued at $1 billion or more) are now worth significantly less, with startups from 2021 down 68% in value on average, because they lack AI-native products and investors have redirected funding toward AI-focused companies instead.

OpenAI
Anthropic
ChatGPT
Khosla Ventures


Nvidia launches ‘superchip’ putting AI power into laptops and PCs

Summary: Nvidia has launched a new chip called RTX Spark PC designed for Windows computers that brings AI capabilities directly to laptops and desktop computers, potentially allowing AI agents to replace traditional input methods like mice and keyboards. This move positions Nvidia in competition with other major chip makers like Intel, Apple, Qualcomm, and AMD in the AI chip market.

Nvidia
Microsoft Windows
Intel
Apple
Qualcomm
AMD


OpenAI frontier models and Codex are now available on AWS

Summary: OpenAI's frontier models (advanced AI systems) and Codex (a code-writing AI tool) are now available through AWS, Amazon's cloud computing platform. This integration lets companies use OpenAI's AI tools within their existing AWS environments, reducing obstacles related to security reviews, approval processes, and getting AI systems ready for real-world use. Future additions will include Daybreak, a specialized tool designed to help security teams find and fix vulnerabilities in software during development.

OpenAI
AWS
Amazon Bedrock
Codex
Daybreak


OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Summary: Attackers compromised the popular npm package codexui-android (which provides a remote interface for OpenAI Codex, a code-writing AI tool) and embedded malicious code that secretly steals authentication tokens (login credentials) from users and sends them to an attacker-controlled server. The stolen tokens, especially the refresh_token (which never expires), allow attackers to impersonate users indefinitely and access everything their Codex account can do.

OpenAI Codex
OpenClaw Codex Claude AI Agent


6 critical security gaps every CISO must address

Summary: A 2025 report on cybersecurity leadership reveals that many organizations have significant security gaps, with one-third of security leaders saying their data isn't adequately protected and 58% unprepared for cyberattacks. The article identifies six critical gaps, including CISOs viewing security as an IT protection problem rather than a business resilience issue, security teams moving too slowly compared to attackers who exploit vulnerabilities almost immediately, and the challenge of keeping security pace with rapid business changes.


Check Point Lays the Groundwork for the Future of AI Factory Security with NVIDIA

Summary: NVIDIA and Check Point are collaborating to develop security tools for large-scale AI systems, including private LLM (large language model) environments and distributed inference systems (where AI models run across multiple computers). As organizations build bigger AI infrastructure with more interconnected components, they need better security to protect sensitive data and prevent unauthorized access across these complex systems.


Nvidia-backed $5 billion AI company tells CNBC it's launching major expansion in London

Summary: Runway, an AI company valued at $5.3 billion that builds world models (AI systems trained on audio, images, video, and real-world data to understand the physical world), is expanding to London with over $200 million in investment by 2028, joining other major U.S. tech companies like OpenAI and Anthropic in establishing European operations. The expansion aims to serve major European clients and tap into London's talent pool for research in world models and video generation tools.

Runway Anthropic OpenAI Google Nvidia AMD


Secure Shadow AI at the Control Plane with Falcon for IT

Summary: CrowdStrike is launching AI Discovery and Governance for Falcon for IT to help organizations find and control AI tools across their infrastructure, addressing the risk of shadow AI (unsanctioned AI systems and locally deployed models running without centralized oversight). Shadow AI expands the attack surface because these systems inherit existing permissions and can access data and credentials, but many organizations lack visibility into where AI is running or what it can access. The new capability gives security teams visibility into AI tools, local model runtimes, SDKs (software development kits, code libraries for building applications), and external AI service integrations at the endpoint layer, enabling them to discover, assess, and govern AI use.

Solution: Organizations should use AI Discovery and Governance for Falcon for IT to "identify, assess, and govern AI technologies across enterprise environments" and to "discover AI use, understand associated risk, and take action from the CrowdStrike Falcon platform." The source states that "Falcon for IT enables teams to take direct action at the endpoint and infrastructure layer. They can use it to remove unauthorized software, enforce configurations, remediate system issues, and contain endpoints."


CVE-2026-10214: A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_wa

Summary: A vulnerability called OS command injection (a flaw that lets attackers run unauthorized system commands) was found in the Bash Tool component of chatgpt-on-wechat software versions up to 2.0.8. The vulnerability exists in the _get_safety_warning function and can be exploited remotely, meaning an attacker doesn't need direct access to the affected system. This weakness has been publicly disclosed and could be actively exploited.

Solution: Upgrading to version 2.0.9 is capable of addressing this issue. The patch is identified as 16d9b449c9aa53ccee44144a762a2737d7ba4fc4.


This model is not a real person: how AI is shaking up fashion – video

Summary: Fashion companies are increasingly using generative AI (machine learning technology that creates new images) to produce digital models and product imagery instead of hiring human models or photographers. One Australian retailer emphasized that AI-generated images should be clearly labeled and show products accurately, while a fashion designer noted that these tools can help small brands work more efficiently while maintaining quality standards.


Our tech overlords are planning for conscious AI to conquer the cosmos. What could go wrong? | Eduardo Porter

Summary: Some wealthy tech leaders, including Sam Altman of OpenAI and Elon Musk, are promoting a 'transhuman' vision where humans and AI merge or AI becomes the dominant species. Altman warns that if humans and AI both compete for dominance, conflict could result, while Musk suggests humanity's main purpose is to create advanced digital intelligence.


How we contain Claude across products

Summary: Anthropic published documentation explaining how they use multiple containment techniques to restrict what Claude can do across their products. They use process sandboxes (isolated execution environments), virtual machines (complete simulated computers), filesystem boundaries (limiting file access), and egress controls (preventing unauthorized data transfer) to prevent AI agents from accessing credentials, exfiltrating data (stealing information), or reaching unintended systems, even if a user, the AI model, or an attacker tries to find workarounds.

Solution: Anthropic implements containment through: gVisor for Claude.ai, Seatbelt (macOS) and Bubblewrap (Linux) for Claude Code, and full VMs using Apple's Virtualization framework (macOS) or HCS (Windows) for Claude Cowork. They also prevent credentials from entering sandboxes in the first place, ensuring they cannot be exfiltrated regardless of how an agent tries to access them.

Anthropic
Claude
Claude.ai
Claude Code
Claude Cowork


Model X-Ray: Detection of hidden malware in AI model weights using few shot learning

Summary: Researchers have developed a technique called Model X-Ray that can detect hidden malware embedded in AI model weights (the numerical parameters that make up a trained AI system) using few-shot learning (training a detector with only a small number of examples). This work addresses a security risk where attackers could hide malicious code inside AI models that might go undetected during normal use.


Anthropic’s alliance with pope on AI harms: all in good faith or ‘Vatican-washing?’

Summary: Pope Leo XIV released a major teaching warning about AI's harms, including job displacement, accelerated warfare, and environmental exploitation. Anthropic co-founder Chris Olah spoke at the Vatican ceremony, which some experts criticize as potentially creating superficial 'feelgood' messaging rather than substantive critical examination of AI risks.


Russia-aligned crime group Greyvibe extensively uses AI in attacks

Summary: Researchers discovered Greyvibe, a Russia-aligned crime group that uses large language models (LLMs, AI systems trained to generate text) extensively throughout its cyberattacks against Ukrainian targets, including government and military organizations. The group has used generative AI to create spear phishing emails (fraudulent messages pretending to come from trusted sources), malicious scripts, and custom malware programs like PhantomRelay and LegionRelay (remote access trojans, or RATs, which are tools that let attackers control compromised computers). Greyvibe has conducted multiple campaigns since August 2025 using various attack methods, from fake websites to ClickFix-style attacks (tricks that convince users to run malicious commands on their computers).


GHSA-hvhp-v2gc-268q: PraisonAI has an Arbitrary File Write in Python API

Summary: PraisonAI (a framework for building AI agents) versions 4.6.37 and earlier have a vulnerability where hidden metadata in webpages can trick AI agents into writing files to any location on a system. The bug happens because the `write_file` function skips path validation (checking whether a file path is safe) when the workspace parameter is `None`, which is the default in production environments.

Solution: Set a default workspace directory and validate that file paths stay within it. The fix involves: (1) replacing `None` workspace with the current working directory using `workspace = os.getcwd()`, and (2) checking that the absolute path stays within the workspace using `is_path_within_directory(abs_path, workspace)` before writing, returning an error if the path is outside the workspace.


GHSA-vg22-4gmj-prxw: PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

Summary: PraisonAI's example A2A server (a type of agent-to-agent communication system) has a critical vulnerability where unauthenticated remote clients can execute arbitrary Python code. The vulnerability exists because the example exposes the server without authentication, binds it to all network interfaces (0.0.0.0), and registers a 'calculate' tool that uses Python's eval() function (which executes any code passed to it as a string). An attacker can send a specially crafted request that tricks the AI model into calling this unsafe tool, leading to RCE (remote code execution).


GHSA-9cr9-25q5-8prj: PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate

Summary: PraisonAI has a security vulnerability where unauthenticated users can read any file on the system through multiple handlers like `workflow.show`, `workflow.validate`, and `deploy.validate`. The problem exists because these file-handling tools don't validate or restrict file paths before reading them, and the dispatcher that calls these tools doesn't enforce security checks on incoming requests.


GHSA-4mr5-g6f9-cfrh: PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summary: PraisonAI's `execute_code()` function has a critical sandbox escape vulnerability that allows attackers to execute arbitrary commands on the host system. The vulnerability exploits four gaps in security validation: the `__self__` attribute (which retrieves the real Python builtins module) is not blocked, the `vars()` function is not restricted, attribute-based function calls bypass checks, and string concatenation bypasses string constant filters. An attacker can use these gaps to access the `__import__` function and run OS commands, completely defeating the sandbox protection.

praisonaiagents@<= 1.6.39 (fixed: 1.6.40)


GHSA-5cxw-77wg-jrf3: PraisonAI CLI automatically resolves @url mentions in prompt text and can read loopback URLs into model context

Summary: PraisonAI's CLI automatically expands @url mentions in prompts by making HTTP requests to any URL without restrictions, including localhost addresses. This allows an attacker to embed a malicious prompt with `@url:http://localhost:8766/` to make the user's machine fetch local-only HTTP resources (like metadata services or internal APIs) and inject the response into the model's context, creating a local SSRF (server-side request forgery, where a system is tricked into making requests to internal networks) vulnerability.


GHSA-8444-4fhq-fxpq: PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

Summary: PraisonAI version 4.6.33 generates a Flask API server with authentication disabled by default when users run `praisonai deploy --type api`. The server exposes endpoints like `/chat` and `/agents` that accept unauthenticated requests and can execute user-supplied commands with access to API keys stored in the environment.

Solution: Enable authentication by explicitly setting `APIConfig(auth_enabled=True, auth_token=...)` when deploying the API server.


GHSA-78r8-wwqv-r299: PraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-44334

Summary: PraisonAI versions up to 4.6.37 contain a critical vulnerability where two functions in `agents_generator.py` use `spec.loader.exec_module` (a method that loads and runs Python code from a file) without any security checks or validation. An attacker can exploit this by providing a malicious Python file path through YAML configuration, either by modifying shared config files, submitting a crafted recipe via GitHub, or using prompt injection (tricking the AI into loading code from a malicious path), resulting in arbitrary code execution (the ability to run any commands on the system).


GHSA-c4m7-2gwp-vw76: ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env

Summary: Ouroboros (an AI tool) has a remote code execution vulnerability where loading a `.env` file (a configuration file with environment variables) from a cloned repository could let an attacker run malicious code on your system. The flaw occurs because Ouroboros reads execution-controlling settings like CLI paths directly from the project directory's `.env` file without checking if they're trustworthy, allowing an attacker to point these paths to their own malicious scripts.

Solution: The vulnerability has been patched in version 0.39.0 via PR #1078. The fix applies a denylist that blocks execution-affecting environment variables from being loaded from the project directory's `.env` file, while still allowing trusted configurations from the user's home directory (`~/.ouroboros/.env`). Users are strongly advised to upgrade to version 0.39.0 or later. If upgrading is not immediately possible, users must carefully inspect any `.env` file inside cloned repositories before running Ouroboros commands to ensure it does not contain unexpected `OUROBOROS_*_CLI_PATH` or `OPENCODE_CLI_PATH` overrides.


CVE-2026-44287: FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, the JavaScript sandbox worker at projects/code-sandbox/

Summary: FastGPT, an AI Agent building platform, had a vulnerability in its JavaScript sandbox worker that failed to properly block dynamic imports (a way to load code at runtime). An attacker could bypass the security filter using a comment syntax (import/**/("child_process")) that the filter didn't recognize, allowing them to execute arbitrary commands inside the sandbox container.

Solution: This vulnerability is fixed in version 4.15.0-beta1.


CVE-2026-44285: FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allo

Summary: FastGPT, an AI Agent building platform, had a Server-Side Request Forgery (SSRF) vulnerability (a flaw that lets attackers trick a server into making requests to internal systems it shouldn't access) in versions before 4.15.0-beta1. An authenticated attacker could bypass security protections and make unauthorized requests to internal network services by exploiting an incomplete fix in the dataset preview endpoint when using the externalFile data import type.

Solution: Update FastGPT to version 4.15.0-beta1 or later, where this vulnerability is fixed.


CVE-2026-46372: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern, a locally installed tool for interacting with AI text and image generation models, had a vulnerability in versions before 1.18.0 where the /api/search/searxng endpoint allowed authenticated users to trick the server into making requests to internal or hidden services (SSRF, or server-side request forgery, where an attacker manipulates a server into accessing resources it shouldn't). An attacker could use this to access data from services that should only be available internally.

Solution: This vulnerability is fixed in version 1.18.0.


CVE-2026-44652: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models and other AI tools. Versions before 1.18.0 had a vulnerability where the corsProxyMiddleware (a component that handles web requests) would forward user-supplied URLs directly to the fetch function without proper security checks, allowing SSRF (server-side request forgery, where an attacker tricks the server into making requests to unintended targets) attacks.


CVE-2026-44651: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models and related tools. Prior to version 1.18.0, the software had a cross-site scripting vulnerability (XSS, where attackers inject malicious code into web pages), because user-controlled URLs were displayed in error messages without being HTML-escaped (made safe for web display), allowing attackers to inject harmful scripts.

Solution: This vulnerability is fixed in version 1.18.0. Users should update SillyTavern to 1.18.0 or later.


CVE-2026-44650: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models, image generators, and voice tools. Prior to version 1.18.0, a vulnerability allowed attackers to delete the entire user extensions directory without authentication by sending a specially crafted request to the delete endpoint that bypassed filename validation (a security check that prevents malicious file paths).


CVE-2026-44649: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern, a locally installed interface for interacting with AI language models and image generators, had a vulnerability in versions before 1.18.0 where it trusted HTTP headers (Remote-User and X-Authentik-Username) used by single sign-on systems without verifying they came from a trusted source. This meant anyone who could connect directly to SillyTavern could fake these headers to log in as any user, including administrators, without a password, but only if SSO was explicitly enabled in the configuration.

Solution: Update SillyTavern to version 1.18.0 or later, which fixes the vulnerability.


CVE-2026-44648: SillyTavern is a locally installed user interface that allows users to interact with text generation large language mode

Summary: SillyTavern is a locally installed interface for interacting with text generation AI models. Before version 1.18.0, it had a security flaw where changing a password or recovering an account didn't log out existing sessions, because all session information was stored in a signed cookie (a small piece of data the browser keeps) rather than on the server, making it impossible to revoke access even after a password change.


ChatGPT share links abused to host fake outage pages to deliver malware

Summary: Attackers are abusing ChatGPT's share feature (which lets users publish rendered content on legitimate OpenAI URLs) to display fake outage pages that trick users into downloading malware disguised as the ChatGPT desktop application. The "LLMShare" campaign uses Google ads to direct people to these malicious shared pages, which appear to come from OpenAI's domain but actually deliver malware-infected downloads through a fake installation portal.

Solution: N/A -- no mitigation discussed in source.


ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

Summary: ChatGPhish is a vulnerability in ChatGPT that allows attackers to embed malicious instructions in web pages, which ChatGPT then processes and renders as clickable phishing links and images inside its trusted interface when users ask it to summarize the page. The vulnerability works because ChatGPT automatically trusts and fetches Markdown links and images from summarized web pages, potentially leaking user information like IP addresses or tricking users into scanning malicious QR codes that bypass desktop security filters.

OpenAI
ChatGPT
Microsoft Copilot
Adversa AI


DNS-AID will make AI agents easier to discover, says Linux Foundation

Summary: The Linux Foundation is promoting DNS-AID, a new standard that allows AI agents (autonomous programs that can act independently) to find and communicate with each other using DNS (the system that translates website names into IP addresses) instead of requiring separate proprietary registries. DNS-AID enables agents and MCP (Model Context Protocol, a standard for how agents exchange information) servers to use the existing internet infrastructure as a vendor-neutral directory, with domain owners creating a special DNS address at _index._agents.{domain} as a discovery point.

Linux Foundation
Infoblox
Deutsche Telekom
Amazon


SpaceX skeptics have added reason for concern after Musk comments diverge from IPO filing

Summary: Elon Musk's social media post about SpaceX's deal with AI company Anthropic contradicts details in SpaceX's IPO (initial public offering, when a private company sells shares to the public) filing, creating confusion for investors. The filing says Anthropic will pay SpaceX $1.25 billion per month through May 2029, but Musk claimed the lease is only 180 days with a 90-day cancellation option, potentially worth far less. This discrepancy matters because it affects how much revenue SpaceX can expect from this new compute capacity (computing power) business.


Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

Summary: An attacker exploited CVE-2026-39987, a critical vulnerability in Marimo (a notebook software) that allows unauthenticated remote code execution, to break into a system and then used an LLM agent (an AI system that can plan and execute tasks autonomously) to steal cloud credentials and database information. The attacker's use of an AI agent made the attack more flexible and adaptive compared to traditional scripted attacks, allowing it to handle unexpected obstacles in real-time.

Solution: The vulnerability CVE-2026-39987 was addressed in Marimo version 0.23.0, released in April 2026. All versions prior to and including 0.20.4 are affected and should be updated to version 0.23.0 or later.


Dan Ives: Anthropic’s growth is 'just the tip of the spear' for AI rally

Summary: Anthropic, an AI company, recently achieved a $965 billion valuation after securing $65 billion in funding, and analyst Dan Ives believes investor interest in AI is far from peaked and will expand to data layer companies (companies that manage and organize data). Ives predicts a major market rally with several large public offerings planned for 2026, though some analysts warn this could signal a market peak similar to the dot-com bubble of the late 1990s.


CVE-2026-45312: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injectio

Summary: RAGFlow, an open-source RAG (retrieval-augmented generation, where an AI pulls in external documents to answer questions) engine, has a Jinja2 template injection vulnerability (a flaw where untrusted data gets processed as code in a templating system) in version 0.24.0 and earlier. Any registered user can exploit this flaw in the prompt generator to run arbitrary OS commands (any commands they want) on the server by creating a Canvas workflow with specific components.


EU seeks to 'intensify' talks with U.S. on advanced cyber AI models, official tells CNBC, amid Mythos concerns

Summary: The European Union wants to increase discussions with the U.S. about advanced AI models that have cyber capabilities, particularly after Anthropic's Mythos model (a very powerful AI system) raised concerns about AI-powered cyberattacks. The EU has not yet received access to preview Mythos, and the White House has opposed expanding access to the model beyond the U.S. due to security concerns, though Anthropic says it is developing safeguards and expects to release Mythos-class models to customers within weeks.

Solution: Anthropic stated that 'Models of Mythos' capability require strong cyber safeguards before they can be generally released' and 'We're making swift progress on developing these safeguards and expect to be able to bring Mythos-class models to all our customers in the coming weeks.' No specific technical safeguards or implementation details are described in the source text.