GHSA-m549-qq94-fvhg: LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization

Summary: LMDeploy, a model serving tool, hardcodes `trust_remote_code=True` (a setting that allows executing custom Python code from downloaded models) when loading models from HuggingFace. An attacker who can control which model path the system loads could point it to a malicious model repository, causing arbitrary code execution (running any commands they want) with the privileges of the LMDeploy server process. This affects LMDeploy version 0.12.3 and earlier.


Claude Enterprise Meets the Security Graph: Wiz Integrates with Anthropic's Compliance API

Summary: Wiz has integrated with Anthropic's Claude Compliance API to give organizations visibility into how Claude Enterprise is being used across their environment. The integration lets security teams see Claude users, projects, permissions, and connected datasets mapped into Wiz's Security Graph (a centralized system for tracking and connecting all resources), helping with compliance audits and governance.

Solution: N/A -- no mitigation discussed in source.

Anthropic
Claude
Claude Enterprise
Google Gemini
Wiz


OpenAI makes breakthrough on 80-year-old maths problem

Summary: OpenAI's AI model has made progress on the planar unit distance problem, a math question posed 80 years ago asking how many pairs of dots on a sheet can be the same distance apart. The AI disproved the long-standing assumption that square grids provided the best solution by discovering a new family of mathematical arrangements that perform better, though the broader problem remains unsolved. While mathematicians have validated this work, humans were significantly involved in improving and refining the AI's original proof.


macOS Kernel Memory Corruption Exploit

Summary: Apple's Memory Integrity Enforcement (MIE, a hardware-based protection against memory corruption attacks, where attackers modify data in a computer's RAM to take control) was bypassed by researchers using AI systems, who developed a working exploit for macOS on M5 chips in under a week. The article argues that while defense-in-depth (layering multiple security barriers in hardware and software) can slow attackers down, AI-assisted exploration of vulnerabilities now happens faster than traditional human-only methods, making older security designs insufficient.


Spotify Studio’s AI agent creates a daily podcast just for you

Summary: Spotify Studio is a new AI application that creates personalized daily podcasts and briefings by analyzing your Spotify listening history and connected apps like email and calendar. The AI can perform actions like web searches and task organization on your behalf, with generated content savable to your Spotify library.


AI Agents Are Shifting Identity Security Budget Dynamics

Summary: Companies are increasingly deploying AI agents (software programs that can act independently to complete tasks), and these agents need identity management, security, and governance like human users do. New research shows that budgeting and planning for AI agent identity security works differently than it does for traditional IAM (identity and access management, the systems that control who can access what resources) projects.


Anthropic’s Code with Claude showed off coding’s future—whether you like it or not

Summary: At Anthropic's Code with Claude developer conference, nearly half of attendees reported shipping pull requests (code updates submitted for review) entirely written by Claude, an LLM (large language model, an AI trained on vast amounts of text to generate responses), with many not even reading the code themselves. Anthropic is pushing automation further by having Claude check and correct its own work through self-prompting and a new feature called "dreaming," where Claude agents write notes to themselves to learn from past errors and improve on shared codebases without requiring human developers to review intermediate steps.

Anthropic
Claude
Claude Code
Claude 4.6
Claude 4.7
OpenAI
Codex
Google
Microsoft
Spotify
Delivery Hero
Lovable
Base44
Monday.com


Anthropic is paying $15 billion a year for access to Elon Musk’s data centers

Summary: Anthropic, an AI company, agreed to pay SpaceX $1.25 billion per month (totaling $15 billion annually) through May 2029 for access to SpaceX's Colossus data centers in Memphis, Tennessee, which are used for AI training. This deal was revealed in SpaceX's IPO filing (a document companies file when offering stock to the public for the first time).


Protect GenAI Chatbots with Check Point WAF

Summary: Generative AI chatbots are becoming important customer-facing tools for businesses, but they create security risks because they can access sensitive information, speak for the brand, and be manipulated into harmful actions. The text provides examples of real incidents where chatbots caused problems, such as offering incorrect discounts or giving misleading information to customers.


I can’t believe how fast Google vibe coded my first Android app

Summary: A developer used Google's AI Studio to quickly generate Android apps by typing brief text descriptions into a web browser, with the AI automatically handling all the coding and app building. The process required minimal manual setup (enabling USB debugging mode and connecting a phone to a computer), and a 148-word description resulted in a working app installed on an actual Android device in about ten minutes.


DEGAN : Towards botnet detection in IIoT with dual-enhanced GAN under imbalanced data

Summary: This research paper proposes DEGAN, a machine learning approach using dual-enhanced GAN (generative adversarial network, a type of AI that learns by having two competing neural networks) to detect botnets (networks of infected computers controlled remotely) in IIoT (industrial internet of things, devices like sensors and machines in factories connected to the internet). The method addresses the challenge of imbalanced data, where there are far fewer examples of botnet attacks than normal network activity, which makes training detection systems difficult.


AdventHealth advances whole-person care with OpenAI

Summary: AdventHealth, a hospital system across nine states, is using ChatGPT for Healthcare (an AI tool built by OpenAI with extra protections for medical settings) to reduce time spent on administrative tasks like documentation and case review, allowing clinicians to focus more on patient care. The health system treated AI adoption as a core business goal rather than just a technical pilot, tracking usage metrics and having teams within each department share AI workflows tailored to their specific work. By framing the technology as 'time back' for staff rather than just automation, AdventHealth aimed to improve both operational efficiency and patient access to care.

OpenAI
ChatGPT
ChatGPT Enterprise
ChatGPT for Healthcare


Ocean Emerges From Stealth With $28M for Agentic Email Security Platform

Summary: Ocean, a newly launched startup, received $28 million in funding to develop an agentic email security platform, which uses specialized AI agents (software programs that can act autonomously to complete tasks) to analyze incoming emails and detect threats like business email compromise (when attackers impersonate trusted business contacts) and AI-generated phishing (fraudulent messages created by AI). The platform goes beyond simple filtering by examining sender intent, conversation context, and infrastructure details to identify malicious intent in emails that appear legitimate.


Microsoft releases open-source tools to operationalize AI agent safety

Summary: Microsoft has released two open-source tools, Rampart and Clarity, designed to catch safety problems in AI agents (software systems that can take actions autonomously) earlier in development. Rampart automates repeated safety testing throughout the development process to find issues like prompt injection (tricking an AI by hiding instructions in its input) and unsafe tool use, while Clarity helps engineers document and validate their design assumptions before coding begins.

Solution: Microsoft's explicit solutions are: (1) Rampart, which transforms red-team findings into repeatable automated tests that run continuously in CI/CD workflows (continuous integration/continuous deployment, the automated systems developers use to test and release code) to surface issues before production; and (2) Clarity, a tool available as a desktop app, web UI, or embedded in coding agents that guides engineers through structured conversations about agent behavior, permissions, and trust boundaries, with outputs saved as markdown files in the repository for review and version control.


Shifting Budget Dynamics for Identity Security and AI Agents

Summary: Enterprises are rapidly deploying AI agents (software systems that can act independently to complete tasks), and these agents need identity management (systems that verify who or what is accessing resources and what they're allowed to do). New research shows that budgeting for AI agent security differs significantly from how companies budget for traditional identity management projects.


AI becoming an SOC imperative for curtailing emerging cyber threats

Summary: Security teams need to adopt AI tools to defend against increasingly automated cyberattacks, but AI should only be added after securing security fundamentals like system hardening and access control. Experts stress that humans must maintain oversight of AI security systems, and security roles are evolving to focus on validating AI decisions and managing AI model hallucination (when an AI generates false information) rather than purely monitoring alerts.


CVE-2026-2734: In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` G

Summary: MLflow versions up to 3.9.0 have a security flaw in the SearchModelVersions feature (an API endpoint that retrieves information about different versions of machine learning models) that fails to check user permissions properly. This allows any logged-in user to see all model versions and sensitive details across the entire system, which is dangerous in shared environments where different teams should only access their own models.

Solution: The issue is resolved in version 3.10.0.


New Claude Integration Brings Audit Data into the Falcon Platform

Summary: CrowdStrike has integrated Anthropic's Claude Compliance API into its Falcon platform to give security teams real-time visibility into Claude AI activity, addressing the problem that AI usage is often invisible to security teams and creates audit and compliance gaps. The integration combines Claude audit data (authentication events, user activity logs, administrative changes, API usage) with other security events in Falcon Next-Gen SIEM (a security information and event management system that collects and analyzes security data) to help analysts detect threats and correlate suspicious patterns across AI and other systems. CrowdStrike's Charlotte Agentic SOAR (a tool that automates security response workflows) can then automatically trigger investigations and containment actions based on detected anomalies.

Solution: Organizations can implement the Claude Compliance API integration with CrowdStrike Falcon to ingest Claude audit data into their SOC (security operations center, the team monitoring systems for threats). As stated in the source: 'security teams can ingest and act on this data using existing SOC workflows.' The integration brings 'authentication events, user activity logs, administrative changes, and API usage' into the Falcon platform, allowing analysts to 'investigate AI-related incidents using the same workflows they already rely on' and enabling automated response through Charlotte Agentic SOAR to 'automatically trigger investigation and response workflows based on detection logic and defined policies.'

Anthropic
Claude
CrowdStrike Falcon
Falcon Next-Gen SIEM
Charlotte Agentic SOAR


In SpaceX’s IPO, Elon Musk is the risk factor

Summary: SpaceX's IPO filing reveals extensive financial interconnections between Elon Musk's various companies, including Tesla, xAI (an AI company), Grok (an AI chatbot), and others, with their relationships mentioned hundreds of times throughout the regulatory documents. These overlapping business dealings make it difficult to track how money moves between the companies, creating complexity in understanding the actual financial structure of the offering.

xAI
Grok
Tesla
Neuralink
Boring Company
Optimus


Anthropic set to hit $10.9 billion in revenue during second quarter, source says

Summary: Anthropic, an AI company known for its Claude models, is on track to generate $10.9 billion in revenue during the second quarter of 2026, which would mark its first profitable quarter and more than double its first-quarter revenue of $4.8 billion. The company has experienced explosive growth driven by enterprise demand, consumer usage, and government interest, though it faces intense competition from other AI companies like OpenAI.

Anthropic
Claude
Claude Code
OpenAI
SpaceX


Nvidia’s revenue blows past Wall Street expectations as AI boom accelerates

Summary: Nvidia's financial results exceeded Wall Street predictions, driven by continued demand for AI infrastructure and datacenters. CEO Jensen Huang emphasized that the expansion of AI computing facilities is accelerating rapidly, and that agentic AI (AI systems that can independently plan and execute tasks to accomplish goals) is now being deployed across businesses and generating measurable value.


‘Solve all diseases,’ you say?

Summary: At Google I/O, DeepMind CEO Demis Hassabis announced that Google aims to use AI to transform drug discovery and eventually solve all diseases. The article appears to be a critical analysis examining the feasibility and implications of this ambitious claim.


Why Policy in Amazon Bedrock AgentCore chose Cedar for securing agentic workflows

Summary: AI agents (autonomous systems using LLMs to solve problems) create security risks because LLMs are unpredictable and vulnerable to prompt injection (tricking an AI by hiding instructions in its input), so they can make harmful decisions with confidence. The solution is to place authorization controls (decisions about which actions are allowed) at the boundary where the agent calls external tools, rather than relying on hard-coded workflows or human approval alone. Amazon Bedrock AgentCore uses Cedar, an open-source authorization policy language, to centralize and enforce these controls outside the LLM where they cannot be bypassed.

Solution: Amazon Bedrock AgentCore Gateway sits between the agent and the tools it calls. When you associate a Policy (written in Cedar) with a Gateway, it blocks everything by default and selectively allows only specified tool invocations under defined conditions. Cedar is an open source authorization policy language developed by AWS that is purpose-built for authorization, readable by humans, and analyzable by machines using automated reasoning.


Cheap AI could derail OpenAI and Anthropic's IPOs

Summary: OpenAI and Anthropic's expected IPO valuations (both projected over $800 billion) depend on maintaining high pricing power, but cheaper AI alternatives are rapidly emerging and becoming competitive. Chinese AI labs like DeepSeek and Kimi charge a fraction of what OpenAI and Anthropic do for comparable work, and enterprises are adopting cost-reduction strategies like "advisor models" (where a cheap open-source model handles most tasks and only calls expensive frontier models when needed), causing usage of Chinese models on some platforms to jump from 1% to 60% in just one year.

OpenAI
Anthropic
Google
Meta
DeepSeek
Cohere
Mistral
NVIDIA
Databricks
Figma
Kimi
Zhipu
Moonshot
Xiaomi
CloudZero
Artificial Analysis
OpenRouter


OpenAI to confidentially file for IPO as soon as Friday: Source

Summary: OpenAI is preparing to confidentially file documents for an IPO (initial public offering, when a private company becomes publicly traded) as soon as this week, working with major investment banks like Goldman Sachs and Morgan Stanley. The company, valued at over $850 billion, is planning this public debut as part of normal strategic planning, though leadership hasn't confirmed a specific timeline.


Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

Summary: Microsoft released two open-source tools to help developers test AI agent security during development. RAMPART is a testing framework (built on PyRIT, an earlier tool) that lets developers write test cases to find safety problems like cross-prompt injections (when untrusted data reaches an AI indirectly through sources like emails or files) and data exfiltration (unauthorized data leakage). Clarity is a planning tool that guides developers through design decisions early in a project, before coding begins, so potential issues can be addressed cheaply rather than fixed later.

Solution: Microsoft provides RAMPART and Clarity as open-source tools. According to the source: RAMPART is 'a Pytest-native safety and security testing framework for writing and running safety and security tests for AI agents' that 'evaluates the outcome of those tests and reports the results.' Clarity helps developers 'arrive at the right approach even before writing a single line of code' by 'guiding them through problem clarification, solution exploration, failure analysis, and decision tracking.' Microsoft states that using these tools 'move[s] AI safety from a one-time review to a set of living artifacts that developers can use throughout the lifecycle.'


You can now remix other people’s YouTube Shorts with AI

Summary: Google has introduced a new YouTube Shorts Remix feature that uses Gemini (Google's AI model) to let users restyle or modify other people's videos. Users can transform clips into different art styles like pixel art or anime, or digitally alter content by changing appearances, adding people, or inserting themselves into videos. Creators can choose whether to allow or block others from remixing their videos.


Google Search’s AI evolution includes more ads

Summary: Google is integrating its Gemini AI model into search ads, which will now display recommended products with AI-generated explanations of why you should buy them. This update is part of Google's broader shift toward AI-powered search results, including a new conversational search box and AI-generated content alongside traditional search results.


GitHub admits major source code leak after 3,800 internal repositories breached

Summary: GitHub confirmed that attackers compromised an employee's device through a poisoned VS Code extension (a malicious add-on program for a code editor), leading to the theft of code from around 3,800 internal repositories. The breach was detected and contained quickly, and GitHub is investigating the incident while validating that no customer data was affected, only internal GitHub code.

GitHub
Microsoft
Nx Console
AntV
TanStack Router
Trivy
Axios


GHSA-c2c9-mfw7-p8hw: Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows

Summary: Flowise has a security flaw in its `/api/v1/chatflows/apikey` endpoint that allows a user with a valid API key to view chatflow configurations (including system prompts, workflow graphs, and credential IDs) from other workspaces, as long as those chatflows don't have an API key assigned. The endpoint returns both the user's own chatflows and all unprotected chatflows across the entire system without filtering by workspace, breaking the isolation between workspaces.


GHSA-59fh-9f3p-7m39: Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification

Summary: Flowise has a mass assignment vulnerability in its PUT /api/v1/user endpoint that lets authenticated users directly change their password hash without verifying their old password. An attacker with a stolen session token can send a crafted request that overwrites the credential field, bypassing password verification, hashing enforcement, and policy validation, which gives them permanent access to the account.


GHSA-m837-xvxr-vqwg: Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

Summary: Flowise, an AI tool, has a hardcoded setting that allows any webpage on the internet to make requests to its text-to-speech (TTS, a feature that converts written text into spoken audio) endpoint using your stored credentials. This bypasses the server's normal cross-origin request protection (CORS, which controls what websites can access a server's data), letting malicious webpages secretly generate speech on your behalf.

Solution: Remove the hardcoded CORS wildcard headers from the TTS endpoint. Specifically, delete these lines from `packages/server/src/controllers/text-to-speech/index.ts` at line 83: `res.setHeader('Access-Control-Allow-Origin', '*')` and `res.setHeader('Access-Control-Allow-Headers', 'Cache-Control')`. This allows the server's standard CORS middleware to handle access control instead.


Google I/O, Gemini Spark, Antigravity

Summary: Google announced Gemini Spark, an upcoming AI agent product that connects with Google apps like Gmail and Drive, which runs on Gemini 3.5 Flash and a tool called Antigravity. To address prompt injection risks (tricking an AI by hiding instructions in its input), Google stated that Spark operates in isolated virtual environments with encrypted credentials, data loss prevention policies, and a secure gateway, though the author expresses concern about whether these protections are sufficient given the sensitive data users may process through it.

Solution: According to Google's documentation, Gemini Spark implements the following security measures: 'Spark operates in a fully managed, secure runtime on Google Cloud' with 'every task executes in a fresh, strictly isolated, ephemeral VM to help ensure data never overlaps between sessions.' Additionally, 'all traffic routes through our secure Agent Gateway that enforces Data Loss Prevention (DLP) policies, while user credentials remain fully encrypted and are never exposed directly to the agent.'

Google
Gemini
Gemini 3.5 Flash
Gemini Spark
Antigravity


GHSA-7wx4-6vff-v64p: Diffusers: TOCTOU Trust Remote Code Bypass

Summary: The `diffusers` package has a TOCTOU (time-of-check-time-of-use, where a security check happens at one moment but the actual data used comes from a different moment) vulnerability in its `DiffusionPipeline.from_pretrained` function that loads models from HuggingFace Hub. An attacker can bypass the `trust_remote_code` security check by updating a repository between two separate download calls, allowing arbitrary code to execute without the user explicitly approving it.


GHSA-fvvm-949w-qj4w: RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

Summary: RTK (Rust Token Killer, a tool that filters sensitive data before showing command output to an LLM) had a vulnerability where it automatically loaded filter configuration files from a project directory without asking the user first, allowing attackers to secretly modify what an LLM sees. An attacker could place a malicious filter file in a repository to hide or alter command output (like file contents or security scan results) without any warning, potentially concealing malicious code during development.

Solution: Fixed in v0.32.0 (PRs #623, #625): the `.rtk/filters.toml` file is now blocked by default with a visible warning stating '[rtk] WARNING: untrusted project filters — Filters NOT applied. Run rtk trust to review and enable.' The patch also adds SHA-256 hash verification (a cryptographic check ensuring the file hasn't changed) to re-block filters if the file is modified after being trusted, and introduces new `rtk trust` and `rtk untrust` commands to let users explicitly approve configuration files.


ChatGPT and other AI bots made huge errors before Scottish election, study finds

Summary: A UK study by the thinktank Demos found that AI chatbots like ChatGPT gave voters false information in response to 34% of questions about the Scottish election, including made-up scandals and invented candidates. The Electoral Commission has called for new legal controls to regulate AI platforms and prevent this kind of misinformation (false information spread to deceive people).


AI-Powered App Attacks Are Faster, More Frequent and Harder to Stop

Summary: AI, particularly agentic AI (AI systems that can plan and take actions independently), is making attacks on applications faster, cheaper, and more widespread than ever before. Attackers are now targeting all apps as primary threats rather than some being less important, and apps face hostile attacks within hours of being published online instead of days. Critical sectors like medical devices and automotive apps are seeing the steepest increases in attacks because AI tools have made it easier to reverse engineer (understand how software works by analyzing it) the complex, specialized code that once protected these systems.


On AI Security

Summary: Simply using security and privacy benchmarks (standardized tests that measure how well a system performs) is not enough to ensure AI is truly secure, because benchmarks don't accurately measure AI capabilities. Instead of relying on benchmarks alone, organizations should apply proven security engineering practices, such as process-driven standards like BSIMM (Building Security In Maturity Model, a framework that guides companies through security best practices), while staying extra vigilant since AI systems don't have a single reliable security measurement like software does.


It’s make or break time for AI labeling systems

Summary: Google and other companies are expanding AI labeling systems like SynthID (invisible watermarking that tags AI-generated images) and C2PA Content Credentials to help people identify fake or AI-generated content online. These technologies aim to combat deepfakes (manipulated videos or images made to look realistic) and other misleading AI content that has been deceiving people on social media.


1Password Teams With OpenAI to Stop AI Coding Agents From Leaking Credentials

Summary: 1Password partnered with OpenAI to protect credentials from being leaked by AI coding agents, which are AI systems that can write and deploy software automatically. The companies created an Environments MCP Server (a module that connects different systems together) for Codex that gives AI agents access to credentials only when needed, without storing them in code, prompts, or the AI model's memory where they could be stolen. Credentials are issued just-in-time, scoped to specific tasks, and kept encrypted in 1Password's vault rather than exposed where attackers could find them.

Solution: 1Password introduced an Environments MCP Server for Codex that implements just-in-time credential access. According to the source, the solution works by: (1) issuing credentials only when needed and scoped to the specific task, (2) keeping secrets outside the model's context window, (3) providing a secure runtime environment where secrets are mounted, used, and discarded with user authentication required at access time, (4) using 1Password's vault technology to keep secrets end-to-end encrypted and centrally managed, (5) limiting access through custom permissions, and (6) injecting required variables directly into the application process at runtime so credentials exist in memory only for the authorized process and only as long as needed. The source states: 'The credentials never appear in code, terminals, or model context.'


If Google can’t make AI agents useful, maybe no one can

Summary: Tech companies have long promised AI assistants but delivered disappointing results until recently, with OpenClaw, an open-source AI agent platform (software that can perform tasks autonomously), gaining popularity. Google has now announced new AI agents at I/O 2026 that can perform various tasks like gathering information and planning events, running continuously in the background with claimed seamless integration.


Optimizing Leaky Private Information Retrieval Codes to Achieve O(log K) Leakage Ratio Exponent

Summary: This research addresses leaky private information retrieval (L-PIR), a system where a user queries a database while accepting some measurable privacy leakage, quantified using differential privacy (a mathematical framework that bounds how much information an observer can learn about individual data). The researchers developed an improved L-PIR scheme that reduces privacy leakage from O(K) to O(log K) by using cyclic permutations (mathematical rearrangements) and assigning higher probabilities to keys with lower Hamming weights (fewer 1-bits in binary representation), achieving better privacy-to-cost tradeoffs than previous methods.


Trigger Without Trace: Toward Stealthy Backdoor Attack on Text-to-Image Diffusion Models

Summary: Researchers have developed a new backdoor attack method called Trigger without Trace (TwT) that can secretly compromise text-to-image diffusion models (AI systems that generate images from text descriptions) while avoiding detection. The method works by using syntactic structures (grammar patterns) as hidden triggers and employing a mathematical technique called Kernel Maximum Mean Discrepancy (KMMD, a way to match statistical distributions) to make malicious samples look identical to legitimate ones, achieving a 97.5% success rate while bypassing three existing defense detection systems.

text-to-image diffusion models
Stable Diffusion


Vul-CTG: A Multimodal Framework for Software Vulnerability Detection via Code Text and Graph Integration

Summary: Vul-CTG is a new AI framework for detecting software vulnerabilities (bugs that create security weaknesses) by combining two approaches: PLMs (pretrained language models, AI systems trained on large amounts of text) and GNNs (graph neural networks, AI systems that analyze connected data structures). The framework improves on existing methods by better combining code text analysis with program graph analysis, using contrastive learning (training the AI to recognize similarities and differences) and handling unreliable training labels, achieving about 3% better accuracy than previous approaches.


MDV: Resolving the Auxiliary Data Dilemma in Model Extraction Defenses

Summary: Model extraction attacks (MEA, where attackers steal the functionality of AI models by creating a clone with similar behavior) are a security threat that defenders counter by using auxiliary data to make the victim model give misleading predictions. However, realistic auxiliary data is hard to obtain, gives inconsistent protection, and doesn't protect all data categories equally. The paper proposes MDV (Model Defense Variational Autoencoder, a machine learning technique that generates synthetic data rather than using real data) to create virtual auxiliary data that effectively addresses all three problems.

Solution: The proposed solution is to use Model Defense Variational Autoencoder (MDV) to generate virtual auxiliary data as a replacement for realistic auxiliary data. MDV combines a Variational Autoencoder (VAE, a machine learning model that generates new synthetic data similar to training data) and a classifier, forcing learned features to follow different statistical distributions by category, then samples synthetic data from low-likelihood regions of these distributions to use as auxiliary data in defense methods.


Deepfake Detection via Exploring Degradation Inconsistency

Summary: This research presents a method to detect deepfakes (AI-generated fake videos or images of faces) by identifying inconsistencies in how image quality degrades between the background and the manipulated face regions. The approach uses a framework that learns to spot these degradation differences through two connected neural networks (deep learning models), one that creates fake images and another that detects them, working together in an adversarial process similar to a GAN (generative adversarial network, where two AI systems compete to improve each other). The method shows better performance when detecting deepfakes created by new, unseen manipulation techniques.


Anthropic Silently Patches Claude Code Sandbox Bypass

Summary: Anthropic patched a vulnerability in Claude Code's network sandbox (a restricted environment that controls where the AI can send data) that could have allowed attackers to bypass security controls and steal sensitive information. The vulnerability, called a SOCKS5 hostname null-byte injection issue (a trick where attackers hide a malicious server address using special characters to fool the security filter), was silently fixed in version 2.1.88 released on March 31, 2025, but was never publicly disclosed or assigned a tracking identifier.

Solution: The vulnerability was fixed in Claude Code version 2.1.88, released on March 31, 2025. According to Anthropic, the fix was included in a public commit to the 'sandbox-runtime' repository on March 27, 2025.

Anthropic
Claude
Claude Code
Google Gemini
GitHub Copilot


Why some security fixes never reach your vulnerability dashboard

Summary: A malicious version of Bitwarden CLI was published on npm for 90 minutes in April 2026, stealing developer credentials through a compromised GitHub Action (an automated workflow tool). The incident received a CVE (common vulnerabilities and exposures, an official vulnerability identifier), but the CVE only notified defenders after the fact rather than providing a patch to apply, highlighting how CVE has drifted from its original purpose of identifying code flaws with fixable versions to tracking security incidents.

Bitwarden
npm
Checkmarx
Red Hat
OpenSSL
Apache Struts
SolarWinds
node-ipc


CVE-2026-24215: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled

Summary: NVIDIA Triton Inference Server has a vulnerability in its DALI backend (a component that processes data) that allows attackers to cause uncontrolled resource consumption, potentially leading to a denial of service attack (making the service unavailable to legitimate users).


CVE-2026-24214: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer ove

Summary: NVIDIA Triton Inference Server has a vulnerability in its DALI backend (a component that processes data) where an attacker could trigger an integer overflow (a bug where a number exceeds the maximum value a system can store). This could allow an attacker to execute malicious code, modify data, or crash the service.

NVIDIA
NVIDIA Triton Inference Server
DALI backend


CVE-2026-24213: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-boun

Summary: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend (a component that processes data) where an attacker could perform an out-of-bounds read (accessing memory locations outside the intended range). Exploiting this could allow code execution (running malicious commands), data tampering (changing information), denial of service (making the system unavailable), or information disclosure (leaking sensitive data).


CVE-2026-24210: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful

Summary: NVIDIA Triton Inference Server has a vulnerability where an attacker could cause an integer overflow (a situation where a number exceeds the maximum value a program can store, causing unexpected behavior), potentially leading to denial of service (making a system unavailable to users). The vulnerability has a CVSS 4.0 severity rating (a 0-10 scale measuring how serious a security flaw is).


CVE-2026-24209: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

Summary: CVE-2026-24209 is a path traversal vulnerability (a flaw where an attacker manipulates file paths to access files outside their intended directory) in NVIDIA Triton Inference Server that could allow an attacker to cause a denial of service (making a system unavailable to users). The vulnerability has a CVSS 4.0 severity rating, though a full assessment from NIST has not yet been provided.


CVE-2026-24208: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue. A successf

Summary: NVIDIA Triton Inference Server contains a path traversal vulnerability (CWE-22, a flaw where attackers can access files outside the intended directory) that could allow an attacker to cause a denial of service (making the service unavailable). The vulnerability has a CVSS 4.0 severity rating, though a detailed assessment has not yet been provided by NIST.


CVE-2026-24207: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

Summary: NVIDIA Triton Inference Server has a vulnerability (CVE-2026-24207) where an attacker could bypass authentication (skip security checks that normally verify who someone is), potentially allowing them to run code, gain higher privileges, change data, crash the service, or steal information. The vulnerability is classified as an authentication bypass using an alternate path or channel (CWE-288, a type of weakness where attackers find different ways to access a system without proper verification).

confidentiality integrity availability safety


CVE-2026-24206: NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A succes

Summary: NVIDIA Triton Inference Server contains a vulnerability (CVE-2026-24206) that allows attackers to bypass authentication (a security check that verifies who you are), potentially leading to privilege escalation (gaining higher-level access), denial of service (making a system unavailable), or information disclosure (unauthorized access to data). The vulnerability is classified as CWE-288, which means it exploits an alternate path to bypass normal authentication checks.


What It'll Take to Make AI BOMs Usable in a Modern Security Program

Summary: This article discusses AI Bills of Materials (BOMs, which are detailed lists of components and dependencies used in AI systems), and how security leaders can prepare to use them effectively in their organizations. The piece focuses on five strategies that CISOs (Chief Information Security Officers, the executives responsible for security) can use to both adopt AI BOMs and help shape how they're created in the future.


Singapore inks AI deals with Google, OpenAI as ChatGPT-maker commits $234 million to local ecosystem

Summary: Singapore has signed separate agreements with Google and OpenAI to strengthen its position as a global AI hub and speed up AI deployment in public services, healthcare, education, and business. OpenAI will invest over $234 million in Singapore's AI ecosystem and establish its first applied AI lab outside the U.S., while Google will focus on solving societal challenges, building an AI-ready workforce, and creating a secure AI ecosystem (systems designed to prevent harmful outcomes from AI).

OpenAI
Google
Google DeepMind
Amazon AWS
Microsoft


Google announces glasses are back and search is getting an AI makeover

Summary: Google announced updates to its search engine that will use AI more heavily, allowing users to ask longer, more natural questions that get answered by Google's chatbot instead of traditional search results. The company also revealed new smart glasses (wearable devices with computer capabilities) for consumers, marking its return to the hardware market over a decade after its previous glasses faced public criticism. These changes are powered by Google's new Gemini 3.5 AI model.


The next phase of OpenAI’s Education for Countries

Summary: OpenAI is launching 'Education for Countries,' a program to help governments deploy AI tools like ChatGPT and Codex (a code-generation AI) in schools through research partnerships, teacher training, and localized systems. The program aims to improve learning outcomes while ensuring responsible adoption by measuring real-world impact in classroom settings and building educator confidence.


How Ramp engineers accelerate code review with Codex

Summary: Ramp engineers use Codex (an AI code review tool) with GPT-5.5 to give substantive feedback on pull requests (code changes) in minutes instead of hours, catching bugs that human reviewers miss. Beyond code review, they're also using Codex to build internal tools like On-Call Assistant, which helps manage the complex demands of on-call engineer shifts (when engineers respond to system emergencies). The tool stands out because it deeply analyzes the codebase and reasons through complex problems, reducing manual work that would otherwise require significant mental effort.


An OpenAI model has disproved a central conjecture in discrete geometry

Summary: An OpenAI language model has solved a famous 80-year-old math problem in discrete geometry (the study of geometric shapes made from separate points) by disproving a long-held belief about how many pairs of points can be exactly one unit apart. The AI found an infinite family of point arrangements that beat the previous best solution, and external mathematicians have verified the proof, marking the first time an AI has autonomously solved a prominent open problem central to a mathematical field.


Gemini 3.5 Flash: more expensive, but Google plan to use it for everything

Summary: Google released Gemini 3.5 Flash, a new AI model now available to billions of users through Google apps and to developers via APIs (application programming interfaces, tools that let software communicate). The model is significantly more expensive than previous Flash versions, costing 3-6 times more, bringing it close in price to Google's more advanced Gemini 3.1 Pro model.

Google
Gemini 3.5 Flash
OpenAI
GPT-5.5
Anthropic
Claude Opus 4.7


What Will Make AI BOMs Real?

Summary: This article discusses AI BOMs (bill of materials, a detailed list of components and dependencies in an AI system), exploring what factors will encourage more organizations to create and use them. The content examines the forces and motivations driving adoption of this practice for better AI transparency and management.


OpenAI announces new Guaranteed Capacity offering for customers to secure compute

Summary: OpenAI announced a new Guaranteed Capacity offering that lets customers lock in long-term access to compute (the computational power needed to train and run AI models) by committing to one, three-year contracts with increasing discounts based on the commitment length. CEO Sam Altman said this helps OpenAI plan ahead while giving customers certainty about capacity availability, though the offering is only available until current allocation sells out.


From teen hacker to Iron Dome researcher, this founder raised $28M to fight AI phishing

Summary: Ocean, a new startup founded by former Israeli cybersecurity researcher Shay Shwartz, has raised $28 million to fight AI-powered phishing attacks (fraudulent emails designed to steal information). The company argues that AI makes phishing easier and faster by automating the research and targeting process that previously required manual effort, so traditional email security tools are insufficient. Ocean's solution uses a small language model (a scaled-down AI trained for specific tasks) to analyze incoming emails for fraud and impersonation by understanding context and the sender's intent.

Solution: Ocean built a small language model tailored to quickly analyze emails, understand the sender's intent, and evaluate it against the user's specific organizational context. According to the founder, this approach works like 'having a guard in every door' to make the inbox safe.


Google’s AI future demands trust — and your personal data

Summary: Google is promoting new AI tools like Gemini Spark (an always-on AI agent that helps organize events and brief you on your day) and expanded Gmail AI features that draft emails and create to-do lists, but these tools rely on processing large amounts of personal data. The article raises concerns about whether users should trust Google with this personal information to power its AI-powered future.


datasette-llm-accountant 0.1a4

Summary: datasette-llm-accountant 0.1a4 is a software release, but the provided content contains only a title and version number with no description of features, functionality, or issues.


Introducing OpenAI for Singapore

Summary: OpenAI announced a partnership with Singapore's government called 'OpenAI for Singapore,' backed by over S$300 million, to help the country become an AI-powered economy. The initiative will establish OpenAI's first Applied AI Lab outside the United States, create over 200 technical jobs, and focus on deploying frontier AI (cutting-edge AI systems), developing local AI talent, and expanding AI access across organizations in sectors like healthcare, finance, and public services.


datasette-llm 0.1a8

Summary: datasette-llm 0.1a8 is an early-stage release (indicated by the 'a' in the version number, meaning alpha or pre-release software) announced by Simon Willison in May 2026. The source text does not provide details about what this software does, what problems it solves, or any security issues associated with it.


Roundtables: Inside the Musk v. Altman Trial

Summary: Elon Musk lost a lawsuit against OpenAI in which he claimed that CEO Sam Altman and President Greg Brockman had misled him about the company's non-profit status. MIT Technology Review hosted a discussion with AI reporter Michelle Kim and editor Mat Honan to examine the trial details and what the outcome means for competition in the AI industry.


GHSA-6x44-w3xg-hqqf: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Summary: Coder's Azure identity verification has a critical flaw: it checks that a certificate comes from a trusted Azure authority but never verifies the actual PKCS#7 signature (a cryptographic stamp that proves data hasn't been tampered with). An attacker can forge identity data and steal session tokens that grant access to Git keys, OAuth tokens, and secrets. All Coder v2 versions are affected.

Solution: Update to patched versions: v2.33.3, v2.32.2, v2.31.12, v2.30.8, v2.29.13, or v2.24.5. If unable to patch immediately, reconfigure Azure templates to use token authentication instead of azure-instance-identity by setting coder_agent.auth to 'token' and adding CODER_AGENT_TOKEN=${coder_agent.main.token} to environment variables.

github.com/coder/coder/v2@< 2.24.5 (fixed: 2.24.5)


GHSA-22qr-rp27-j9wm: PenPot MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

Summary: PenPot's MCP REPL server binds to all network interfaces (0.0.0.0:4403) and exposes an unauthenticated /execute endpoint that runs arbitrary JavaScript code, allowing anyone on the network to achieve RCE (remote code execution, where an attacker can run commands on a system they don't own). The vulnerability exists because the server listen call omits a host argument, defaulting to 0.0.0.0, and the /execute endpoint has no authentication checks before executing user-supplied code.


GHSA-686c-7vgv-v3fx: Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint

Summary: Coder's Azure identity endpoint was vulnerable to SSRF (server-side request forgery, where an attacker tricks a server into making requests to unintended targets) because it accepted unsigned certificates and fetched arbitrary URLs without validation. An attacker could craft a fake certificate pointing to any internal or external address, forcing the Coder server to connect to it and reveal whether the target was reachable through error messages, enabling network reconnaissance and potential attacks on internal services.

Solution: Fixed in PR #25274 (commit 57b11d405). Upgrade to patched versions: v2.33.3, v2.32.2, v2.31.12, v2.30.8, v2.29.13, or v2.24.5 (ESR), depending on your release line.


GHSA-fhh6-4qxv-rpqj: 9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

Summary: 9router, a tool for managing AI plugins, has a critical vulnerability where two unprotected API endpoints can be chained together to run arbitrary OS commands. The problem occurs because the authentication middleware (a security check) only protects 8 specific routes, while 40+ routes under `/api/cli-tools/*` and `/api/mcp/*` have no protection, allowing attackers with network access to register malicious commands and then trigger them without any credentials.


AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

Summary: The npm (node package manager, a repository for reusable code libraries) registry was attacked on May 19 when hackers compromised a maintainer account and published 637 malicious versions of 317 packages, including the popular AntV data visualization tool used by Alibaba. The malware, called Mini-Shai-Hulud worm, steals credentials like npm tokens, GitHub tokens, and passwords from cloud platforms and wallets. After detection, AntV's maintainers deleted the infected packages and marked remaining ones as deprecated, advising users to download only the latest verified versions.

Solution: According to AntV's GitHub warning, the infected packages have been deleted and remaining ones marked as deprecated. Users should identify and download the latest versions from a list of compromised packages. Beyond this, experts recommend developers look for signs of compromise in CI/CD (continuous integration/continuous deployment, automated systems that build and deploy code) environments and repositories, and rotate all credentials.


Gemini will use Volvo’s external cameras to interpret parking signs

Summary: Google and Volvo announced that Gemini, an AI assistant, will soon be able to access external cameras in Volvo's EX60 SUV to help interpret the vehicle's surroundings. This capability works because Volvo uses Google's Android Automotive (an operating system designed for vehicles) in the car. The first planned use is helping drivers understand confusing parking signs, though Google expects other applications in the future.


The 13 biggest announcements at Google I/O 2026

Summary: Google announced new AI models called Gemini 3.5 at its I/O 2026 conference, including Gemini 3.5 Flash (available immediately) and Gemini 3.5 Pro (coming next month). The Gemini 3.5 Flash model will now be the default AI powering Google's Gemini app and AI Mode in Search. The announcement was part of a broader keynote that also covered updates to Gmail, Search features, and Project Aura smart glasses.

Google
Gemini 3.5 Flash
Gemini 3.5 Pro
Project Aura


Meta is rapidly reorganizing its workers’ jobs around AI: ‘Transfers aren’t optional’

Summary: Meta is forcing over 7,000 employees to transfer to new teams focused on AI, including groups building AI cloud infrastructure and an internal AI agent called Hatch. This reorganization is mandatory, with the company previously telling workers that similar transfers to an AI data labeling team were non-optional, even after initially offering them as voluntary.


Google wants to compete with Anthropic’s Mythos

Summary: Google is expanding access to CodeMender, an AI agent (a software system that can perform tasks autonomously) for code security that can both identify and fix vulnerabilities (security weaknesses) in software. This move appears to be Google's response to Anthropic's recent announcement of Claude Mythos Preview, intensifying competition in the AI security tools market.


Google debuts new AI models, personal AI agents in effort to keep pace with OpenAI and Anthropic

Summary: Google announced new AI models at its I/O conference, including Gemini 3.5 Flash (a faster, cheaper version of its main model) and Gemini Spark (an AI agent that can take actions in connected apps on a user's behalf). The company also introduced Omni, a world model (AI trained to simulate and predict physical environments) that can edit videos and generate realistic imagery, as Google competes with rivals like OpenAI and Anthropic.

Google
Gemini
Gemini 3.5 Flash
Gemini 3.5 Pro
Gemini Spark
OpenAI
Anthropic
DeepMind
Omni


Google is launching its own version of OpenClaw

Summary: Google has announced Gemini Spark, its own AI agent platform (software that can perform tasks automatically on your behalf) that runs constantly in the background to help with tasks like writing emails, creating study guides, and monitoring credit card statements. Powered by the Gemini 3.5 Flash model, it will initially work with Google Workspace apps like Gmail and Docs, with plans to connect to other third-party applications.

Google
Gemini
Gemini 3.5 Flash
Gemini Spark
Google Cloud
Gmail
Docs
Sheets
Slides


Would you let robots spend your money? Google is betting on it

Summary: Google is expanding its AI shopping tools by introducing a 'Universal Cart' that lets users add products from different retailers while browsing Google Search and chatting with Gemini (Google's AI assistant), then checkout directly through Google. The cart will also track prices, notify users about stock availability, suggest discounts, and flag potential problems with selected items.


Gmail is going to start talking to you

Summary: Google is launching Gmail Live, a new AI-powered voice mode feature that lets users speak questions aloud in Gmail instead of typing them. The feature pulls relevant information from a user's inbox to answer questions, such as details about school events or travel plans.


Google Search is getting its biggest changes ever

Summary: Google Search is being redesigned to better integrate AI features, including AI Overviews (AI-generated summaries at the top of search results) and AI Mode (a chatbot-like search experience). The new search box, powered by Gemini 3.5 Flash model, expands for longer queries and includes AI-powered autocomplete to help refine questions.


Google Pics is a new app that tries to fix AI image editing

Summary: Google is launching Pics, a new AI image generation app for Workspace that uses Gemini and Google's Nano Banana 2 image model to make editing easier. Instead of rewriting entire prompts to change small details, users can click on specific parts of an image and leave notes describing what they want to change, similar to commenting in Google Docs.


Google is trying to make deepfake detection more accessible for everyone

Summary: Google is making it easier for people to detect deepfakes (synthetic media created by AI to look real) by adding detection tools to Chrome and Search. The tools will check for SynthID, which is invisible watermarking technology that marks images made with Google's AI tools, and C2PA content credentials (metadata that shows how content was created or changed), helping users understand whether online content is authentic or manipulated.


Anthropic hires OpenAI co-founder Andrej Karpathy, former Tesla AI leader

Summary: Andrej Karpathy, an AI researcher who co-founded OpenAI and later led Tesla's computer vision team, has joined Anthropic as a senior hire. At Anthropic, he will build a team focused on using Claude (the company's LLM, or large language model, a type of AI trained on text) to improve pretraining research, which helps AI models learn their core knowledge and abilities. This hire is part of Anthropic's ongoing competition with OpenAI to attract top talent in the AI field.


GHSA-jwp7-wg77-3w9v: Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching

Summary: A domain allowlist (list of approved websites) in the Apify Model Context Protocol server is bypassed because it uses simple string prefix matching instead of proper URL validation. An attacker can create a fake subdomain like `https://docs.apify.com.evil.com/` that passes the check, allowing the tool to fetch arbitrary content from attacker-controlled servers and return it to the AI, which can lead to prompt injection (tricking the AI by hiding instructions in fetched content) and potential account compromise.

@apify/actors-mcp-server@< 0.9.21 (fixed: 0.9.21)


GHSA-4gph-2hhr-5mwg: Envoy AI Proxy - MCP Message Smuggling Vulnerability

Summary: Envoy AI Gateway has a vulnerability where it improperly parses JSON-RPC messages (a protocol for remote procedure calls) in a case-insensitive way, even though the specification requires case-sensitive matching. This allows attackers to send messages with duplicate fields using different capitalization (like 'name' and 'Name'), causing the gateway to alter and forward a different request than what was originally sent, potentially bypassing security checks in systems that use this gateway.

github.com/envoyproxy/ai-gateway@< 0.6.0 (fixed: 0.6.0)

Envoy AI Gateway
Model Context Protocol
modelcontextprotocol/go-sdk


GHSA-3875-8gcx-7v46: n8n: Credential exfiltration via Allowed HTTP Request Domains Bypass

Summary: A security flaw in n8n (a workflow automation tool) allowed authenticated users to bypass restrictions on which websites could receive sensitive credentials, potentially exposing them. The vulnerability was in an endpoint (a URL that accepts requests) that didn't properly check the intended security rules before sending data to external servers.

Solution: The issue has been fixed in n8n version 2.20.0. Users should upgrade to this version or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should restrict n8n access to fully trusted users only and limit credential sharing to users who genuinely require access to those credentials, though these workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.


GHSA-hv85-774v-26fg: auth-fetch-mcp: SSRF and disk exfiltration via unvalidated auth_fetch and download_media URLs

Summary: The `download_media` and `auth_fetch` tools in auth-fetch-mcp accept any URL without validation, allowing an attacker (via prompt injection or a malicious MCP client) to make the server fetch from private or internal services like cloud metadata endpoints or localhost, and then exfiltrate the response data. The `download_media` tool makes this worse by saving fetched content to disk where it can be read and stolen.

Solution: The source text describes the fix shape but does not provide an explicit implementation or version update: 'after URL parsing, resolve to IP, reject if private/loopback/link-local. Same defense as the well-known SSRF-guard pattern shipped by other MCP fetchers in the ecosystem (e.g., `Akitaroh/scraper-mcp` `src/security/url-guard.ts`).' However, no patched version, release number, or completed code fix is provided in the source.

auth-fetch-mcp
ymw0407/auth-fetch-mcp
MCP (Model Context Protocol)


GHSA-xmpw-2vmm-p4p6: Malicious code in guardrails-ai 0.10.1 (supply chain compromise)

Summary: An attacker published malicious code in guardrails-ai version 0.10.1 on PyPI (a package repository where developers download Python libraries), but PyPI removed it within 2 hours and found no evidence that user data was stolen through this compromise. This is an example of a supply chain attack, where someone tries to harm users by corrupting a widely-used software package.

Solution: Downgrade to guardrails-ai==0.10.0, which is unaffected. Alternatively, install from GitHub using `pip install git+https://github.com/guardrails-ai/guardrails.git@v0.10.0`. If you installed 0.10.1, rotate all credentials accessible from that machine (GitHub PATs, cloud provider keys, package registry tokens, API keys) and audit your GitHub account for unauthorized workflows or repositories. Snowglobe and Guardrails Hub users should rotate API keys before 2:00 PM Pacific on May 13, 2026, when all existing keys will be invalidated.


GitHub scales back bug bounties, reminds users security is their responsibility too

Summary: GitHub is replacing cash bounties with swag rewards for low-impact bug reports and asking researchers to stop submitting low-quality reports, because AI tools have flooded the platform with submissions that don't represent real security risks. The company clarified that many rejected reports describe scenarios where users must actively engage with malicious content (like cloning a malicious repository), which means the security boundary lies with the user's decision to trust that content rather than with GitHub's security controls.

Solution: GitHub requires that all AI-generated submissions must be reviewed and validated by a human first, a rule that applies to any tool used to help with bug hunting. The company also publishes a list of submission types that are ineligible for rewards, which it uses to screen out reports without proof of concept and theoretical attack scenarios that don't hold up under scrutiny.


Garland: Graph Neural Network-Based Federated Recommendation With Malicious Security via Secret-Shared Shuffle

Summary: Garland is a system for recommendation engines that use graph neural networks (GNNs, which are AI models that learn patterns from interconnected user-item relationships) in federated settings, where data stays on users' devices instead of being sent to one central server. The system addresses a key problem: untrusted servers that help expand users' local data can spy on both item information and user relationships, so Garland uses secret-shared shuffle (a cryptographic technique that mixes data while keeping it encrypted) to protect privacy while still catching if a malicious server tries to cheat.

Solution: N/A -- no mitigation discussed in source.


The Download: Musk v. Altman, smart glasses for warfare, and Google I/O

Summary: This newsletter covers several AI industry developments, including Elon Musk losing his lawsuit against OpenAI (a company creating large language models, which are AI systems trained on large amounts of text data) because he sued too late under statutes of limitations rather than on the merits of whether OpenAI violated its nonprofit mission. Other stories include Anduril and Meta developing augmented-reality smart glasses (wearable devices that overlay digital information on the physical world) for military use with eye-tracking controls, and Google preparing to showcase its AI capabilities at its I/O developer conference while facing competition from other AI companies.

OpenAI
Google DeepMind
Anthropic
Meta
Anduril
Fei-Fei Li's World Labs
Yann LeCun


2026 CNBC Disruptor 50 list: Why Anthropic was No. 1 in this year's rankings

Summary: Anthropic, an AI company founded about three years ago, topped CNBC's 2026 Disruptor 50 list due to its rapid growth, enterprise focus, and emphasis on safety through constitutional AI (a method designed to make AI systems align with human values). The company's CEO reports 80x revenue growth in the first quarter, and its Claude Code product has gained trust among businesses for handling complex tasks reliably.

Anthropic
OpenAI
Claude
Claude Code
Cursor
Lovable
Replit
Anduril
Saronic
Shield AI
Cyera
Abnormal AI
Applied Intuition
Ramp
Ripple
Revolut
Kalshi
Polymarket


Advancing content provenance for a safer, more transparent AI ecosystem

Summary: OpenAI is improving how people can verify where AI-generated images and audio come from by using multiple approaches: adding C2PA conformance (a cross-industry standard using metadata and cryptographic signatures to attach source information to content), partnering with Google to embed invisible watermarks called SynthID into images, and releasing a public tool to verify if images came from OpenAI. These layered approaches help protect provenance information (details about content's origin and creation) even when it's edited, downloaded, or shared across different platforms.

Solution: The source describes OpenAI's implemented approaches rather than fixes to a problem. OpenAI has: (1) become C2PA Conforming, which gives platforms a 'trusted way to read, preserve, and pass along the provenance information' attached to content; (2) incorporated 'SynthID embeds an invisible watermarking layer that complements C2PA metadata-based approaches,' starting with images from ChatGPT, Codex, or the OpenAI API; and (3) is 'previewing a' public verification tool for users to detect if images came from OpenAI. The source states these approaches are designed to work together: 'C2PA helps content carry detailed context; SynthID helps preserve a signal when metadata does not survive.'

OpenAI
Google DeepMind
DALL-E 3
Sora
ChatGPT
Codex
Voice Engine


Gemini is in danger of going full Copilot

Summary: Google's Gemini AI is being integrated into many Google apps and services at an increasing pace, similar to how Microsoft aggressively added Copilot to Windows 11. Users are experiencing fatigue from AI features appearing everywhere in their software, which is causing frustration.


CVE-2026-2611: In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.

Summary: MLflow version 3.9.0 has a vulnerability in its Assistant feature where /ajax-api endpoints don't properly validate the origin (the source website making a request). This allows an attacker on a malicious webpage to send cross-origin requests (requests from a different domain) to trick the MLflow Assistant running on a victim's computer, bypass security restrictions meant to only allow local access, and execute arbitrary commands (run any code they choose) through the Claude Code sub-agent.

Solution: Update to MLflow version 3.10.0, where this issue is resolved.


Anthropic and U.S. government to face off in DC court over blacklisting of AI company

Summary: Anthropic, an AI company, is suing the U.S. Department of Defense in federal court after the DOD labeled it a "supply chain risk" (a designation suggesting it threatens national security), which requires defense contractors to stop using Anthropic's Claude AI models in military work. The court judges questioned whether the DOD properly justified this blacklisting, with one judge calling it a "spectacular overreach," while the DOD argued it needed to act quickly to notify agencies about the risk.


The Iran war is exposing weak spots in the AI supply chain

Summary: The conflict between the U.S. and Iran is disrupting the supply chains that produce computer chips, which are essential for AI systems. Key materials like helium (a gas used in semiconductor manufacturing), bromine, and aluminum are becoming harder to get and more expensive, affecting companies like TSMC (the main manufacturer of Nvidia chips) and other chipmakers. Without a resolution to the conflict, these supply chain problems and rising costs could worsen throughout 2025 and impact the AI industry's growth.

Solution: TSMC's strategy involves building inventory buffers (stockpiles of materials), diversifying sourcing (buying from multiple suppliers), and continuously developing multi-source supply solutions to build a well-diversified global supplier base and improve the local supply chain. The source also notes that chip companies generally understand they need to diversify to be less dependent on a specific region.

NVIDIA
TSMC
Foxconn
Infineon
VAT Group
Advantest


The last six months in LLMs in five minutes

Summary: Between November 2025 and February 2026, large language models (LLMs, AI systems trained on vast text data) underwent rapid advancement, with the 'best' model changing hands multiple times among major providers. The most significant development was that coding agents (AI systems that write software code) improved dramatically from often-working to mostly-working, becoming reliable enough for daily professional use after months of reinforcement learning from verifiable rewards (a technique where AI systems learn by receiving feedback on whether their outputs are correct). This progress sparked widespread experimentation and led to the emergence of 'Claws' (personal AI assistants), with OpenClaw becoming particularly popular by February.

Claude Sonnet 4.5
Claude Opus 4.5
GPT-5.1
GPT-5.1 Codex Max
Gemini 3
OpenClaw
NanoClaw
ZeroClaw


How Sam Altman’s victory over Elon Musk clears way for OpenAI’s trillion-dollar ambitions

Summary: A jury in Oakland, California ruled that Sam Altman and OpenAI did not break any laws or contracts with Elon Musk, rejecting his claims that they enriched themselves unfairly. This court victory removes legal obstacles to OpenAI's plans for continued growth and development.


Jury hands victory to Sam Altman and OpenAI in battle with Elon Musk

Summary: A jury ruled that OpenAI CEO Sam Altman and president Greg Brockman are not liable for Elon Musk's claims that they broke a founding contract and unfairly profited from the company. This verdict ends a legal dispute between Musk and OpenAI's leadership over the terms under which OpenAI was originally established.


'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments

Summary: Security vulnerabilities called 'Claw Chain' were found in OpenClaw, a framework for building AI agents (programs that can perform tasks autonomously). These vulnerabilities allowed attackers to steal login credentials, gain higher-level access to systems, and stay hidden in compromised systems for extended periods. The vulnerabilities have now been patched.

Solution: The vulnerabilities have been patched. Users should update to the patched version of OpenClaw.


CVE-2026-4137: In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` cr

Summary: MLflow versions before 3.11.0 create temporary directories with overly permissive access permissions (world-writable or group-writable), allowing local attackers to modify model files and execute arbitrary code when those files are loaded. This is especially dangerous in shared environments like Databricks where multiple users access the same network storage.

Solution: Update MLflow to version 3.11.0 or later.


GHSA-pq7c-x8g4-rvp6: NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

Summary: NiceGUI has a vulnerability in two routes (resource and ESM module routes) that serve files without authentication. If a request tries to access a directory instead of a file through these routes, it causes an unhandled error that writes a large traceback (around 100 lines) to the server log. An attacker can repeatedly trigger this to fill up disk space, overload logging systems, and create false alarms in monitoring without needing any special access.

Solution: The source mentions three workarounds for deployments unable to upgrade immediately: (1) Place NiceGUI behind a reverse proxy that rejects requests where the path after `/_nicegui/<version>/esm/<key>/` or `/_nicegui/<version>/resources/<key>/` is empty. (2) Rate-limit the `/_nicegui/` prefix at the proxy. (3) Configure log rotation aggressively for the affected service. For a permanent fix, upgrading NiceGUI is recommended, though no specific patched version is mentioned in the source.


GHSA-jfrm-rx66-g536: NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

Summary: NiceGUI's `ui.restructured_text()` function renders user-supplied reStructuredText using Docutils without disabling file insertion directives, allowing attackers to read local files accessible to the server using standard Docutils directives like `include` and `raw`. This vulnerability only affects applications that pass untrusted or user-controlled content to this function, not those using only static trusted strings.

Solution: Disable unsafe Docutils features by modifying the `publish_parts()` call in `prepare_content()` to include these `settings_overrides`: `'file_insertion_enabled': False`, `'raw_enabled': False`, and `'_disable_config': True`. This blocks the `include`, `csv-table :file:`, and `raw :file:` directives as well as local `docutils.conf` overrides.


GHSA-43g7-cwr8-q3jh: OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI

Summary: OpenTelemetry eBPF Instrumentation (OBI) contains an integer overflow vulnerability in its memcached protocol parser that allows a remote attacker to crash the OBI process. When parsing memcached storage commands, the parser accepts extremely large byte values without checking if adding the delimiter length will overflow, causing a negative value that triggers a runtime panic (a sudden crash caused by an error the program cannot recover from).


GHSA-j8p6-96vp-f3r9: OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

Summary: Malformed MongoDB wire messages can crash the OpenTelemetry eBPF Instrumentation telemetry agent through uncaught panics in its MongoDB parser, allowing remote attackers to cause denial of service. The parser checks attacker-controlled network data without fully validating it first, so a single crafted message can stop telemetry collection until the agent restarts.

Solution: The bounds-check panics affecting versions v0.1.0 through v0.3.0 were fixed by commit `3aa58cdaaa97fbb72f8ef4c3609ae425aacaf8bb` (`Fix MongoDB client panic`), which first appears in release `v0.4.0`. However, the unchecked BSON type assertion panic affecting versions v0.1.0 through v0.8.0 remains unfixed as of the advisory date.

go.opentelemetry.io/obi@< 0.9.0 (fixed: 0.9.0)


GHSA-962q-hwm5-52x5: OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals

Summary: OpenTelemetry eBPF Instrumentation has a memory leak in its `CappedConcurrentHashMap` class, which is used to track Java TLS connections. When entries are deleted from the map, the keys are not removed from an internal queue, causing the queue to grow indefinitely in systems with many short-lived connections. This can eventually cause the Java process to run out of memory.


CVE-2026-47092: Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac

Summary: Claude HUD versions up to 0.0.12 contain a command injection vulnerability (a security flaw where an attacker can trick a program into running harmful commands) that affects Windows systems. An attacker with local access can manipulate the COMSPEC environment variable (a Windows setting that specifies which command interpreter to use) before the software checks its version, causing it to run malicious code with system permissions.

Solution: The vulnerability was patched in commit 234d9aa. Users should update to a version after 0.0.12 that includes this patch.


CVE-2026-47091: Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to r

Summary: Claude HUD versions up to 0.0.12 contain a path traversal vulnerability (a flaw where attackers can access files outside intended directories by manipulating file paths) that lets attackers read any file the program can access by sending a malicious transcript_path value. Additionally, the vulnerability creates a cache file with weak permissions that records which files were accessed, leaving evidence even after the program stops running.

Solution: The vulnerability was patched in commit 234d9aa. Users should update to a version containing this commit or later.


CVE-2026-47090: Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd

Summary: Claude HUD version 0.0.12 and earlier has a vulnerability where it creates terminal hyperlinks (clickable links in terminal windows) using user-controlled data without properly cleaning it first, allowing attackers to inject malicious terminal codes (ANSI codes, which control formatting and behavior in terminals) that could change text colors, fake command prompts, steal clipboard data, or redirect users to attacker-controlled websites.

Solution: Patched in commit 234d9aa.


GHSA-r6c9-g6q5-qrf9: OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size

Summary: OpenTelemetry eBPF Instrumentation (OBI) has a memory leak vulnerability where a CPU mismatch causes the system to use a 256-byte fallback buffer but still tries to read up to 8KB of data from it, reading beyond the buffer's boundaries and leaking adjacent memory into telemetry (data about system performance). This happens in the HTTP tracing path when context propagation is enabled and certain conditions are met.


Pope Leo to issue text on human dignity and AI with Anthropic co-founder

Summary: Pope Leo is releasing an encyclical (a major teaching document from the Catholic Church) called Magnifica Humanitas that addresses how artificial intelligence affects human dignity, workers' rights, and society. The document will be presented at the Vatican on May 25 with Christopher Olah, co-founder of Anthropic (an AI company), and other speakers, marking a significant moment where the Church signals its engagement with rapid technological change similar to how Pope Leo XIII responded to the Industrial Revolution in 1891.


Musk v. Altman proved that AI is led by the wrong people

Summary: Elon Musk sued Sam Altman over control of OpenAI, a major AI company they co-founded together, but a jury dismissed the case after just two hours due to legal time limits. The trial revealed concerns that many of the powerful tech leaders directing AI development may not be trustworthy or temperamentally suited for the responsibility.


5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

Summary: Shadow AI refers to unapproved AI tools that employees use at work without IT oversight, often gaining access to corporate data through quick login approvals that bypass traditional security monitoring. The article explains that 80% of employees use unapproved generative AI applications, and most companies lack formal AI governance policies, creating a visibility gap for security teams. The source describes a five-step program to manage this risk by discovering which tools are running, creating employee-friendly policies, and establishing approved alternatives.

Solution: The source explicitly recommends a five-step program: (1) discover all AI tools in use by auditing OAuth (authorization tokens that grant app access to data) connections, scanning for browser extensions, identifying AI features in already-approved tools, and surveying employees; (2) write a practical policy listing approved tools, specifying which data categories (customer records, source code, financial information) should never enter AI tools, confirming data training opt-out status for sensitive tools, and defining a process for requesting new tools; (3-5) [the source text is incomplete and does not provide steps 3-5]. Implement steps 1-2 to give security teams visibility while providing employees a clear approved path for AI tool adoption.

Microsoft Copilot
Google Gemini
Salesforce Einstein


Tech firms face tougher UK rules on intimate image abuse

Summary: UK regulators (Ofcom) are requiring social media platforms, messaging services, and online forums to follow stricter rules to prevent the spread of intimate image abuse (sharing private sexual images without consent, sometimes called 'revenge porn') and AI-generated deepfakes (fake videos created with AI to show people doing things they didn't do). This comes after a rise in such harmful content, particularly targeting women and girls, including a spike in deepfakes created with AI tools like Elon Musk's Grok.

Solution: Ofcom said it would change its codes of practice to force service providers to detect and quash intimate image abuse and crack down on AI-generated deepfakes.


Jury tosses Elon Musk's lawsuit against OpenAI and its boss Sam Altman

Summary: A California jury dismissed Elon Musk's lawsuit against OpenAI and CEO Sam Altman, ruling that Musk had waited too long to file his claims (the statute of limitations, a legal deadline for when lawsuits must be filed, had expired). Musk had accused Altman of breaching a non-profit agreement by converting OpenAI to a for-profit company after Musk donated $38 million early in the company's history. The jury's decision means the case was dismissed on timing grounds rather than on the actual merits of Musk's accusations.


GHSA-8rrq-wcg8-cv5q: OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages

Summary: OpenTelemetry eBPF Instrumentation (OBI) exports unfiltered error messages from Redis directly into span status messages, which are then sent to telemetry backends (systems that collect and store trace data). This means sensitive information like tokens or passwords that appear in Redis errors could be leaked into monitoring systems, and attackers could inject malicious text into these systems.


GHSA-wp73-mwgf-4jq9: OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent

Summary: OpenTelemetry eBPF Instrumentation (OBI) has a vulnerability where its ELF parser (a tool that reads executable file formats) blindly trusts offsets and metadata from binary files without checking if they're valid. A malicious or corrupted executable can cause OBI to crash when it tries to analyze what programming language a process uses, disrupting monitoring for other applications on the system.

OpenTelemetry
OpenTelemetry eBPF Instrumentation


GHSA-jgg6-4rpr-wfh7: Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp

Summary: Three Mistral AI npm packages (@mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp) were compromised in a supply chain attack (where malicious code is inserted into legitimate software dependencies) between May 11-12. However, the malicious code, called a dropper (a program designed to download and execute harmful payloads), was broken and failed to run because it referenced the wrong filename. The affected versions have been removed from npm.

Solution: 1. Stop using the affected package versions immediately (2.2.2, 2.2.3, 2.2.4 for @mistralai/mistralai; 1.7.1, 1.7.2, 1.7.3 for @mistralai/mistralai-azure and @mistralai/mistralai-gcp). 2. Clean systems where these packages were installed. Check your installed versions using 'npm ls' or by searching your lockfiles (package-lock.json, pnpm-lock.yaml, yarn.lock) for the affected version numbers. Also check build artifacts, container images, and package caches for the malicious files: router_init.js, tanstack_runner.js, or @tanstack/setup package.json.

@mistralai/mistralai-gcp@= 1.7.3
@mistralai/mistralai-gcp@= 1.7.2
@mistralai/mistralai-azure@= 1.7.3
@mistralai/mistralai-azure@= 1.7.2
@mistralai/mistralai@= 2.2.4


GHSA-wx9m-wx4f-4cmg: Malicious dropper in mistralai 2.4.6 PyPI package

Summary: Version 2.4.6 of the mistralai package on PyPI contained malicious code that runs when the package is imported on Linux systems. The malicious code downloads and executes a file from a remote server, and versions 2.4.5 and earlier are not affected.

Solution: Pin mistralai to version 2.4.5 or earlier. The source text states: 'Pin mistralai to 2.4.5 or earlier. While the PyPI project is quarantined, install from this repository at a known-good tag, e.g. git+https://github.com/mistralai/client-python.git@v2.4.5.' Additionally, on affected Linux hosts, rotate every credential reachable from the importing process and review host and cloud audit logs for activity from approximately 2026-05-12 00:05 UTC onward.


GHSA-jxx9-px88-pj69: n8n-MCP: Multi-tenant MCP requests fall back to process-level n8n credentials when tenant headers are absent or incomplete

Summary: In n8n-mcp (a tool that bridges AI agents to n8n workflow automation) running in multi-tenant mode, requests missing tenant identification headers would fall back to using the operator's own n8n credentials, allowing an authenticated tenant to access or modify the operator's workflows and data instead of their own. This only affects shared multi-tenant deployments, not single-tenant setups.

Solution: Fixed in n8n-mcp 2.51.2. The fix rejects requests without proper tenant headers at the HTTP edge with a 400 error before processing, prevents the system from using fallback operator credentials when in multi-tenant mode, and blocks secondary leaks in health checks and other handlers. Upgrade via 'npx n8n-mcp@latest' (NPM) or 'docker pull ghcr.io/czlonkowski/n8n-mcp:latest' (Docker). Workarounds if upgrading immediately is not possible: disable multi-tenant mode and run separate instances per tenant, use a proxy to reject requests missing both tenant headers, or restrict the operator API key to minimum required permissions if your n8n supports scoping (Enterprise or compatible Community Edition builds).


What to expect from Google this week

Summary: Google is attending its annual I/O developer conference as the third-place competitor in the foundation model (large AI systems trained on broad data) race, having fallen behind Anthropic's Claude and OpenAI's systems, particularly in coding capabilities. The article previews expected announcements in three areas: a potential comeback attempt in AI coding tools, continued strength in AI for science (where Google won a Nobel Prize), and moves in health and medicine AI. While Google's internal teams reportedly needed to use competitors' tools to stay productive, major breakthroughs at the conference are unlikely.

Google
Google DeepMind
Anthropic
Claude
Claude Code
OpenAI
Codex
Gemini
AlphaFold
ChatGPT Health


CVE-2026-45829: A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an un

Summary: ChromaDB (a Python project for storing AI embeddings) versions 1.0.0 and later contain a code injection vulnerability that lets unauthenticated attackers run arbitrary code on the server by sending a malicious model repository with a specific setting enabled to a particular API endpoint. The vulnerability has a CVSS score (a 0-10 severity rating) of 10.0, marking it as critical.


AI cyberattackers are getting better faster

Summary: AI models are rapidly improving at performing multi-stage penetration tests (simulated attacks where attackers try to break into systems through multiple steps), with the difficulty of tasks they can complete doubling every 4.7 months as of early 2025. The UK government's AI Security Institute measured this by comparing how well AI models could replicate tasks that human cybersecurity experts can complete, finding that the latest AI systems are now showing even greater capability and posing real security risks to organizations with weak defenses.

Claude Mythos Preview
GPT-5.5
UK AI Security Institute (AISI)


Amazon Alexa Plus can now create AI-generated podcasts

Summary: Amazon has added a new feature to Alexa Plus (its upgraded AI assistant) that lets users generate podcasts on nearly any topic by simply describing what they want. The AI creates two AI-generated hosts that discuss the chosen topic, and users can preview and customize the podcast before it's created.


Anthropic to share Mythos cyber flaw findings with global finance watchdog

Summary: Anthropic is briefing global financial regulators on Claude Mythos, an AI model with advanced capabilities in finding previously unknown cybersecurity flaws that hackers could exploit. Rather than releasing Mythos publicly, Anthropic has restricted access to selected tech companies and banks to help identify weaknesses, while the UK's AI Security Institute has found the latest version shows a significant capability jump, even completing a difficult autonomous hacking test that no prior model had solved.

Solution: UK regulators and the Treasury released guidance directing firms to 'double down' on 'core cyber hygiene,' which includes reviewing legacy systems, implementing good detection mechanisms, establishing proper governance, planning recovery procedures, and considering insurance coverage.


Perfect Privacy for Discriminator-Based Byzantine-Resilient Federated Learning

Summary: This research proposes ByITFL and LoByITFL, two new federated learning (FL, a method where multiple computers train an AI model together without sharing raw data) schemes that protect user privacy while defending against Byzantine users (participants who send corrupted or malicious data). ByITFL uses Lagrange coded computing (a technique that spreads data across multiple servers to protect it) and re-randomization to achieve perfect privacy but requires significant communication overhead, while LoByITFL reduces communication costs but requires a Trusted Third Party (TTP, an external organization that users must trust) for one-time setup before training begins.

Solution: N/A -- no mitigation discussed in source.


Toward More Practical Label Inference Attacks Against Graph-Based Vertical Federated Learning

Summary: This research paper describes a new attack called Knowledge Transfer Attack (KTA) that can steal private labels (the correct answers or classifications) from graph-based vertical federated learning (GVFL, a system where multiple parties collaborate on machine learning while keeping their data private). Unlike previous attacks that required unrealistic access to training data or labeled examples, KTA only needs auxiliary graphs from unrelated domains to infer the private labels, making it a more practical threat to real-world GVFL systems.


Data-Efficient Cross-Domain Few-Shot Website Fingerprinting With Unsupervised Domain Adaptation

Summary: Website fingerprinting (WF) attacks identify which websites users visit on Tor, a privacy network, but struggle when traffic patterns differ between training and real-world scenarios. This research presents UDA-WF, a new method using unsupervised domain adaptation (a machine learning technique that helps models work across different data distributions) to identify websites more efficiently with less training data. UDA-WF reduces the auxiliary data needed by 95% while maintaining 97.37% accuracy.


PVDI: Preserving Vital and Disrupting Irrelevant Latent Attentions for Robust Backdoor Defense

Summary: Backdoor attacks (hidden triggers that manipulate AI model predictions while keeping normal performance intact) are a serious security threat to deep neural networks (machine learning models with many layers). This paper presents PVDI, a defense method that removes backdoors by selectively preserving important attention patterns (the AI's focus on relevant input features) while disrupting irrelevant ones, successfully reducing attack success rates without hurting the model's normal performance.


ParaVul: A Parallel Large Language Model and Retrieval-Augmented Framework for Smart Contract Vulnerability Detection

Summary: ParaVul is a framework that uses LLMs (large language models, AI systems trained on huge amounts of text) combined with RAG (retrieval-augmented generation, where an AI pulls in external documents to answer questions) to detect vulnerabilities in smart contracts (self-executing programs on blockchain networks). The framework improves detection accuracy and reduces computational costs by using a new fine-tuning technique called SLoRA (Sparse Low-Rank Adaptation) and combining multiple detection methods through a verification module.


DiffHash: Text-Guided Targeted Attack via Diffusion Models Against Deep Hashing Image Retrieval

Summary: DiffHash is a new attack method that can fool deep hashing models (AI systems used to quickly search through large collections of images) by generating adversarial examples (slightly modified images that trick AI systems). Unlike older attacks that simply change individual pixels, DiffHash uses text descriptions from a Large Language Model to guide the creation of fake images that appear normal to humans but cause the hashing model to return wrong search results for a target image.


Decoupled Neural Audio Steganography for Adaptive Sender-Side Model Updates

Summary: This research addresses a security weakness in neural steganography (hiding secret messages inside audio files using AI networks), where sender and receiver models must stay perfectly synchronized, creating risks of information leakage. The researchers propose a decoupled framework based on the destruction-restoration principle, where embedding works through a destructive operation and recovery uses a separate neural network, allowing the sender to change their embedding network without breaking the receiver's ability to extract the hidden message.


Robust Malicious Network Traffic Detection Framework With Automated Drift Detection, Identification, and Adaptation

Summary: Network traffic patterns constantly change, causing traditional malicious traffic detection systems to become less effective over time, a problem called concept drift (when the patterns an AI learned on no longer match real-world data). Researchers developed Argus, a framework that automatically detects when traffic patterns shift, identifies new malicious patterns without human help, and continuously updates itself to maintain high detection accuracy even as attacks evolve.


‘Capitalism has to become more humane’: a Stanford economist on big tech, power hoarding and democracy

Summary: According to Stanford economist Mordecai Kurz, tech billionaires are concentrating technological power in a way that weakens democracy, similar to patterns seen during industrialization and the first Gilded Age. Kurz argues that tech moguls often see themselves as superior beings meant to reshape society, citing examples like Anthropic's CEO claiming AI could become a transcendent good while potentially causing mass unemployment.


The Boring Stuff is Dangerous Now

Summary: AI agents (autonomous programs that can perform tasks with minimal human direction) are becoming sophisticated enough to find and exploit obscure vulnerabilities (weaknesses in software), while at the same time developers are creating enormous amounts of AI-generated code that may contain bugs. This combination is forcing security teams to develop new defense strategies.


New image-based prompt injection attack targets multimodal AI models

Summary: Researchers have developed CrossMPI, an image-based prompt injection attack (tricking an AI by hiding instructions in its input) that uses nearly invisible changes to images to manipulate how multimodal AI systems (AI that processes both images and text) interpret user instructions without modifying the text itself. The attack successfully fooled multiple vision-language models (AI systems that understand both images and text) about 66% of the time by targeting the intermediate layers where visual and textual information are combined, posing growing security risks as enterprises increasingly adopt multimodal AI systems.


OpenAI and Dell partner to bring Codex to hybrid and on-premise enterprise environments

Summary: OpenAI and Dell Technologies are partnering to let businesses use Codex (an AI tool that writes and understands code) in their own private data centers and hybrid environments (networks that combine on-site systems with cloud services) rather than only in the cloud. This allows companies to keep sensitive data secure while using Codex across their existing tools and workflows for both coding tasks and broader business automation.

OpenAI
Codex
Dell Technologies
ChatGPT Enterprise
Dell AI Data Platform
Dell AI Factory


AI coding is fueling a secrets-sprawl crisis few CISOs are containing

Summary: AI-assisted coding is causing a rapid increase in leaked secrets (authentication credentials and API keys), with AI-related secrets exposed jumping 81% in 2025 alone, because developers prioritize speed and functionality over security reviews. When secrets are discovered, organizations should treat them as security incidents, immediately revoking or disabling the exposed credential, generating a new one, investigating system impact, performing cleanup, and hardening systems, followed by post-mortems to improve processes.

Solution: When a leaked secret is detected, organizations should: (1) activate their incident response process immediately; (2) revoke or disable the secret and generate a new one; (3) have the incident response team and R&D investigate the impact across systems and data; (4) perform cleanup and hardening; and (5) conduct post-mortems and implement necessary updates to systems or policies based on lessons learned. The source notes that the CISO office typically coordinates incidents while the R&D team owns actual revocation and cleanup.

Moltbook Supabase GitGuardian WithSecure Wiz


How Elon Musk and Sam Altman went from besties to bitter rivals

Summary: This article covers a legal dispute between Elon Musk and Sam Altman over OpenAI's conversion from a nonprofit to a for-profit company. Musk founded OpenAI in 2015 with Altman to prevent Google from monopolizing AI technology, but sued in 2024 claiming they violated their commitment to keep it nonprofit, while Altman argues no such commitment was ever made. The article focuses on their trial testimony rather than any technical AI issue or security concern.


Can Laws Stop Deepfakes? South Korea Aims to Find Out

Summary: South Korea is using its upcoming local elections as a test case to see whether laws can effectively stop deepfakes (fake videos or audio created using AI to manipulate what people look like or sound like). The country is examining whether regulation can reduce the spread of these manipulated media during elections.


Introducing Gemini Omni

Summary: Google has introduced Gemini Omni Flash, a new AI model that can generate and edit videos from text, images, audio, or video inputs combined together. The model uses reasoning about physics and real-world knowledge to create realistic videos and allows users to edit them through natural language conversation (giving text instructions rather than using traditional editing tools), with changes building on each other while maintaining consistency in characters, physics, and scene details.

Google
Gemini Omni
Gemini Omni Flash
Google AI
Gemini app
Google Flow
YouTube Shorts