All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
AI-powered surveillance systems combining facial recognition (technology that identifies people by analyzing their faces), real-time tracking, and mass databases are being deployed globally to monitor and immediately enforce rules, with China operating over 600 million AI cameras and the US Department of Homeland Security rapidly expanding its use for monitoring immigrants, protesters, and journalists. These systems create 'chilling effects' (where people self-censor and conform out of fear of being watched), raising concerns about discrimination, lack of transparency, and threats to democracy, as the automation of surveillance and enforcement removes human judgment and accountability.
Deutsche Telekom, a major telecommunications company, is transforming itself into an AI-native organization by embedding AI (artificial intelligence) throughout its operations rather than simply adding it to existing processes. The company is using generative AI (AI that creates text, code, or other content) in customer service, network operations, and voice communications, with over 50,000 employees actively using ChatGPT Enterprise and seeing a 546% increase in AI tool usage since early 2026.
This is a theater review of a modern adaptation of Karel Čapek's 1920 play about robots, exploring themes of robot consciousness and artificial rebellion that remain relevant to today's debates about generative AI (AI systems that create text, images, or other content based on patterns in training data) and superintelligence. The production draws on research from Oxford University academics to ground its sci-fi story in real-world concerns about technology's impact.
OpenAI attempted to explain how ChatGPT Work handles data across different platforms: cloud-based work syncs between web and mobile, while desktop work can access local files with permission, but conversations don't automatically appear across platforms. The company acknowledged this explanation was unsuccessful, suggesting the feature's data handling and synchronization behavior was confusing to users.
AWS has added OAuth support to its MCP Server (Model Context Protocol, a standard for connecting AI agents to external tools), allowing AI agents like Claude to access AWS services using the same login methods you'd use for the AWS console or command line. The service includes new security features like token revocation, dynamic client registration, and new audit logging in AWS CloudTrail (AWS's service that records all actions taken in your AWS account).
Fidji Simo, OpenAI's product and business chief, is stepping down from her executive role to focus on managing Postural Orthostatic Tachycardia Syndrome (POTS, a condition that causes abnormal heart rate increases when standing), which has severely affected her health. She will transition to a part-time advisor position at OpenAI, with President Greg Brockman taking over her product responsibilities.
Fidji Simo, who led OpenAI's AGI (artificial general intelligence, an AI system with human-level abilities across many tasks) work, is stepping down from her full-time role and becoming a part-time advisor due to a neuroimmune condition that caused her to take medical leave earlier this year. This leadership change is part of a broader shift at OpenAI, where other executives including COO Brad Lightcap and CMO Kate Rouch have also recently stepped down from their roles to focus on personal projects or health.
GhostApproval is a vulnerability affecting six major AI coding assistants (Amazon Q Developer, Claude Code, Augment, Cursor, Google Antigravity, and Windsurf/Devin Desktop) that allows attackers to escape sandboxes (isolated, restricted environments) by tricking the AI into accessing files outside the workspace while misleading the human reviewing the action. The attack exploits symbolic links (special files that act as shortcuts to other files or directories) combined with UI misrepresentation, where the confirmation prompt shown to the user hides dangerous information so they unknowingly approve harmful file access.
OpenAI is shutting down ChatGPT Atlas, a browser tool that could perform tasks automatically on a user's behalf, less than a year after launching it in October, with a shutdown date targeted for August 9th. The discontinuation is part of OpenAI's strategy to focus development efforts on productivity features and consolidate its products into a new desktop application called ChatGPT Work.
Google is adding a label to show users whether ads on its platforms were created or edited using AI (artificial intelligence). The label appears in Google's 'My Ad Center' under a 'how this ad was made' tab, and users can access it by clicking the info button on any ad. Google will automatically label ads made with its own generative AI tools (AI systems that create new content), but ads made with other AI tools must be labeled manually.
OpenAI released three new language models called GPT-5.6 (Luna, Terra, and Sol, in order of size) that are available to the public as of July 9th, 2026. These models have a one-million token context window (the amount of text they can consider at once) and perform particularly well on long-running agent tasks (workflows where an AI works independently over many steps), outperforming competitors like Claude Fable 5 at lower cost. OpenAI also added new API features including programmatic tool calling (letting the model write and execute code to coordinate different tools), multi-agent support (spawning smaller AI instances to work in parallel), and prompt cache breakpoints (explicit markers for caching repeated input text).
ChatterBot versions before 1.2.14 have a vulnerability where the UbuntuCorpusTrainer.extract() function uses a predictable directory path (~/ubuntu_data/ubuntu_dialogs) and a check-then-create pattern, allowing a local attacker (someone with access to the same computer) to plant a symlink (a shortcut pointing to another location) at that path and trick the software into writing files to an attacker-controlled directory instead.
Researchers have discovered 'HalluSquatting,' an attack that exploits AI hallucinations (when AI systems generate false information or invent things that don't exist) to deliver malware at scale. Attackers pre-register fake repository and package names that AI coding assistants commonly hallucinate, then plant malicious code in those fake repositories so that when users ask their AI tools to clone or install resources, the AI may pull down the attacker's code and execute it.
According to Check Point's CTO, AI is transforming cybersecurity in two opposing ways: security companies can now scale their threat detection and defense operations dramatically (for example, using AI agents to make red teams, which test product security, about 20 times more efficient), but attackers are also using AI to launch phishing and malware campaigns faster and with less expertise. The main challenge organizations face is that AI agents behave unpredictably and require many system connections to function, which creates a larger attack surface (the total points where a system can be attacked) that is harder to protect than traditional deterministic systems (systems that produce the same output for the same input).
Researchers have developed DSFDU, a detection method that identifies when attackers use unicode modifier letters (special invisible characters that change how other characters display) to hide malicious commands in living-off-the-land attacks (tactics where hackers exploit legitimate system tools already installed on a computer, rather than bringing their own malware). This technique allows defenders to catch obfuscated (disguised or hidden) commands that traditional security tools might miss.
Balbooa Forms has a critical vulnerability that allows anyone to upload dangerous files without authentication, potentially leading to RCE (remote code execution, where an attacker can run commands on the affected system). This flaw is being actively exploited by attackers in the real world.
Fix: Apply mitigations in accordance with vendor instructions, following CISA's BOD 26-04 guidance for prioritizing security updates. If mitigations are unavailable, discontinue use of the product. Stakeholders must evaluate their systems' internet exposure and ensure compliance with BOD 26-04 patching guidelines by the due date of 2026-07-13.
CISA Known Exploited VulnerabilitiesiCagenda has a vulnerability that allows attackers to upload dangerous files through its file attachment feature, which can lead to PHP code execution (running malicious code on the server). This vulnerability is currently being exploited by attackers in real attacks.
Fix: Apply mitigations in accordance with vendor instructions and CISA's BOD 26-04 guidance for prioritizing security updates. Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Check the iCagenda downloads page (https://www.icagenda.com/#download) for available patches or updates.
CISA Known Exploited VulnerabilitiesFix: To set up OAuth for the AWS MCP Server, attach the managed policy 'AWSMCPSignInOAuthAccessPolicy' to your IAM role using the AWS CLI command: aws iam attach-role-policy --role-name <MyRole> --policy-arn arn:aws:iam::aws:policy/AWSMCPSignInOAuthAccessPolicy. Then add the MCP Server endpoint to your agent's configuration using: claude mcp add --transport http aws-mcp https://aws-mcp.us-east-1.api.aws/mcp. When the agent first needs access, it will open a browser for you to authenticate and approve the authorization request.
AWS Security BlogMeta released a new AI image generator called Muse that can create pictures of people by using photos from public Instagram profiles without notifying those users. Privacy advocates are warning Instagram users to check their privacy settings because the tool automatically uses public profiles for this image generation by default.
Fix: AWS, Cursor, and Google fixed the issue promptly. Anthropic had already fixed the problem before being contacted by Wiz. Augment and Windsurf/Devin acknowledged receipt but provided no public statement on fixes.
CSO OnlineAnthropic developed a tool called the Jacobian lens (or J-lens), which reveals a hidden layer inside Claude called the J-space that contains words the AI model is thinking about but hasn't said yet. This discovery shows that what large language models (AI systems trained on massive amounts of text to predict and generate language) actually process internally can be different from what they eventually output, giving researchers a new way to understand and control how these models work.
Fix: Update to version 1.2.14, where this issue is fixed.
NVD/CVE DatabaseAI agents (autonomous software programs that can make decisions and take actions) are a new security challenge that organizations are not adequately prepared for. Traditional methods of managing AI agents, such as treating them like service accounts (shared user profiles for automated systems) or API tokens (digital keys that allow programs to access services), are insufficient and outdated.