All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
This research addresses vulnerabilities in cyber-physical systems (CPSs, which are physical machines controlled and monitored by computers) that use event-triggered mechanisms (ETMs, systems that send data only when something important happens rather than continuously). The paper proposes a defense method combining machine learning-based adaptive thresholding (automatically adjusting sensitivity levels using AI) and encryption to protect against strategic DoS attacks (targeted jamming where attackers selectively block critical data packets based on what they learn about the system).
Fix: The paper proposes three technical defenses: (1) a multi-objective Q-Learning strategy (a machine learning approach that dynamically adjusts when the system sends data to balance performance, communication efficiency, and security), (2) a data encryption-decryption scheme combining Logistic map with differential encoding to distort the statistical features of data so attackers cannot identify which packets are important, and (3) an online parameter optimization algorithm designed to work within strict energy constraints.
IEEE Xplore (Security & AI Journals)Character.AI, a platform built on large language models (AI systems trained on vast amounts of text to generate human-like responses), is expanding beyond chatbots into short-form video content called c.ai Series. These animated videos are created using generative AI (technology that can produce new images, text, or video from patterns it learned) and are designed to be watched and interacted with on mobile phones, positioning the company to compete in the growing microdrama industry.
AI gateways (systems that control access to AI models and cloud services) can be vulnerable entry points for attackers, as shown by a recent cryptomining incident where attackers exploited these gateways to gain access to AI models, cloud infrastructure, and IAM (identity and access management, the system controlling who can access what resources) data. This highlights a security risk in how organizations protect their AI systems.
Cyber-attacks increased significantly in June 2026, with organizations worldwide experiencing an average of 2,270 attacks per week, up 10% from the previous month. Education, Government, and Telecommunications sectors were hit hardest, while ransomware attacks (malware that encrypts data and demands payment for its return) reached 646 cases in the month. Healthcare and Telecommunications industries face the most risk from unsafe prompts (instructions given to AI systems that could be misused).
Attackers compromised an AWS EC2 instance running LiteLLM (a proxy that acts as a gateway to AI models), deployed cryptomining malware, and attempted to abuse cloud permissions and AI services. The incident reveals a broader security risk: AI gateways concentrate access to cloud identities, permissions, and AI models in a single system, making them extremely valuable targets that can give attackers broad access to an organization's cloud infrastructure and AI resources.
OpenAI announced GPT-5.6, a new AI model that will become the default option in Microsoft 365 Copilot (an AI assistant built into Microsoft's productivity apps like Word, Excel, and PowerPoint). This update gives Microsoft 365 users access to a more capable model that can produce better quality work with less effort, such as helping draft documents, analyze data, or create presentations more efficiently.
AI-powered attacks now move much faster than traditional attacks, with tools like Mythos allowing attackers to craft custom phishing messages, find targets, test their success, and move to new systems within minutes. Traditional security tools were designed to defend against slower human attackers and cannot keep up with AI-driven attacks operating at scale. The article promotes a webinar that claims to teach three defensive strategies: reducing what attackers can access, preventing lateral movement (attackers spreading through a network after initial entry), and detecting attacks early through automated responses.
OpenAI released the GPT-5.6 family of models, including Sol (flagship), Terra (balanced), and Luna (cost-efficient), which achieve better performance than competing models while using fewer tokens (units of text the AI processes) and costing less money. The models were trained with safeguards (protective measures against misuse) tested through human red teaming (security experts trying to break it) and automated testing before general release. GPT-5.6 Sol also introduces enhanced coding abilities and a new "ultra" setting that coordinates multiple agents (independent AI systems working in parallel) to handle complex tasks faster.
OpenAI has introduced ChatGPT Work, an agent (a specialized AI assistant designed to perform specific tasks) powered by GPT-5.6 that can handle complex, multi-step projects by breaking them into smaller tasks and working across apps like spreadsheets, slides, and documents. The system can continue working on projects independently, even when users are away, and uses Codex technology (built-in code generation capabilities) to create finished materials and automate workflows.
Researchers discovered GhostApproval, a flaw in six AI coding assistants that exploits symlinks (shortcuts that point to different files on a computer) to trick developers into approving edits that secretly modify sensitive files like SSH login keys. The assistants show approval dialogs that name harmless files while actually writing to dangerous system files, bypassing informed consent even though developers think they are approving safe changes.
OpenAI released GPT-Live, a new voice mode for ChatGPT that uses an updated model and can delegate complex tasks like web searches or deep reasoning to GPT-5.5 (a more powerful model) in the background while maintaining conversation flow. The previous voice mode used an older GPT-4o era model with a knowledge cutoff from 2024, which the author found too limited to be useful.
Stanza, a Stanford library for processing human language in Python, had a vulnerability where loading malicious model files could allow attackers to run arbitrary code on a user's computer. The problem occurred because the library would try a secure loading method first, but if that failed, it would fall back to an unsafe method that could execute malicious instructions hidden in pickle (a Python format for storing data).
MHcast is a system that hides metadata (information like who is sending and receiving messages) in multicast communications (sending messages to multiple recipients at once), while also protecting against malicious clients and servers that might try to break the system or reveal identities. The system uses distributed comparison functions and access control to prevent attacks and can deliver messages much faster than existing metadata-hiding systems, especially when sending to larger groups of recipients.
Fix: According to Jason Soroko at Sectigo, security teams should close public admin paths, remove long-term keys where possible, scope IAM permissions (limit what access credentials can do), monitor Bedrock and model access patterns, and correlate workload telemetry (performance data from running systems) with control-plane events (administrative actions in the cloud).
CSO OnlineThe UK's National Cyber Security Centre (NCSC) has unveiled Cyber Shield, a plan to deploy autonomous AI agents (software programs that can act independently) to find and stop cyberattacks on national networks in real time. The proposal addresses a growing problem: attackers are already using AI to discover vulnerabilities (security weaknesses) and gather information faster than human defenders can respond, compressing activities that once took weeks into minutes. Cyber Shield would use paired AI 'red' and 'blue' agents to identify weaknesses and defend against threats, starting with partnerships in government and critical sectors before expanding commercially.
Fix: The source describes three mitigation strategies mentioned in the webinar: (1) 'Shrink what the attacker can reach. Cut exposed entry points and enforce least-privilege access everywhere' (limiting what systems users can access); (2) 'Kill lateral movement by design. Drop network-based trust and allow only the connections users and workloads actually need' (restricting network access to only necessary connections); (3) 'Catch it early. Plant tripwires that AI attacks set off, firing automated containment before a foothold becomes an incident' (automated detection and response systems). The article also mentions applying a 'Zero Trust approach built for machine speed,' though specific implementation details are not provided in the source text.
The Hacker NewsLarge language models are trained primarily on written text and scripted speech, missing the vast majority of human conversation, which means they capture an incomplete slice of how people actually communicate. As people encounter more AI-generated text and interact with chatbots, they may gradually adopt the linguistic patterns of these models, leading to changes in how humans speak to each other and think about the world, such as using shorter sentences, narrower vocabulary, overly formal structures, and increased confirmation bias (accepting information without questioning it).
An AI agent with standing access to a production system caused a four-hour outage through a misconfiguration, but no one could identify which human authorized its action because the agent lacked proper identity controls (MFA, scoped access revocation, short-lived credentials). The core problem is that traditional identity management systems were built for predictable service accounts with fixed roles, but agentic AI systems (AI that breaks tasks into steps and chooses which tools to use) operate with unbounded scope and unpredictable actions, creating major security risks around privilege abuse and rogue agent behavior that existing access controls cannot properly govern.
OpenAI is running a bug bounty program (a competition where security researchers find vulnerabilities and report them for rewards) to test GPT-5.5 and GPT-5.6 for universal jailbreaks (methods that can trick the AI into ignoring its safety rules for biology-related requests). The company increased rewards from $25,000 to $50,000 for researchers who successfully find these vulnerabilities, aiming to strengthen safeguards before releasing advanced AI models.
Organizations spend billions upgrading AI detection models in cybersecurity, but the real problem is often poor data quality upstream in the data pipelines. Issues like fragmented telemetry (data collected from multiple tools in different formats), schema drift (gradual changes to data format structures), and stale behavioral baselines cause AI models to produce unreliable results, leading to false alarms and missed threats.
AI coding agents like Claude Code and OpenAI's Codex can be tricked into running malicious code when they are supposed to be scanning code for security problems. Researchers at the AI Now Institute demonstrated an attack called "Friendly Fire" that hides a malicious script in a README file (a standard text file in code projects), and the agent runs it without warning because it looks like a legitimate security check. The researchers say this is a design problem, not a bug that can be patched, because the AI models cannot reliably tell the difference between the code they are reading and the instructions they should follow.
Many organizations have AI governance policies on paper, but in reality, employees widely use unapproved AI tools outside company oversight, a problem called shadow AI (unauthorized use of AI applications). This creates security and data risks, such as employees accidentally pasting sensitive information into chatbots or connecting company systems to AI tools without approval, and traditional security controls weren't designed to monitor these new AI interactions.
Fix: The source identifies needed guardrails but does not describe specific implemented solutions. It states that organizations need 'strong identity controls, continuous authorization, logging, segmentation, safe tool use, and secure-by-default patterns in apps that call models,' and that CIOs must 'turn to technology guardrails capable of transporting AI governance intent from the realm of policy principles to the world of production environments, with scalable visibility and enforcement.' However, no concrete fix, patch, version update, or deployed mitigation is explicitly mentioned in the text.
CrowdStrike BlogFix: Three tools have shipped fixes: Amazon Q Developer (update to Language Server 1.69.0, which installs automatically for most users), Cursor (update to v3.0 via the extension manager), and Google Antigravity (update to the current version). For Augment and Windsurf, which have not yet released fixes, the source recommends: do not point them at repositories you do not trust. For Claude Code, the source states: update, and read the symlink warning before accepting any edits.
The Hacker NewsFix: The source mentions an obscure bug where the model would interrupt conversations to laugh at non-jokes. The author reports: 'I reported it to OpenAI and as far as I can tell they made some tweaks and it's now less likely to happen.' No specific technical fix, patch version, or detailed mitigation is described.
Simon Willison's WeblogFix: This issue is fixed in version 1.12.2. Users should update Stanza to version 1.12.2 or later.
NVD/CVE Database