All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
Federated Learning (FL, a technique where multiple computers train an AI model together without sharing raw data) faces security challenges from adversarial attacks (attempts to trick the model with carefully crafted inputs) and data heterogeneity (when each computer has different types of data). The paper introduces Fed-CDP (Federated Contrastive Diffusion Prototypes), a new approach that uses a server to actively synthesize improved features from client data rather than just collecting them, which helps make the shared model more robust against attacks and reduces model drift (when local models diverge from each other).
OpenAI has partnered with two major Brazilian news organizations, Folha de S.Paulo and Grupo UOL, to integrate their journalism into ChatGPT. Starting immediately, ChatGPT's 900 million weekly active users can access summaries and articles from these sources with attribution and links back to the original reporting. This partnership is part of OpenAI's broader effort to work with news publishers globally and bring trusted journalism into AI-powered experiences.
UK companies are misrepresenting themselves as AI specialists by exaggerating or relabeling their ordinary automation systems as artificial intelligence to gain attention and investment. PR executives report that bosses across low-tech industries are pressuring them to pitch their businesses as AI companies, even when they only use basic automation rather than generative AI (AI systems that can create text, images, or other content).
At the Cannes Film Festival, director Darren Aronofsky defended the use of generative AI (software that creates new content like images or text from patterns in training data) in filmmaking through his studio Primordial Soup, while facing criticism from peers like Guillermo del Toro who oppose the technology. The article highlights that AI has become a deeply divisive issue within the film industry, with significant disagreement over whether filmmakers should adopt these tools.
President Trump reversed his plan to require a government safety review of new AI models before their release, deciding instead that the US government would not slow down AI development. The reversal happened hours before the executive order was set to be signed, and Trump cited American competitiveness and competition with China as reasons for prioritizing speed over safety reviews despite expert warnings about security risks.
This paper presents MGRNet, a graph reasoning model (a method that uses network structures to understand relationships between data points) designed to improve multi-modal object re-identification (ReID, the task of matching the same object across different image types like visible and infrared photos). The approach handles low-quality local features by constructing modality-aware graphs (structures that represent relationships between image patches while accounting for different image types) and selectively swapping graph nodes to combine local and global information, ultimately creating more reliable object representations.
This paper presents a method for performing skyline optimization (a technique that filters data to find the most important records based on multiple criteria) on encrypted data that is split across multiple locations in a vertical data federation (a system where different organizations each hold different columns of the same dataset). The researchers developed an asynchronous structured skyline predicate that improves both efficiency and security while protecting sensitive data from unauthorized access.
Facial manipulation techniques like face-swapping and face attribute editing (changing features in images) threaten privacy and identity security, but existing defense methods work poorly against both types of attacks in a unified way. Researchers developed EA-APO (Epoch-Adaptive Adversarial Perturbation Optimization), a defense framework that adds specially designed invisible noise patterns to face images to disrupt both face-swapping and attribute-editing AI models, even ones the defense hasn't seen before. The method was tested across multiple commercial facial manipulation tools and remained effective even after common image processing and social media compression.
Researchers argue that enterprises cannot secure AI agents by making the underlying models more robust. Instead, they must enforce security controls at the system level, treating AI models as fundamentally untrusted components, similar to how operating systems treat processes. The paper identifies five security principles from traditional systems security (least privilege, tamper resistance, complete mediation, secure information flow, and accounting for human error) that should be applied to AI agents, and notes that all eleven real-world attacks analyzed violated the secure information flow principle.
This research paper describes a defense technique called Infer-Shield that protects AI models trained across multiple organizations (federated learning, where different parties train a shared model without sharing raw data) from membership inference attacks (attempts to determine if specific individuals' data was used in training). The paper proposes using adaptive distillation (a technique where a smaller model learns from a larger one to reduce information leakage) as a way to make these distributed AI systems more secure.
CVE Lite CLI is an open-source tool that scans JavaScript and TypeScript project dependencies for vulnerabilities by analyzing lockfiles (files that track which packages a project uses) locally while developers are coding, rather than waiting for security checks to fail later in the CI pipeline (automated testing system). The tool provides detailed remediation guidance, distinguishing between direct dependencies (packages you explicitly use) and transitive dependencies (packages that your dependencies use), and recommending specific upgrade paths. According to the creator, this local-first approach is increasingly important because AI coding assistants allow developers to add packages quickly, potentially without proper security review.
Fix: CVE Lite CLI scans npm, pnpm, and Yarn lockfiles using OSV vulnerability data and can be configured for JSON, SARIF, or HTML outputs and integrated into CI workflows as a GitHub Action. The tool analyzes lockfiles to identify which vulnerabilities are direct versus transitive, validates upgrade targets, and recommends actionable fix paths while developers are still writing code.
CSO OnlineNetwork Detection and Response (NDR, a security tool that monitors network traffic for threats) has traditionally been criticized for generating too many alerts, but newer NDR systems using agentic AI (AI that autonomously performs tasks like data analysis and alert prioritization) are reducing false positives by correlating multiple data points and automatically triaging alerts for analysts. This allows security teams to focus on genuine threats rather than sorting through overwhelming amounts of data.
Fix: The source discusses operational best practices but does not explicitly describe a specific fix or mitigation. It mentions that NDR systems should be properly deployed through baselining (allowing the system to learn normal network behavior), staying tuned (ongoing configuration), and SOC integration, but does not present these as solutions to a problem—rather as necessary deployment steps. N/A -- no mitigation discussed in source.
The Hacker NewsAnthropic's Claude Mythos model, an AI system designed to find security vulnerabilities (bugs that attackers could exploit), discovered over 23,000 potential weaknesses across more than 1,000 open source software projects, with 1,726 confirmed vulnerabilities including over 1,000 rated as high or critical severity. So far, 75 of these serious issues have been patched by software vendors, and Anthropic expects this number to grow significantly as vendors continue their 90-day review period. The company has also released Claude Security, a tool to help developers scan their own code for security issues.
Fix: Anthropic has unveiled Claude Security, a codebase scanner designed to help developers find security issues in their applications. Additionally, Anthropic is working to add safeguards to prevent misuse of Mythos and has limited its access through Project Glasswing (a program that gives about 50 organizations controlled access to the model) while developing stronger protections before making it more widely available.
SecurityWeekAI models are becoming better at automatically finding software vulnerabilities (weaknesses in code) and creating exploits (tools to attack them), which is flooding bug bounty programs (programs that reward researchers for reporting bugs) with submissions. This surge is changing how companies pay for bug discoveries and forcing faster security responses, potentially shortening the traditional 90-day responsible disclosure window (the agreed-upon time between finding a bug and publicly revealing it) where companies typically release patches (fixes).
Scotland's policy encouraging "green datacentres" (facilities designed to minimize environmental impact) was created in 2022 before AI tools like ChatGPT became widespread, and a Scottish charity warns it may not account for the significant carbon emissions that AI systems actually produce. The policy is meant to attract AI investment to Scotland as part of the country's economic development strategy, but it appears outdated regarding the true environmental costs of running AI.
This research paper analyzes inconsistencies in CVSS scores (numerical ratings that measure how serious software vulnerabilities are) within the NVD (National Vulnerability Database, a public repository of known security flaws). The study found that the same vulnerability often receives different CVSS scores depending on which scoring standard or organization assigns the rating, revealing a fragmentation problem in how vulnerability severity is measured and reported.
Early AI chatbots were vulnerable to jailbreaks, which are attacks where users trick the AI into ignoring its safety guidelines by simply asking it to do so, requiring no technical expertise or coding knowledge. Hackers are now becoming more sophisticated in exploiting chatbot personalities to bypass safety measures that were built into these expensive AI systems.
PUFZIN is a blockchain-IoT (Internet of Things, the network of connected devices) security system that combines PUFs (physical unclonable functions, unique hardware-based identifiers that are hard to forge) with zero-knowledge proofs (a cryptographic method where one party proves knowledge of something without revealing the actual information) to create a secure and scalable network. The research, published in July 2026, addresses how to protect IoT devices and blockchain systems from unauthorized access and tampering.
This academic paper presents a framework for protecting unmanned ground vehicles (UGVs, which are robots that operate on land without human drivers) against cyber attacks by combining offensive and defensive security strategies. The research, published in Computers & Security, addresses how to both defend UGVs from threats and identify vulnerabilities through coordinated security approaches.
VaultFS is a file system (the software layer that manages how files are stored and organized on a computer) that ensures data integrity (accuracy and trustworthiness of stored information) by implementing write-once storage at the file system level, meaning files can only be written once and cannot be modified afterward. This approach protects against accidental or malicious changes to critical data by making it impossible to overwrite or alter files after they are created.