All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
This research presents LBRS, a new cryptographic method for secure anonymous voting that uses lattice-based mathematics (a post-quantum approach resistant to attacks from powerful quantum computers). The method combines blind ring signatures (a technique that hides both the voter's identity and the vote itself while allowing verification) with voting systems, solving problems with previous approaches that either were vulnerable to quantum computers or produced very large signatures that would be impractical for widespread use.
Anthropic, an AI company founded about three years ago, topped CNBC's 2026 Disruptor 50 list due to its rapid growth, enterprise focus, and emphasis on safety through constitutional AI (a method designed to make AI systems align with human values). The company's CEO reports 80x revenue growth in the first quarter, and its Claude Code product has gained trust among businesses for handling complex tasks reliably.
Google's Gemini AI is being integrated into many Google apps and services at an increasing pace, similar to how Microsoft aggressively added Copilot to Windows 11. Users are experiencing fatigue from AI features appearing everywhere in their software, which is causing frustration.
MLflow version 3.9.0 has a vulnerability in its Assistant feature where /ajax-api endpoints don't properly validate the origin (the source website making a request). This allows an attacker on a malicious webpage to send cross-origin requests (requests from a different domain) to trick the MLflow Assistant running on a victim's computer, bypass security restrictions meant to only allow local access, and execute arbitrary commands (run any code they choose) through the Claude Code sub-agent.
The conflict between the U.S. and Iran is disrupting the supply chains that produce computer chips, which are essential for AI systems. Key materials like helium (a gas used in semiconductor manufacturing), bromine, and aluminum are becoming harder to get and more expensive, affecting companies like TSMC (the main manufacturer of Nvidia chips) and other chipmakers. Without a resolution to the conflict, these supply chain problems and rising costs could worsen throughout 2025 and impact the AI industry's growth.
Between November 2025 and February 2026, large language models (LLMs, AI systems trained on vast text data) underwent rapid advancement, with the 'best' model changing hands multiple times among major providers. The most significant development was that coding agents (AI systems that write software code) improved dramatically from often-working to mostly-working, becoming reliable enough for daily professional use after months of reinforcement learning from verifiable rewards (a technique where AI systems learn by receiving feedback on whether their outputs are correct). This progress sparked widespread experimentation and led to the emergence of 'Claws' (personal AI assistants), with OpenClaw becoming particularly popular by February.
Elon Musk lost his lawsuit against OpenAI because a jury found he sued too late under the statute of limitations (time limits for filing legal claims), not because his claims lacked merit. Musk had alleged that OpenAI's leaders broke promises to keep the company nonprofit and unfairly enriched themselves, but the court ruled he should have filed his case by 2021-2022 based on when he should have discovered the alleged wrongdoing, not when he actually sued in 2024.
A jury in Oakland, California ruled that Sam Altman and OpenAI did not break any laws or contracts with Elon Musk, rejecting his claims that they enriched themselves unfairly. This court victory removes legal obstacles to OpenAI's plans for continued growth and development.
A jury ruled that OpenAI CEO Sam Altman and president Greg Brockman are not liable for Elon Musk's claims that they broke a founding contract and unfairly profited from the company. This verdict ends a legal dispute between Musk and OpenAI's leadership over the terms under which OpenAI was originally established.
Security vulnerabilities called 'Claw Chain' were found in OpenClaw, a framework for building AI agents (programs that can perform tasks autonomously). These vulnerabilities allowed attackers to steal login credentials, gain higher-level access to systems, and stay hidden in compromised systems for extended periods. The vulnerabilities have now been patched.
MLflow versions before 3.11.0 create temporary directories with overly permissive access permissions (world-writable or group-writable), allowing local attackers to modify model files and execute arbitrary code when those files are loaded. This is especially dangerous in shared environments like Databricks where multiple users access the same network storage.
Elon Musk has lost several recent lawsuits and settlements, including a high-profile case against OpenAI and its co-founder Sam Altman, but legal experts believe he is unlikely to stop filing lawsuits or fighting in court because his enormous wealth makes any fines or costs insignificant to him. Despite these losses, Musk continues to pursue aggressive legal battles and public disputes, demonstrating a willingness to take risks that sets him apart from most business leaders.
NiceGUI has a vulnerability in two routes (resource and ESM module routes) that serve files without authentication. If a request tries to access a directory instead of a file through these routes, it causes an unhandled error that writes a large traceback (around 100 lines) to the server log. An attacker can repeatedly trigger this to fill up disk space, overload logging systems, and create false alarms in monitoring without needing any special access.
Mobile crowdsensing (MCS, a system where mobile users contribute data to solve problems) needs ways to verify that the collected data is truthful while protecting people's privacy. This paper proposes two new truth discovery schemes: RsAnonTD for systems with a stable group of users, and McFeKDeTD for systems where workers join and leave dynamically. Both schemes use cryptographic techniques (ring signature, perturbation, and functional encryption with zero-knowledge proofs, which are mathematical ways to verify information without revealing details) to keep data private and defend against attacks like data forgery and tampering, while also reducing computational overhead by up to 98% compared to existing approaches.
Fix: The paper proposes two fault-tolerant and privacy-preserving truth discovery solutions: (1) RsAnonTD, which integrates ring signature with the perturbation technique for stable user groups, and (2) McFeKDeTD, a multi-client inner product functional encryption scheme with a lightweight zero-knowledge proof protocol, designed for systems with dynamically changing workers. Both schemes are designed to preserve privacy of sensory data, weights, and estimated truths while resisting active attacks.
IEEE Xplore (Security & AI Journals)Diffusion models (AI systems that generate images from text descriptions) can be misused to create unauthorized portraits or copies of artistic styles through personalization, which threatens privacy and copyright. PersGuard is a new defense framework that embeds protective backdoors (hidden mechanisms) into these models before release, so that if someone tries to personalize the model with protected images, it generates predetermined protective outputs instead, while still working normally for unprotected images.
Fix: PersGuard embeds protective backdoors into pre-trained diffusion models before release. The framework uses three optimization objectives: a backdoor behavior loss to activate protection, a prior preservation loss to maintain normal generation capabilities, and a novel backdoor retention loss designed to ensure the backdoor remains robust when users fine-tune (customize) the model on protected images.
IEEE Xplore (Security & AI Journals)SilentNoise addresses a problem in differential privacy (DP, a method for analyzing data while protecting individual privacy), which traditionally relies on one trusted party holding all sensitive data, creating a security risk. The researchers propose a decentralized system using secure multiparty computation (MPC, where multiple parties jointly compute results without fully revealing their individual data) that allows noise (random data added for privacy) to be generated securely even when some parties act maliciously, improving both efficiency and accuracy compared to previous approaches.
Garland is a system for recommendation engines that use graph neural networks (GNNs, which are AI models that learn patterns from interconnected user-item relationships) in federated settings, where data stays on users' devices instead of being sent to one central server. The system addresses a key problem: untrusted servers that help expand users' local data can spy on both item information and user relationships, so Garland uses secret-shared shuffle (a cryptographic technique that mixes data while keeping it encrypted) to protect privacy while still catching if a malicious server tries to cheat.
This newsletter covers several AI industry developments, including Elon Musk losing his lawsuit against OpenAI (a company creating large language models, which are AI systems trained on large amounts of text data) because he sued too late under statutes of limitations rather than on the merits of whether OpenAI violated its nonprofit mission. Other stories include Anduril and Meta developing augmented-reality smart glasses (wearable devices that overlay digital information on the physical world) for military use with eye-tracking controls, and Google preparing to showcase its AI capabilities at its I/O developer conference while facing competition from other AI companies.
OpenAI is improving how people can verify where AI-generated images and audio come from by using multiple approaches: adding C2PA conformance (a cross-industry standard using metadata and cryptographic signatures to attach source information to content), partnering with Google to embed invisible watermarks called SynthID into images, and releasing a public tool to verify if images came from OpenAI. These layered approaches help protect provenance information (details about content's origin and creation) even when it's edited, downloaded, or shared across different platforms.
Fix: The source describes OpenAI's implemented approaches rather than fixes to a problem. OpenAI has: (1) become C2PA Conforming, which gives platforms a 'trusted way to read, preserve, and pass along the provenance information' attached to content; (2) incorporated 'SynthID embeds an invisible watermarking layer that complements C2PA metadata-based approaches,' starting with images from ChatGPT, Codex, or the OpenAI API; and (3) is 'previewing a' public verification tool for users to detect if images came from OpenAI. The source states these approaches are designed to work together: 'C2PA helps content carry detailed context; SynthID helps preserve a signal when metadata does not survive.'
OpenAI BlogFix: Update to MLflow version 3.10.0, where this issue is resolved.
NVD/CVE DatabaseAnthropic, an AI company, is suing the U.S. Department of Defense in federal court after the DOD labeled it a "supply chain risk" (a designation suggesting it threatens national security), which requires defense contractors to stop using Anthropic's Claude AI models in military work. The court judges questioned whether the DOD properly justified this blacklisting, with one judge calling it a "spectacular overreach," while the DOD argued it needed to act quickly to notify agencies about the risk.
Fix: TSMC's strategy involves building inventory buffers (stockpiles of materials), diversifying sourcing (buying from multiple suppliers), and continuously developing multi-source supply solutions to build a well-diversified global supplier base and improve the local supply chain. The source also notes that chip companies generally understand they need to diversify to be less dependent on a specific region.
CNBC TechnologyFix: The vulnerabilities have been patched. Users should update to the patched version of OpenClaw.
Dark ReadingFix: Update MLflow to version 3.11.0 or later.
NVD/CVE DatabaseFix: The source mentions three workarounds for deployments unable to upgrade immediately: (1) Place NiceGUI behind a reverse proxy that rejects requests where the path after `/_nicegui/<version>/esm/<key>/` or `/_nicegui/<version>/resources/<key>/` is empty. (2) Rate-limit the `/_nicegui/` prefix at the proxy. (3) Configure log rotation aggressively for the affected service. For a permanent fix, upgrading NiceGUI is recommended, though no specific patched version is mentioned in the source.
GitHub Advisory Database