aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDatasetFor devs
Subscribe
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

Browse All

All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.

to
Export CSV
9705 items

Lattice-Based Blind Ring Signature With Applications to Anonymous Voting Systems

inforesearchPeer-Reviewed
security
May 19, 2026

This research presents LBRS, a new cryptographic method for secure anonymous voting that uses lattice-based mathematics (a post-quantum approach resistant to attacks from powerful quantum computers). The method combines blind ring signatures (a technique that hides both the voter's identity and the vote itself while allowing verification) with voting systems, solving problems with previous approaches that either were vulnerable to quantum computers or produced very large signatures that would be impractical for widespread use.

IEEE Xplore (Security & AI Journals)

Lightweight Privacy-Preserving and Fault-Tolerant Truth Discovery for Mobile Crowdsensing Systems

inforesearchPeer-Reviewed
security

PersGuard: Preventing Malicious Personalization in Text-to-Image Diffusion Models via Model Backdoors

inforesearchPeer-Reviewed
security

SilentNoise: Non-Interactive Noise Generation for Differential Privacy With Malicious Security

inforesearchPeer-Reviewed
research

Garland: Graph Neural Network-Based Federated Recommendation With Malicious Security via Secret-Shared Shuffle

inforesearchPeer-Reviewed
research

The Download: Musk v. Altman, smart glasses for warfare, and Google I/O

infonews
industrypolicy

2026 CNBC Disruptor 50 list: Why Anthropic was No. 1 in this year's rankings

infonews
industry
May 19, 2026

Anthropic, an AI company founded about three years ago, topped CNBC's 2026 Disruptor 50 list due to its rapid growth, enterprise focus, and emphasis on safety through constitutional AI (a method designed to make AI systems align with human values). The company's CEO reports 80x revenue growth in the first quarter, and its Claude Code product has gained trust among businesses for handling complex tasks reliably.

Advancing content provenance for a safer, more transparent AI ecosystem

infonews
safetypolicy

Gemini is in danger of going full Copilot

infonews
industry
May 19, 2026

Google's Gemini AI is being integrated into many Google apps and services at an increasing pace, similar to how Microsoft aggressively added Copilot to Windows 11. Users are experiencing fatigue from AI features appearing everywhere in their software, which is causing frustration.

CVE-2026-2611: In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.

criticalvulnerability
security
May 19, 2026
CVE-2026-2611

MLflow version 3.9.0 has a vulnerability in its Assistant feature where /ajax-api endpoints don't properly validate the origin (the source website making a request). This allows an attacker on a malicious webpage to send cross-origin requests (requests from a different domain) to trick the MLflow Assistant running on a victim's computer, bypass security restrictions meant to only allow local access, and execute arbitrary commands (run any code they choose) through the Claude Code sub-agent.

Anthropic and U.S. government to face off in DC court over blacklisting of AI company

inforegulatory
policyindustry

The Iran war is exposing weak spots in the AI supply chain

infonews
industry
May 19, 2026

The conflict between the U.S. and Iran is disrupting the supply chains that produce computer chips, which are essential for AI systems. Key materials like helium (a gas used in semiconductor manufacturing), bromine, and aluminum are becoming harder to get and more expensive, affecting companies like TSMC (the main manufacturer of Nvidia chips) and other chipmakers. Without a resolution to the conflict, these supply chain problems and rising costs could worsen throughout 2025 and impact the AI industry's growth.

The last six months in LLMs in five minutes

infonews
industry
May 18, 2026

Between November 2025 and February 2026, large language models (LLMs, AI systems trained on vast text data) underwent rapid advancement, with the 'best' model changing hands multiple times among major providers. The most significant development was that coding agents (AI systems that write software code) improved dramatically from often-working to mostly-working, becoming reliable enough for daily professional use after months of reinforcement learning from verifiable rewards (a technique where AI systems learn by receiving feedback on whether their outputs are correct). This progress sparked widespread experimentation and led to the emergence of 'Claws' (personal AI assistants), with OpenClaw becoming particularly popular by February.

Here’s why Elon Musk lost his suit against OpenAI

infonews
policy
May 18, 2026

Elon Musk lost his lawsuit against OpenAI because a jury found he sued too late under the statute of limitations (time limits for filing legal claims), not because his claims lacked merit. Musk had alleged that OpenAI's leaders broke promises to keep the company nonprofit and unfairly enriched themselves, but the court ruled he should have filed his case by 2021-2022 based on when he should have discovered the alleged wrongdoing, not when he actually sued in 2024.

How Sam Altman’s victory over Elon Musk clears way for OpenAI’s trillion-dollar ambitions

infonews
policy
May 18, 2026

A jury in Oakland, California ruled that Sam Altman and OpenAI did not break any laws or contracts with Elon Musk, rejecting his claims that they enriched themselves unfairly. This court victory removes legal obstacles to OpenAI's plans for continued growth and development.

Jury hands victory to Sam Altman and OpenAI in battle with Elon Musk

infonews
policy
May 18, 2026

A jury ruled that OpenAI CEO Sam Altman and president Greg Brockman are not liable for Elon Musk's claims that they broke a founding contract and unfairly profited from the company. This verdict ends a legal dispute between Musk and OpenAI's leadership over the terms under which OpenAI was originally established.

'Claw Chain' Vulnerabilities Threaten OpenClaw Deployments

highnews
security
May 18, 2026

Security vulnerabilities called 'Claw Chain' were found in OpenClaw, a framework for building AI agents (programs that can perform tasks autonomously). These vulnerabilities allowed attackers to steal login credentials, gain higher-level access to systems, and stay hidden in compromised systems for extended periods. The vulnerabilities have now been patched.

CVE-2026-4137: In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` cr

criticalvulnerability
security
May 18, 2026
CVE-2026-4137

MLflow versions before 3.11.0 create temporary directories with overly permissive access permissions (world-writable or group-writable), allowing local attackers to modify model files and execute arbitrary code when those files are loaded. This is especially dangerous in shared environments like Databricks where multiple users access the same network storage.

Elon Musk just lost another lawsuit. Will he keep fighting?

infonews
industry
May 18, 2026

Elon Musk has lost several recent lawsuits and settlements, including a high-profile case against OpenAI and its co-founder Sam Altman, but legal experts believe he is unlikely to stop filing lawsuits or fighting in court because his enormous wealth makes any fines or costs insignificant to him. Despite these losses, Musk continues to pursue aggressive legal battles and public disputes, demonstrating a willingness to take risks that sets him apart from most business leaders.

GHSA-pq7c-x8g4-rvp6: NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

mediumvulnerability
security
May 18, 2026
CVE-2026-45554

NiceGUI has a vulnerability in two routes (resource and ESM module routes) that serve files without authentication. If a request tries to access a directory instead of a file through these routes, it causes an unhandled error that writes a large traceback (around 100 lines) to the server log. An attacker can repeatedly trigger this to fill up disk space, overload logging systems, and create false alarms in monitoring without needing any special access.

Previous221 / 486Next
May 19, 2026

Mobile crowdsensing (MCS, a system where mobile users contribute data to solve problems) needs ways to verify that the collected data is truthful while protecting people's privacy. This paper proposes two new truth discovery schemes: RsAnonTD for systems with a stable group of users, and McFeKDeTD for systems where workers join and leave dynamically. Both schemes use cryptographic techniques (ring signature, perturbation, and functional encryption with zero-knowledge proofs, which are mathematical ways to verify information without revealing details) to keep data private and defend against attacks like data forgery and tampering, while also reducing computational overhead by up to 98% compared to existing approaches.

Fix: The paper proposes two fault-tolerant and privacy-preserving truth discovery solutions: (1) RsAnonTD, which integrates ring signature with the perturbation technique for stable user groups, and (2) McFeKDeTD, a multi-client inner product functional encryption scheme with a lightweight zero-knowledge proof protocol, designed for systems with dynamically changing workers. Both schemes are designed to preserve privacy of sensory data, weights, and estimated truths while resisting active attacks.

IEEE Xplore (Security & AI Journals)
research
May 19, 2026

Diffusion models (AI systems that generate images from text descriptions) can be misused to create unauthorized portraits or copies of artistic styles through personalization, which threatens privacy and copyright. PersGuard is a new defense framework that embeds protective backdoors (hidden mechanisms) into these models before release, so that if someone tries to personalize the model with protected images, it generates predetermined protective outputs instead, while still working normally for unprotected images.

Fix: PersGuard embeds protective backdoors into pre-trained diffusion models before release. The framework uses three optimization objectives: a backdoor behavior loss to activate protection, a prior preservation loss to maintain normal generation capabilities, and a novel backdoor retention loss designed to ensure the backdoor remains robust when users fine-tune (customize) the model on protected images.

IEEE Xplore (Security & AI Journals)
security
May 19, 2026

SilentNoise addresses a problem in differential privacy (DP, a method for analyzing data while protecting individual privacy), which traditionally relies on one trusted party holding all sensitive data, creating a security risk. The researchers propose a decentralized system using secure multiparty computation (MPC, where multiple parties jointly compute results without fully revealing their individual data) that allows noise (random data added for privacy) to be generated securely even when some parties act maliciously, improving both efficiency and accuracy compared to previous approaches.

IEEE Xplore (Security & AI Journals)
security
May 19, 2026

Garland is a system for recommendation engines that use graph neural networks (GNNs, which are AI models that learn patterns from interconnected user-item relationships) in federated settings, where data stays on users' devices instead of being sent to one central server. The system addresses a key problem: untrusted servers that help expand users' local data can spy on both item information and user relationships, so Garland uses secret-shared shuffle (a cryptographic technique that mixes data while keeping it encrypted) to protect privacy while still catching if a malicious server tries to cheat.

IEEE Xplore (Security & AI Journals)
May 19, 2026

This newsletter covers several AI industry developments, including Elon Musk losing his lawsuit against OpenAI (a company creating large language models, which are AI systems trained on large amounts of text data) because he sued too late under statutes of limitations rather than on the merits of whether OpenAI violated its nonprofit mission. Other stories include Anduril and Meta developing augmented-reality smart glasses (wearable devices that overlay digital information on the physical world) for military use with eye-tracking controls, and Google preparing to showcase its AI capabilities at its I/O developer conference while facing competition from other AI companies.

MIT Technology Review
CNBC Technology
May 19, 2026

OpenAI is improving how people can verify where AI-generated images and audio come from by using multiple approaches: adding C2PA conformance (a cross-industry standard using metadata and cryptographic signatures to attach source information to content), partnering with Google to embed invisible watermarks called SynthID into images, and releasing a public tool to verify if images came from OpenAI. These layered approaches help protect provenance information (details about content's origin and creation) even when it's edited, downloaded, or shared across different platforms.

Fix: The source describes OpenAI's implemented approaches rather than fixes to a problem. OpenAI has: (1) become C2PA Conforming, which gives platforms a 'trusted way to read, preserve, and pass along the provenance information' attached to content; (2) incorporated 'SynthID embeds an invisible watermarking layer that complements C2PA metadata-based approaches,' starting with images from ChatGPT, Codex, or the OpenAI API; and (3) is 'previewing a' public verification tool for users to detect if images came from OpenAI. The source states these approaches are designed to work together: 'C2PA helps content carry detailed context; SynthID helps preserve a signal when metadata does not survive.'

OpenAI Blog
The Verge (AI)

Fix: Update to MLflow version 3.10.0, where this issue is resolved.

NVD/CVE Database
May 19, 2026

Anthropic, an AI company, is suing the U.S. Department of Defense in federal court after the DOD labeled it a "supply chain risk" (a designation suggesting it threatens national security), which requires defense contractors to stop using Anthropic's Claude AI models in military work. The court judges questioned whether the DOD properly justified this blacklisting, with one judge calling it a "spectacular overreach," while the DOD argued it needed to act quickly to notify agencies about the risk.

CNBC Technology

Fix: TSMC's strategy involves building inventory buffers (stockpiles of materials), diversifying sourcing (buying from multiple suppliers), and continuously developing multi-source supply solutions to build a well-diversified global supplier base and improve the local supply chain. The source also notes that chip companies generally understand they need to diversify to be less dependent on a specific region.

CNBC Technology
Simon Willison's Weblog
MIT Technology Review
The Guardian Technology
The Guardian Technology

Fix: The vulnerabilities have been patched. Users should update to the patched version of OpenClaw.

Dark Reading

Fix: Update MLflow to version 3.11.0 or later.

NVD/CVE Database
BBC Technology

Fix: The source mentions three workarounds for deployments unable to upgrade immediately: (1) Place NiceGUI behind a reverse proxy that rejects requests where the path after `/_nicegui/<version>/esm/<key>/` or `/_nicegui/<version>/resources/<key>/` is empty. (2) Rate-limit the `/_nicegui/` prefix at the proxy. (3) Configure log rotation aggressively for the affected service. For a permanent fix, upgrading NiceGUI is recommended, though no specific patched version is mentioned in the source.

GitHub Advisory Database