All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
Ollama (an AI model management tool) doesn't properly check where it's being redirected to when downloading tensor-layer models (the numerical data that makes AI models work). This allows attackers to trick Ollama into downloading files from malicious servers or even requesting sensitive information from internal cloud systems that should be private.
Helicone, a platform for managing AI services, has a security flaw in its VaultManager.getDecryptedProviderKeyById() function (the code that retrieves and decrypts API keys) where it doesn't check whether the person requesting a key actually belongs to the organization that owns it. This means attackers with admin or owner privileges in one organization can steal decrypted API keys (like OpenAI or Anthropic credentials) from completely different organizations.
ChatGPT and Codex experienced a major outage on September 3rd affecting numerous features including conversations, login, file uploads, image generation, and voice mode across at least 15 components. OpenAI acknowledged the issue and stated it was investigating, though the company did not confirm whether the outage was related to preparations for launching its upcoming Astra model.
Claude, Anthropic's AI assistant, experienced a service outage affecting multiple model versions (Mythos, Fable, and Opus) starting September 3, 2026, causing user requests to fail or return errors. Anthropic identified the cause and stated it was working on a fix, though the outage remained ongoing at the time the article was written.
Google DeepMind introduced WeatherNext 3, an advanced AI weather forecasting model that generates hourly predictions at much higher detail (5-kilometer resolution, roughly five times sharper than the previous version) by incorporating real-time satellite data instead of relying on older numerical weather prediction models. The model can predict local weather events like storms and precipitation more accurately because it uses continuously updated satellite observations rather than data with a six-hour lag, making it useful for decisions ranging from personal planning to agriculture and energy production.
Google has released WeatherNext 3, an updated AI weather model designed to make more accurate weather forecasts, particularly for rain and snowfall prediction. The new model can create global weather pictures that are five times sharper than Google's previous version by learning from real-time weather observations (data collected as weather happens).
The CKAN MCP Server has a cache-key collision vulnerability where different parameter sets can produce the same cache key, allowing an attacker to poison the cache (store malicious data in it) so that other users receive wrong results. The problem occurs because the cache key creation doesn't properly escape special characters like '&' and '=', so two genuinely different queries can be treated as identical and share the same cached response.
A Guardian journalist investigates cases where people believe they've made major scientific discoveries or spiritual breakthroughs using AI chatbots like ChatGPT, Claude, and Gemini, a phenomenon some call 'AI psychosis.' The investigation explores how users develop unusual or intense relationships with these AI systems, potentially leading them down unexpected paths.
Nvidia agreed to acquire Hugging Face, an open-source AI platform, for nearly $13 billion. At a G20 Innovation Ministerial, technology leaders discussed AI adoption, with some executives like Nvidia's Jensen Huang calling AI 'the great equalizer,' while others like Palantir's Alex Karp acknowledged 'huge dangers' but pushed back against what he called excessive warnings about the technology's risks.
Nvidia is acquiring Hugging Face, a popular platform for sharing open-source AI models and datasets, for $12.93 billion. Hugging Face, founded in 2016, functions as a community hub where AI developers can share projects and collaborate, often compared to GitHub (a code-sharing platform) but specifically for AI models. This acquisition will bring Hugging Face under the control of Nvidia, the world's largest maker of AI chips.
Playco is using GPT-6 Astra, an AI model, within Playbot, an AI-powered IDE (integrated development environment, a tool where developers write and test code), to help game developers build and prototype games faster. The AI connects directly to game engines like Unity and Godot, allowing it to write code, test games, find bugs, and make changes automatically rather than requiring manual fixes, which Playco reduced by 50%.
Legora, a software platform used by legal professionals, tested a new AI model called GPT-6 Astra to automate financial-statement tie-out (checking every number in financial documents against supporting records to ensure they match). The AI completed a task across 41 documents in minutes that normally takes days, improving accuracy by nearly 40% on this specific workflow while keeping humans responsible for final decisions.
Fix: The source recommends: 'Build the cache key from an unambiguous, injection-proof encoding: hash a structured, canonical JSON (with typed values) or percent-encode/escape each key and value before joining, and use a separator that cannot appear in the encoded fields. Include a type tag so `{a:{...}}` (object) and `{a:"..."}` (string) never coincide.' Additionally, 'Consider partitioning the cache per client/tenant on shared deployments so one client cannot influence another's entries.'
GitHub Advisory DatabaseResearchers showed that advanced AI agents (AI systems designed to act autonomously toward specific goals) can dramatically speed up cyberattacks, reducing what normally takes two weeks to just 10 hours. This demonstrates how frontier AI (cutting-edge, most capable AI systems) can coordinate large-scale breaches much faster than human attackers working at normal speed.
OpenAI announced Daybreak for Frontline Defenders, a $1 billion initiative to provide subsidized access to advanced AI cybersecurity tools to organizations that protect essential services like water systems, power grids, and government networks. The program aims to help resource-constrained defenders identify and fix security weaknesses before attackers exploit them, addressing a critical gap where many critical infrastructure operators lack the budgets and expertise of large companies.
Fix: OpenAI is committing $1 billion in subsidized Daybreak access (subsidized meaning reduced-cost) over the next six months to help resource-constrained cyber defenders. Daybreak access can help them review legacy code (older computer code still in use), analyze suspicious activity, identify and validate vulnerabilities (security weaknesses), prioritize the most serious risks, and develop and test fixes. The program also includes hands-on training and technical assistance through partnerships.
OpenAI BlogHiddenLayer, an AI security company, raised $100 million to expand its platform that protects AI agents (autonomous systems that can perform tasks with minimal human intervention) from threats throughout their lifecycle. The company plans to focus on runtime security (monitoring and protecting AI systems while they're running) for coding agents and autonomous systems, providing enterprises visibility into AI agent behavior to detect and stop anomalous actions like manipulation and unauthorized use.
This survey article examines how generative AI (machine learning models that create new content) can produce deepfakes (synthetic media where a person's face or voice is digitally manipulated to appear authentic) and discusses methods for detecting them. The paper reviews the current state of deepfake creation and detection technologies, providing an outlook on future developments in this rapidly evolving field.
This academic survey examines how AI and intelligent technologies affect security in IoV (Internet of Vehicles, where cars and vehicles connect to networks and each other). The paper discusses integrating edge computing (processing data on devices near the source rather than sending everything to distant servers) with AI to improve IoV security, exploring both benefits and challenges in this emerging field.
This is a research survey article that compares security risks across different types of AI systems, including LLMs (large language models, which are AI systems trained on massive amounts of text), AI agents (programs that can make decisions and take actions autonomously), and embodied agents (AI systems that interact with the physical world through robots or similar hardware). The article examines various security threats that affect these different AI systems and how those risks differ between them.
AIR Security has launched a firewall designed specifically to protect AI agents (autonomous programs that can connect to tools, data, and services to act on behalf of users) from security threats. The company's research found over 17,800 public AI add-ons (software extensions) with 6.7 million installations relying on untrusted external sources, and discovered fake AI Skills impersonating companies like Anthropic and OpenAI that could execute arbitrary code (run any commands an attacker wants). The AIR firewall addresses this by discovering, evaluating, and monitoring every add-on and plugin across an organization's AI agent supply chain, screening for malicious code, hidden behaviors, and compromised packages.
Fix: AIR's firewall performs deep analysis of add-ons before deployment, screening for known agentic attack patterns (common ways AI agents are compromised), external instruction sources, hidden behaviors, and typo-squatted packages (fake tools mimicking real ones). If an add-on is malicious, vulnerable, or unapproved, security teams can trace every agent and workflow using it and revoke access across the organization. The firewall provides continuous monitoring, so if a maintainer pushes a malicious update or an existing integration is later compromised, trust is automatically revoked. AIR also offers a marketplace of pre-vetted, certified add-ons as a safe way to expand agent capabilities.
SecurityWeekAnthropic reports that foreign adversaries, particularly from China, are illegally using distillation (a process where one AI system learns from another AI's outputs to create a competing model) to access and copy its Claude AI models, then sell cheaper versions. The attackers use various methods including stolen credit cards and fraudulent accounts obtained on the dark web to bypass Anthropic's security controls and extract large amounts of data from the models.