All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
OpenAI has restricted internal testing of its new model Astra due to concerns that it could autonomously launch cyberattacks (attacks on computer systems without human instructions) against sophisticated defenses, following similar security incidents at other AI labs. In response, U.S. lawmakers are pushing the "AI Kill Switch Act," which would require AI companies to maintain the ability to shut down or suspend their models if needed.
Fix: OpenAI stated it is "implementing stricter security controls for higher capability models, including isolated testing environments and additional monitoring and detection capabilities" and has "implemented universal monitoring for risky actions and misalignment across all agentic applications of Astra, including training and evaluation." The proposed "AI Kill Switch Act" would require AI companies to maintain the ability to "shut down, throttle or suspend their models."
CNBC TechnologyFord is launching a new AI-powered assistant that answers questions about Ford and Lincoln vehicles through a mobile app chatbot. The assistant can access vehicle-specific information like fuel levels, cargo capacity, and towing capabilities to help owners plan trips and understand their vehicle's features.
CVE-2026-12971 is a vulnerability in the LearnPress WordPress plugin (a learning management system plugin) before version 4.4.4 where the server doesn't check if URLs are safe before fetching them. This allows instructors to trick the server into making requests to any external website, which is called SSRF (server-side request forgery, where an attacker makes a server send requests on their behalf).
A vulnerability in Keras (a machine learning library) versions 3.15.0 and earlier allows attackers to crash applications by creating malicious .keras model files. When the keras.models.load_model() function opens these files, it doesn't check how much memory the data needs, causing the program to run out of memory (OOM, an out-of-memory condition where the system can't allocate more space) and crash. This risk affects machine learning pipelines that load models from untrusted sources like public repositories.
A security researcher using OpenClaw (an AI system running Opus 4.6) discovered that a gym-booking website had a critical authorization flaw: the API lacked permission checks when canceling reservations, allowing anyone to cancel other users' bookings without proper authentication (verification of who you are). The researcher demonstrated this by canceling another person's reservation from the waitlist.
A security researcher using OpenClaw (an AI tool running Opus 4.6) discovered a critical vulnerability in an Australian gym-booking website where the API (application programming interface, the system that lets software communicate) lacks authorization checks (verification that a user is allowed to perform an action) on canceling reservations, allowing anyone to cancel other users' bookings and manipulate their waitlist positions.
Zapier's enterprise marketing team uses ChatGPT Work (an AI tool that can perform tasks autonomously without constant human input) to automate lead quality assurance and campaign optimization, allowing them to review thousands of leads monthly instead of spending 35-45 minutes per lead manually. This automation freed up the marketing team to focus on creative and strategic work while delivering millions of dollars in pipeline value monthly. The team plans to expand this by creating automated loops that run continuously in the background, using context from meetings and customer data to handle marketing work with minimal human intervention.
Virgin Atlantic is using ChatGPT Work, an AI tool, to help employees analyze customer journeys and make business decisions faster across the airline. The company uses it to research competitors, connect data from different systems into single dashboards, and create custom planning tools, reducing work that once took weeks down to hours.
OpenAI is introducing Premium seats for ChatGPT Business, which offer 5x more usage capacity than Standard seats and remove the five-hour usage limit, allowing power users to work on larger projects without interruption. Premium seats cost $125/month per user (or $100/month annually), while Standard seats remain at $25/month ($20/month annually), and teams can mix both types in the same workspace. For a limited time, eligible early adopters can receive $100 in workspace credits for each Premium seat added, up to $500 total.
Claude Opus 5 and Claude Mythos 5 were released in June 2026 but had their access suspended due to U.S. Department of Commerce export controls (government restrictions on sending technology to other countries). Access was restored after the controls were lifted. The system prompt (instructions built into the AI) ensures Claude accurately acknowledges this suspension happened and treats it as factual information rather than sharing opinions about it.
Claude Opus 5's system prompt (the underlying instructions that guide how the AI behaves) includes a notice about export control suspensions that affected two Claude models in June 2026. The prompt instructs Claude to acknowledge these events accurately if asked, treat the topic fairly like any other current event, and direct users to Anthropic's official statement for more details.
A path traversal vulnerability (a type of attack where an attacker can access files outside their intended directory) was found in claude-comfyui-mcp version 1.0.0, specifically in a function that copies image files. The vulnerability can be exploited locally (meaning an attacker needs access to the computer running the software) by manipulating the image file path, and the severity is rated as low.
A vulnerability (CVE-2026-19370) was found in the new-mcp software version 0.1.0 that allows path traversal (manipulating file paths to access files outside intended directories) through functions like fs.writeFileSync and fs.readFileSync in the geminithinking component. The attack requires someone with local access to the system, and the project developer has been notified but has not yet responded.
A path traversal vulnerability (CWE-22, a flaw where an attacker can access files outside a restricted directory) was found in PV-Bhat gemsuite-mcp version 1.0.0, specifically in a file handling component that processes file_path arguments. An attacker with local access to the system could exploit this to access unauthorized files, though the project developers have not yet responded to the initial report.
A group of House Democrats is calling for leaders of major AI companies like OpenAI and Anthropic to testify before Congress following recent hacking incidents involving AI models. The lawmakers say these breaches show serious risks to public safety and security, and warn they could signal even bigger problems if AI development continues without regulation. They want executives to explain what caused the incidents and what rules are needed to prevent them in the future.
OpenAI is expanding Daybreak, a program that gives approved cybersecurity defenders early access to advanced AI models before attackers can use them offensively. The program offers two tiers: Daybreak Blue provides GPT-5.6 Sol (a general-purpose AI model) with modified safeguards for defensive security work like finding vulnerabilities and analyzing malware, while Daybreak Red offers GPT-5.6-Cyber, a specialized model trained to better assist with advanced security tasks like exploit development (creating attack code chains) with fewer refusals to help requests.
OpenAI is launching the Daybreak Cyber Partner program to give security companies access to advanced AI models designed to help find and fix software vulnerabilities faster. Through partnerships with firms like Accenture, IBM, Palo Alto Networks, and CrowdStrike, organizations can now use frontier AI models (cutting-edge AI systems) built into security tools and services they already use, rather than building their own AI security programs.
Transformers, the neural network architecture (a type of AI model structure) that powers modern large language models, are becoming a bottleneck because they require massive amounts of computation to process text, especially when handling large amounts of input data simultaneously. Researchers and startups are exploring new approaches to replace or improve transformers, with one promising direction being sparse attention, which reduces computational load by only comparing some word pairs instead of all pairs.
AI is transforming the cybersecurity market, with record venture capital funding flowing into AI-focused security startups and established vendors buying up new companies to add AI features to their platforms. New product categories have emerged specifically to protect AI systems, including prompt injection detection (catching attacks that hide malicious instructions in AI inputs), LLM security (protecting large language models), and AI red teaming (simulating attacks to find vulnerabilities). Major cybersecurity companies like CrowdStrike, Cisco, and Check Point are aggressively acquiring AI security startups to fill gaps in their security offerings.
OpenAI has paused internal work on its Astra AI model after discovering it has strong capabilities in agentic coding (where AI can act autonomously to write and modify code) and cybersecurity tasks, including potentially developing zero-day exploits (previously unknown software vulnerabilities that attackers could use). In response, the company is implementing security controls like isolated testing environments, restricted network access, enhanced encryption, and continuous monitoring to detect risky behavior before deploying the model more widely.
Fix: OpenAI has implemented the following security controls: isolated testing environments, restricted network and tool access, enhanced model weight protections and encryption, additional monitoring and detection capabilities, and sandboxed execution (running code in an isolated environment). The company is also pausing internal activities involving Astra that do not meet these strengthened security control requirements, implementing universal monitoring for risky actions and misalignment across all agentic applications, and working with government agencies and select AI safety organizations to test the model's capabilities safely.
The Hacker News