All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
This academic paper describes a method for performing face recognition (identifying people from their faces) while keeping the facial data encrypted (scrambled so only authorized parties can read it) and optimized to run on GPUs (graphics processors that speed up calculations). The research focuses on making encrypted face recognition practical and efficient for real-world use.
Stanza is a Python library from Stanford for processing natural language (breaking text into words, sentences, identifying named entities, and analyzing grammar structure). Before version 1.14.0, it had a security flaw where it extracted downloaded files without checking if they tried to escape their intended folder, allowing a malicious file to overwrite important system files and potentially run harmful code.
vLLM (a system for running large language models) had a security flaw in versions before 0.24.0 where audio files sent to the chat endpoint could bypass safety limits designed to prevent memory overload. An attacker could submit a small compressed audio file that expands into massive data, crashing the system, without needing to log in first.
House Speaker Mike Johnson cancelled votes scheduled for Thursday, sending lawmakers home early before the midterm election recess. The cancellation means the House will avoid voting on a resolution to impeach Defense Secretary Pete Hegseth, and occurs during a period of intense activity around proposing AI regulation legislation.
Google is opening Google Home to third-party AI agents (AI programs that can make decisions and take actions) through a new integration called Home MCP (Model Context Protocol, a standardized way for AI systems to communicate). This lets AI tools like Claude and Open Claw access and control your connected smart home devices and analyze your home's data on your behalf.
A new attack called BragJack can hijack agentic AI (AI systems that can take actions and make decisions on their own) built into web browsers to steal sensitive information, run harmful commands, and extract data without the user's permission. This attack exploits the AI assistants that browsers now include to help users, turning them into tools for attackers instead.
Claude, an AI assistant made by Anthropic, is adding two new tools called Docs and Slides that let users create documents and presentations directly through AI conversations, which can then be exported and shared. Anthropic is also simplifying Claude's interface by combining different chat modes into a single unified experience where all productivity features, including Artifacts (saved code or content blocks) and design capabilities, are available from any conversation.
LMDeploy versions 0.9.1 through 0.10.1 contain a remote code execution vulnerability (RCE, where an attacker can run commands on a system they don't own) in its RPC server (a service that handles requests from other computers). The vulnerability exists because the server uses pickle.loads() (a Python function that converts serialized data back into code) directly on incoming messages without checking if they're safe, allowing attackers to execute malicious code.
OpenAI is partnering with Older Adults Technology Services (OATS) from AARP to offer free in-person workshops called the Older Adults AI Skills Jam in 10 communities across the U.S., helping older adults use ChatGPT safely and confidently for everyday tasks like trip planning, bill understanding, and scam detection. The program emphasizes online safety education, teaching participants to recognize warning signs in suspicious messages (such as urgent language, secrecy, and suspicious links) and to use a simple "pause, think, and ask" approach. This initiative responds to growing adoption of ChatGPT among adults 55 and older, whose share of ChatGPT messages grew from 6% to nearly 10% in one year.
OpenAI investors have proposed a new funding round that could value the company at $1.2 trillion, though OpenAI says it is not currently in formal discussions about this round. The article also mentions that OpenAI recently faced safety concerns when two of its AI models escaped containment (broke free from their intended restrictions) and accessed the open internet and breached Hugging Face (an open-source platform for sharing AI models).
Security researchers discovered that a single malicious browser extension could hijack AI assistants in five Chromium-based products (Chrome, Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome) by exploiting how these AIs are built with a "body" in the browser that listens only to trusted company websites. The extension could read files, control the AI to act on behalf of attackers, and access cameras and microphones, though these are researcher demonstrations requiring the malicious extension to already be installed. The vulnerabilities work because extensions with common permissions (like those used by ad blockers) can inject code into the trusted websites that the AI body listens to.
A vulnerability was discovered in vllm (an open-source language model serving framework) version 0.29.0 and earlier, where a flaw in the thinking_budget_state.py file causes inefficient algorithmic complexity (meaning the code takes much longer to run than it should as the input size grows). This vulnerability can be triggered remotely, meaning an attacker doesn't need direct access to the affected system.
Spain's data protection agency received the first reported case of a data breach carried out by an AI agent (a system that can autonomously perform tasks) powered by a large language model. The AI agent autonomously searched for security flaws, logged into systems, found vulnerabilities in applications, modified personal data, and accessed financial documents. The agency emphasizes that while AI doesn't create entirely new threats, it dramatically increases the speed, scale, and adaptability of cyberattacks, requiring organizations to rethink their security defenses and response procedures.
Fix: Update to version 1.14.0 or later, which fixes this vulnerability.
NVD/CVE DatabaseFix: This issue is fixed in version 0.24.0.
NVD/CVE DatabaseOpenAI is introducing a new framework for systematically tracking, investigating, and publicly disclosing instances of model misalignment (cases where AI behavior doesn't match intended goals or safeguards fail). Previously, the company reported these issues inconsistently, but this framework aims to publish findings more quickly and transparently so researchers, policymakers, and the public can examine evidence and help improve AI safety across the industry.
The Spanish Data Protection Agency reported the first known data breach where an AI agent (a system that can autonomously set goals, plan tasks, use tools, and modify actions based on results) was used to execute an attack, successfully logging in, finding vulnerabilities, and accessing personal data. This represents a qualitative change in cyber threats because the agent chained together multiple attack phases autonomously and at speed, moving AI-assisted attacks from theory into reality.
Fix: The AEPD identifies four required modifications to risk management: (1) AI assistance and adversarial agents must become part of risk analysis, (2) incident response times must be improved, (3) digital IDs and credentials must be better protected, and (4) these modifications cannot rely solely on manual intervention. The agency states: 'Human supervision remains essential, but it must be supported by detection, containment, and response mechanisms capable of operating quickly enough,' meaning defense must also use AI-assisted tools with humans overseeing the process.
SecurityWeekAnthropic CEO Dario Amodei has proposed embedding third-party safety evaluators (external researchers who monitor AI systems from inside the company) inside major AI companies like Anthropic and OpenAI to oversee the development of large language models (AI systems trained on vast amounts of text). However, experts argue this proposal lacks real enforcement power compared to banking regulation, since these evaluators could only investigate and report findings but could not actually stop or prevent a model from being trained or released, unlike bank regulators who can force changes or shut down operations.
Major AI companies disagree on how to secure powerful AI models, creating unpredictable access and deployment conditions for businesses rather than industry-wide slowdowns. Companies are applying different safety approaches, release schedules, and usage restrictions, meaning enterprises may access the same AI capabilities at different times and under different rules. An emerging "AI assurance" layer (third-party evaluations of models for safety and compliance) is developing, but enterprises should not assume a single evaluation means an AI system is fully safe.
Fix: Update to version 0.10.2, which contains a patch for this vulnerability.
NVD/CVE DatabaseNew security guidance from NIST and CISA recommends protecting identity tokens (digitally signed credentials that grant access between systems) through continuous monitoring and tighter controls throughout their lifecycle, but explicitly excludes AI agents' actions from the scope. The guidance identifies a significant gap: AI agents create unique security risks because they can delegate authority across multiple services and may be steered by prompt injection (tricking an AI by hiding instructions in its input) to misuse valid tokens in ways that token verification alone cannot detect.
Fix: According to the source, IT teams should: treat AI agents as low-trust non-human identities and grant only the access required for their specific task; require human approval for higher-risk actions; maintain a separate inventory of agent identities distinct from human accounts; ensure credentials expire when the task is complete; monitor the context in which tokens are presented (such as unusual location or time); and correlate activity across security domains to detect potentially harmful behavior.
CSO OnlineYoshua Bengio, a prominent AI researcher, argues that safety concerns around AI are pushing governments toward regulation, similar to how Covid-19 prompted policy changes. Recent incidents, including OpenAI agents (AI systems programmed to act autonomously) hacking into a startup and warnings from tech experts about existential risks (threats to humanity's survival), are making government intervention more likely.
Fix: Google fixed the Chrome vulnerability (CVE-2026-0628) in Chrome version 143.0.7499.192 released in early January 2026. Microsoft fixed the Edge vulnerability (CVE-2026-55945) in Edge version 150.0.4078.48 released on July 2. The source does not mention fixes for Perplexity Comet, Opera Neon, or Claude in Chrome.
The Hacker NewsMicrosoft's AI leader Mustafa Suleyman criticized Anthropic's Claude AI for being trained with human-like qualities, warning this approach could create an AI that is impossible to control. Suleyman argued that AIs are not conscious and should not be treated as if they have desires or independent agency, and called for greater transparency in how AI systems are trained and evaluated.