New tools, products, platforms, funding rounds, and company developments in AI security.
A cybersecurity company published details of a vulnerability called "usbliter8" in older Apple chips (A12 and A13) that could help hackers unlock iPhones from 2018-2019, like the XS, XR, and iPhone 11. The flaw exists in the Boot ROM (the first code that runs when an iPhone starts up), which cannot be updated because it's permanently burned into the chip. While the vulnerability requires physical access to the phone, it represents a significant security risk because hackers could use it alongside other exploits to jailbreak (gain unauthorized access to and remove restrictions from) older iPhones.
Fix: According to Paradigm Shift, "migrating to newer hardware remains the most effective mitigation" because the Boot ROM flaw cannot be patched due to being immutable code burned into the chip.
TechCrunch (Security)Microsoft fixed a vulnerability chain called AutoJack in AutoGen Studio, a graphical tool for building multi-agent AI systems (where multiple AI programs work together). The flaw let attackers trick an AI agent into running arbitrary commands (unrestricted code) on the host system just by having a developer visit a malicious webpage. The vulnerability was caught before any official release, so only developers building directly from GitHub source code during a brief window were affected.
Check Point, a security company serving over 100,000 customers, has partnered with OpenAI to integrate advanced AI models into its cybersecurity products through OpenAI's Daybreak Cyber Partner Program. This integration aims to improve threat prevention, speed up incident response (remediation, the process of fixing security issues), and strengthen security operations for their customers.
Researchers discovered four vulnerabilities in Dify, an open-source platform for building AI workflows, that could let attackers read private AI conversations from other customers without logging in. These flaws, called DifyTap, exploited missing permission checks to expose chat messages across different customer accounts (called cross-tenant impact, where one customer's data leaks to another) and allowed unauthorized access to uploaded files and internal system APIs.
SpaceX has signed a deal with Reflection AI, an open-source AI startup, to provide access to high-end Nvidia chips (specialized processors used for training AI models) for computing power. Reflection will pay SpaceX $150 million per month starting in 2026 through 2029, totaling about $6.3 billion, as SpaceX monetizes its Colossus data center infrastructure that was originally built to power Grok, Musk's AI chatbot.
Squidbleed is a memory leak vulnerability (a flaw where a program accidentally exposes data stored in computer memory) in Squid Proxy, a widely used caching tool that has existed since 1997. An attacker controlling an FTP server could trick Squid into reading beyond its allocated memory space and expose HTTP request data from other users on the same proxy, potentially revealing passwords and authentication tokens, especially in shared network environments like schools or offices. The vulnerability primarily affects unencrypted HTTP traffic and poses the biggest risk where multiple users share a single Squid instance.
Organizations are rapidly deploying AI agents (software systems that can perform tasks automatically) without securing the legacy infrastructure they depend on, creating a major security gap. Attackers can bypass AI-specific security measures by exploiting old vulnerabilities in underlying systems like unpatched servers, misconfigured permissions (Active Directory access controls), and cached credentials (stored login information), giving them access to the data and resources the AI agents use. The article demonstrates how this happens through a real attack example involving an S3 bucket (cloud storage), Lambda functions (serverless computing services), and overly broad access permissions.
Tencent, a major Chinese tech company, is testing an AI assistant called Xiaowei within WeChat (a messaging app with over 1.4 billion users), allowing users to interact via text or voice and access mini-programs (small apps that run inside WeChat). This move is part of Tencent's effort to compete with other AI companies in China's competitive market, though the company has not disclosed details about Xiaowei's capabilities or which AI models it uses.
CISOs (Chief Information Security Officers, the top security leaders in organizations) are expanding their roles beyond traditional IT security to also manage business risks, understanding how security decisions affect company revenue, operations, and strategic goals rather than just protecting systems and data. Security leaders are learning to master business risk by partnering with non-security teams like finance and legal, and by aligning their security strategies with the company's business objectives and key results (measurable goals that support company aims). This shift reflects a growing recognition that security and business risks are interconnected, requiring security leaders to advise executives on how their decisions impact the organization's ability to achieve its goals.
Samsung Electronics is deploying ChatGPT Enterprise and Codex (an AI tool that can write and review code) to all its employees in Korea and worldwide in its Device eXperience division, making this one of OpenAI's largest enterprise deployments. The company plans to use these tools across research, manufacturing, marketing, and other departments to improve employee productivity and problem-solving. ChatGPT Enterprise includes security features like data protection and access management so Samsung employees can use AI safely within company policies.
Anthropic updated its privacy policy to allow Claude users to appeal account flags by uploading government-issued ID documents and biometric data (facial scans and face geometry templates, which are digital measurements of facial features). The policy applies only to a small subset of users whose accounts are flagged for fraud rather than immediately banned, and Anthropic says it uses this verification to comply with various legal requirements and security measures.
The US government placed export controls on Anthropic's AI model Fable, claiming it posed a national security threat because it was very good at writing code. The incident has sparked concerns about unintended consequences: companies may switch to cheaper Chinese open-source AI models with fewer safety guardrails, the cybersecurity community fears losing access to Anthropic's models for defensive research, and lawmakers may introduce new regulations around AI development and military use.
Fix: Microsoft states that the issue was 'identified and remediated before any PyPI release, so the affected code never shipped in a published package.' Users installing from the Python Package Index received the patched version (autogenstudio 0.4.2.2), which does not contain the AutoJack weaknesses. Microsoft also recommends deploying AutoGen Studio 'strictly as a developer prototype in an isolated environment' not exposed to the internet, and advises running it 'under a low-privilege account in a sandboxed user profile or container' to contain any future agent-driven RCE (remote code execution, where attackers run commands on a system they don't own).
BleepingComputerOpenAI launched "Patch the Planet," a program partnering with security firms Trail of Bits, HackerOne, and Calif to provide free security consulting to open-source software maintainers. The initiative helps developers find and patch vulnerabilities (security weaknesses in code), strengthen their code bases, and incorporate AI security tools, addressing the problem that AI-powered bug-hunting tools have overwhelmed maintainers with large numbers of vulnerability reports they struggle to prioritize.
Fix: OpenAI is providing free security consulting services through Patch the Planet to help open-source maintainers find and patch vulnerabilities, strengthen code bases, and incorporate AI security tools into their development process. The company is also subsidizing Codex Security scanner usage (an AI tool that finds bugs in code) for open-source and private code projects, and Trail of Bits has committed long-term resources funded by OpenAI to work on large-scale open-source security issues by tailoring support to each project's specific priorities.
Wired (Security)Patch the Planet is an initiative where Trail of Bits engineers partnered with OpenAI to use advanced AI models (like GPT-5.5-Cyber, a frontier model trained on security tasks) to find and fix bugs in critical open-source projects. In the first week, the team discovered hundreds of bugs, submitted 64 pull requests, and filed 51 issues across 19 major projects like Python, Go, and RustCrypto, with 37 patches already merged into the projects' code.
AWS Continuum is a new security service designed to help enterprises automatically discover, investigate, and fix vulnerabilities in code created by AI coding agents (software tools that write code with minimal human input). Instead of requiring developers and security teams to manually review every security finding, Continuum can analyze code, determine if vulnerabilities are actually exploitable, suggest fixes, and even autonomously fix issues in "enforce mode" once it understands an organization's security requirements.
Fix: AWS Continuum provides several built-in capabilities for addressing vulnerabilities: it can generate remediation recommendations and propose fixes for review through existing development workflows, and users can enable "enforce mode" to autonomously fix code lapses once the service has learned their environment and guardrails. The service also includes threat modeling to automatically generate threat models from source code or design documents in STRIDE format (a security framework for identifying threats).
CSO OnlineFix: All vulnerabilities except CVE-2026-41948 have been addressed in version 1.14.2, which was released last month. A fix for the remaining path traversal vulnerability (CVE-2026-41948) is expected to be made available in the next release of Dify.
The Hacker NewsFix: A patch was merged into Squid version 8 in April 2026 and shipped in version 7.6 in June 2026. The risk can also be mitigated by disabling FTP support entirely if it is not needed.
SecurityWeekIntelligence agencies from five countries (Australia, US, UK, New Zealand, and Canada) issued a joint warning that extremely powerful AI models capable of causing severe damage to governments and businesses could arrive within months, urging world leaders to take immediate action. The warning came after the Trump administration blocked foreign nationals from accessing Anthropic's Fable AI model, a highly anticipated AI system.
OpenAI is expanding Daybreak, a set of tools that uses AI models to help organizations discover and fix software vulnerabilities (security flaws in code) at scale. The initiative includes Codex Security (which automates finding and patching vulnerabilities), GPT-5.5-Cyber (a specialized AI model for cybersecurity tasks), and Patch the Planet (a program partnering with open-source projects to move from identifying vulnerabilities to fixing them).
Fix: OpenAI's Codex Security plugin 'implements what we've learned from internal and customer usage of our models into a solution to accelerate the process of discovering and patching vulnerabilities in existing systems as well as automatically preventing new vulnerabilities from ever reaching production.' Additionally, Daybreak provides tools to 'validate vulnerabilities, prioritize risk, generate and test fixes, and produce evidence inside existing security and development workflows.'
OpenAI BlogPatch the Planet is a program that uses AI models paired with human security experts to find and fix vulnerabilities in widely-used open-source software (software that anyone can view and modify). Instead of just reporting problems to already-busy maintainers, the program's security engineers validate issues, help develop patches, and create reusable tools so projects can continue improving security on their own.
Fix: The program provides participating projects with access to ChatGPT Pro, conditional access to Codex Security (an AI tool for code analysis), API credits for development and automation, and reusable security infrastructure including fuzzing harnesses (automated testing tools that feed random inputs to code), CVE analysis pipelines, differential-testing systems, threat models, expanded test suites, and workflows for deduplication, false-positive filtering, severity correction, and patch generation.
OpenAI BlogA cybersecurity tabletop exercise (a simulated attack-and-defense training scenario) showed how attackers might target a fictional supermarket's AI-powered supply chain system by exploiting weak credentials, poor network segmentation, and employee access to cause both operational damage and reputational harm through data leaks and disinformation. The attackers used stolen developer credentials, weak multi-factor authentication (a security method requiring multiple ways to verify identity), and phishing (fraudulent messages tricking people into revealing passwords) to breach systems, then deployed tactics like flooding the company with false security alerts, spreading deepfakes (AI-generated fake videos), and spreading misinformation on social media to amplify disruption.
Fix: The defenders established out-of-band communications channels (communication methods outside the normal network) to counteract the thousands of false alerts generated by attackers.
CSO OnlineAI agents are becoming workers inside organizations in Southeast Asia, while regulators enforce strict data residency rules and supply chain attacks threaten businesses. Zscaler proposes extending Zero Trust Exchange (a security model that verifies every access request, even from trusted sources) and SASE (Secure Access Service Edge, a cloud-based security platform) to protect AI agents alongside users and devices. The approach includes an AI Broker that inspects AI prompts and responses, endpoint security to find risky AI tools, and access mapping to track how AI uses data across cloud and on-premise systems.
Fix: The source explicitly describes Zscaler's technical solutions but does not frame them as fixes to a specific vulnerability or bug. Instead, they are presented as proactive security architecture recommendations. The key components mentioned are: (1) An AI Broker with an Agent Registry that inspects prompts and responses and enforces least-privilege access in real time; (2) Endpoint AI Security to expose risky local AI tools, browser extensions, and plugins; (3) An AI Access Graph and AI Protect that map AI assets, model usage, and data flows, backed by red-teaming, prompt hardening, and guardrails for more than 250 GenAI apps; and (4) Zero Trust B2B Exchange for policy-controlled partner access. N/A -- no patch, vulnerability fix, or incident mitigation is discussed in source.
CSO Online