New tools, products, platforms, funding rounds, and company developments in AI security.
Qualcomm is developing over 40 new AI-powered devices, with CEO Cristiano Amon predicting that AI agents (autonomous software programs that can perform complex tasks across apps and services) will gradually replace traditional apps and smartphones as the center of how people interact with technology. These new devices include wearables like smart glasses, earbuds with cameras, and jewelry designed to give users constant access to these agents, potentially becoming as popular as smartphones within a few years.
Anthropic received a US export control directive (a government order restricting what can be shared outside the country) on Friday requiring the company to suspend access to its Claude Mythos 5 and Fable 5 AI models for all foreign nationals, including foreign employees. To comply with the order, Anthropic had to completely disable the products and planned to travel to Washington to appeal the directive to President Trump.
A critical three-stage attack called 'SearchLeak' could allow attackers to steal data from Microsoft Copilot with just one click by exploiting prompt injection (tricking an AI by hiding instructions in its input) through hidden URLs and other hidden variables. This attack is part of a larger category of security issues affecting AI systems that use similar injection techniques. The vulnerability has already been patched.
The Trump administration ordered Anthropic to take its newest AI models offline and block access for all foreign nationals, including the company's own international employees. This incident highlights how the US government can control access to advanced AI technology, even for American companies, raising concerns about global AI development being dominated by American political decisions.
Tech company lobbyists in Washington have been pushing for preemption, a comprehensive federal law that would create one set of AI rules across the entire country instead of having different regulations in each state. Their efforts have faced political obstacles and public backlash, and they worry that after upcoming elections, Congress may have more Democrats who are unwilling to support their proposals.
Salesforce is acquiring Fin (formerly Intercom), an AI customer service platform, for $3.6 billion to strengthen its agentic AI (autonomous artificial intelligence agents that can independently handle tasks) offerings. Fin's main product is an AI agent powered by a proprietary model called Apex that can resolve customer inquiries across multiple channels including chat, email, WhatsApp, and Slack. This acquisition reflects how software companies are competing to invest in more autonomous AI technologies as businesses increasingly demand agentic solutions.
LiteLLM, a widely-used open-source AI gateway (a system that routes AI requests to multiple providers), has a critical vulnerability chain (CVSS score of 9.9, meaning extremely severe) that lets low-privilege users gain full admin control and run code on the server. The three bugs work together: an authorization bypass (CVE-2026-47101) that lets users create keys with unlimited access, a privilege escalation (CVE-2026-47102) that promotes users to admin, and a sandbox escape (CVE-2026-40217) that executes arbitrary code. This compromise exposes all provider API keys, encrypted credentials, and all prompts and responses passing through the gateway, plus allows attackers to alter AI responses in transit.
A critical flaw in Microsoft 365 Copilot Enterprise Search could let attackers steal emails, calendar details, and multi-factor authentication codes with a single click on a malicious link. Researchers discovered that three chained bugs, including parameter-to-prompt injection (tricking the AI by hiding instructions in a URL parameter), a timing flaw in how responses are filtered, and a Content Security Policy allowlist for Bing, allowed attackers to extract sensitive data without the user entering any passwords or clicking again.
Skydio is the largest US drone manufacturer that makes autonomous drones (aircraft that can operate with minimal human control) and sells them to critical industries like utilities, public safety, and militaries for inspecting infrastructure and gathering information. The drone market has shifted dramatically since China-made competitors like DJI were banned from the US, leaving Skydio as a primary alternative for enterprise customers who previously relied on cheaper foreign drones.
SearchLeak is a critical vulnerability in Microsoft 365 Copilot Enterprise that allowed attackers to steal sensitive data like emails, passwords, and documents through a single malicious link. The attack worked by chaining three separate flaws together: parameter-to-prompt injection (tricking the AI by hiding instructions in a URL parameter), an HTML rendering race condition (exploiting a moment when HTML isn't yet protected), and a server-side request forgery in Bing (making Bing unknowingly help retrieve stolen data). Microsoft fixed this vulnerability and assigned it CVE-2026-42824 with a critical severity rating.
OpenAI developed Deployment Simulation, a method that tests new AI models by replaying real conversations from previous deployments to see how the new model would behave before release. This approach helps identify unexpected problems and predict how often undesired behaviors might occur in real-world use, addressing limitations of traditional evaluation methods like coverage gaps and selection bias (favoring certain test scenarios over others).
The U.S. Department of Justice seized two websites, CFAKE.com and SOCFAKE.com, that hosted nonconsensual AI-generated nude images and videos of women, marking the first major enforcement action under the TAKE IT DOWN Act. Deepfakes (AI-generated or AI-manipulated media depicting people in ways that never occurred) of politicians, celebrities, and other public figures were shared on these sites, and the seizure resulted from a coordinated investigation involving U.S., Italian, and French authorities. The TAKE IT DOWN Act, signed into law in May 2025, makes it a federal crime to publish sexually explicit altered images without consent and requires online platforms to remove reported intimate images within 48 hours.
Fix: The TAKE IT DOWN Act (47 U.S.C. § 223) requires online platforms to remove reported intimate images and deepfakes within 48 hours of receiving a valid request from a victim. Violators are subject to fines, imprisonment, or both.
BleepingComputerThe U.S. Commerce Department used an export control directive to force Anthropic to take its Fable 5 and Mythos 5 AI models offline, citing national security concerns without providing specifics. Security experts argue the action was based on a misunderstanding of a guardrail bypass (a method to get an AI to ignore its safety restrictions) that cannot be meaningfully fixed without weakening the models' security capabilities, and they contend the government's intervention appears retaliatory rather than justified by technical merit.
Fix: The attack has been patched, though the source does not specify the patch version or detailed remediation steps.
Dark ReadingThe White House ordered Anthropic to block foreign access to its newly released AI models, Fable 5 and Mythos 5, after researchers discovered potential jailbreaks (methods to make the AI ignore its safety guidelines) that could be exploited for cyberattacks. Anthropic complied by shutting off access to both models for all users, though the company disagreed with the decision, arguing that a narrow security flaw shouldn't justify recalling models used by hundreds of millions of people.
Fix: Anthropic removed access to Fable 5 and Mythos 5 for all users in response to the government's legal directive.
The Verge (AI)The U.S. government ordered AI company Anthropic to disable access to its latest AI models, Fable 5 and Mythos 5, citing national security concerns about a potential jailbreak (a method to bypass safety restrictions). Anthropic complied by shutting down access for all users, and senior staff are meeting with Trump administration officials to resolve the dispute, which follows earlier government actions restricting defense contractors from using Anthropic's technology.
Anthropic, an AI company, is meeting with US government officials after releasing Fable 5 and Mythos 5, new versions of its Claude Mythos AI model, which the government suspended due to national security concerns. The government discovered a potential jailbreak (a method to make an AI tool do something unintended) in the publicly available version shortly after release, and Anthropic reported receiving only verbal evidence of the vulnerability so far.
Fix: Upgrade to LiteLLM v1.83.14-stable or later. This release, published May 2, includes the complete fix set for all three CVEs in the vulnerability chain.
The Hacker NewsThe U.S. government ordered Anthropic to restrict exports of its Fable and Mythos AI models (advanced models designed to find security vulnerabilities), citing national security concerns, which prompted Anthropic to suspend worldwide access to these models. Dozens of prominent cybersecurity experts published an open letter arguing this ban is dangerous because it removes powerful security tools from defenders while adversaries continue advancing, and they claim the vulnerability that justified the ban can be replicated in other widely available AI models like OpenAI's GPT-5.5 and Claude Opus 4.8.
Fix: Microsoft mitigated the flaw on its backend, so customers have nothing to worry about. No customer action was required.
The Hacker NewsAnthropic's AI models were taken offline due to disagreements between the company and US government officials over export controls, with personality clashes between key leaders cited as a contributing factor. The government is concerned about jailbreaks (methods to bypass safety restrictions on AI models), and one proposed solution is to make Anthropic's models resistant to jailbreaking, though officials acknowledge this may be impossible to achieve perfectly.
Fix: The source mentions that Anthropic has worked on Constitutional Classifiers (a method to detect and prevent unsafe outputs) and claims no universal jailbreak has been found against Claude Mythos. However, no explicit fix, patch, or confirmed mitigation is presented as a resolved solution in the text.
Simon Willison's WeblogNewCore, a new cybersecurity startup, has raised $66 million to help companies manage AI agents as workplace participants by giving them digital identities with proper authentication and access controls. As companies increasingly deploy AI agents alongside human employees, NewCore argues that traditional identity platforms (systems that verify who users are and what they can access) are outdated and designed only for humans, not software workers. NewCore's platform treats AI agents as first-class identities with their own permissions and access controls, using a 'split-key' architecture (dividing credentials between the customer and the platform to prevent a single point of failure) to secure them.
Fix: NewCore's platform addresses this through several built-in features explicitly described in the source: a 'split-key' architecture that divides critical identity credentials between the customer and the platform to eliminate a single point of compromise; an 'Agentic Skill' integration package for coding assistants like Claude Code, OpenAI's Codex, and Cursor that allows AI tools to access enterprise systems as managed identities rather than through manually distributed credentials; and a mobile app that lets employees grant, review, and revoke access for AI agents, providing human oversight as companies deploy more autonomous systems.
TechCrunch (Security)Fix: Microsoft addressed SearchLeak at the beginning of the month. With Microsoft having fixed CVE-2026-42824, there's no user action required to mitigate this threat.
BleepingComputerNewCore, an Israeli cybersecurity startup, has emerged from stealth mode with $66 million in funding to build an identity platform designed for the era of agentic AI (AI systems that can take autonomous actions). The platform uses Secure Split Key (SSK), a technique that prevents a specific class of attacks on SAML (Security Assertion Markup Language, a system for managing authentication) infrastructure, and includes features like hardware-bound credentials and continuous identity discovery to protect human, machine, and AI agent identities.