New tools, products, platforms, funding rounds, and company developments in AI security.
This article argues that generative AI (machine learning systems that create new content like images or text) is harming the art world by using artists' work without permission to train itself, similar to a large-scale theft. The piece describes widespread concerns about AI in 2026, including environmental damage from data centers (large facilities that store and process information), harmful effects on users' mental health, and job displacement, issues that artists had warned about earlier.
Major AI companies like OpenAI are investing in policy papers, think tanks, and public engagement efforts to improve their public image as polls show growing disapproval of AI technology. OpenAI recently released a policy paper on industrial policy and opened a Washington DC office with space for non-profits and policymakers to learn about their technology, as part of a broader strategy to reshape how people perceive the AI industry.
Anthropic announced it created a powerful AI model called Mythos that it decided not to release publicly, citing cybersecurity risks as the reason. The announcement drew significant attention from government officials and politicians, though some skeptics question whether the decision was genuinely about security concerns or a publicity strategy to attract investment.
The New Yorker published an AI-generated illustration for a profile of OpenAI CEO Sam Altman, created by mixed-media artist David Szauder using generative AI (software that creates images based on text descriptions). The article discusses how AI art is being used in major publications, raising concerns among illustrators about the impact on their profession.
At the HumanX AI conference in San Francisco, Anthropic's Claude Code (an AI coding agent, a tool that generates, edits and reviews code) has become the dominant topic in the AI industry, surpassing OpenAI's influence among executives and investors. Despite a legal dispute with the Department of Defense, Anthropic continues to gain momentum, with Claude Code generating over $2.5 billion in annualized revenue since its May 2025 public launch. The company's focus on coding rather than spreading resources across multiple AI products has positioned it well to capture enterprise contracts.
OpenAI has launched a new $100 Pro subscription tier to compete with Claude's pricing and target coders and enterprises. The new Pro plan sits between the existing $20 Plus and $200 Pro Max tiers, offering 5x higher usage limits than Plus and access to advanced features like Codex (a code-generation tool), deep research, and GPT-5. OpenAI's strategy mirrors Anthropic's approach of offering a mid-tier subscription designed specifically for people doing complex, high-stakes work.
A 20-year-old man was arrested after throwing a Molotov cocktail (a homemade incendiary weapon) at OpenAI CEO Sam Altman's home and then threatening arson at the company's San Francisco headquarters. No one was injured in the attack, and the suspect was taken into custody with charges pending. The incident occurred during a controversial period for OpenAI involving military partnerships and litigation.
A 20-year-old man was arrested in San Francisco after throwing a Molotov cocktail (a homemade incendiary weapon) at the home of OpenAI CEO Sam Altman, damaging a perimeter gate. The same person later appeared at OpenAI's San Francisco office and threatened to burn down the building before being arrested by police.
This article reports on a criminal incident, not a technical AI or cybersecurity issue. A 20-year-old was arrested for allegedly throwing a Molotov cocktail (an improvised incendiary weapon) at OpenAI CEO Sam Altman's home in San Francisco and making threats at OpenAI's office.
A new vulnerability (CVE-2026-34040, rated 8.8 on the CVSS score, a 0-10 severity rating) allows attackers to bypass authorization plug-ins (add-on security tools that control who can run Docker commands) in Docker Engine and gain root-level access to host systems. The flaw exploits the same underlying problem discovered in 2016, where oversized API requests (over 1MB) are silently dropped before the authorization plug-in can inspect them, causing the plug-in to approve requests it cannot see, which Docker then executes in full.
An Iranian content creation group called Explosive Media has produced viral AI-generated Lego videos that mock recent US military operations, including the rescue of a downed airman. The videos use AI to create animated scenes where Lego jets explode and money spills out, criticizing the cost and outcome of the military missions.
ChatGPT's voice mode runs on an older, weaker model (GPT-4o era with a knowledge cutoff of April 2024) compared to other OpenAI products, even though talking to an AI might seem like it should use the smartest version. The article explains that OpenAI's highest-tier models perform much better on tasks like coding because those domains have clear, measurable success criteria (like whether unit tests pass) that make them easier to improve through reinforcement learning (training that rewards correct behaviors), and because business customers value these capabilities more.
CoreWeave, a cloud infrastructure company that operates data centers with thousands of Nvidia graphics processing units (GPUs, specialized chips that speed up AI computations), announced a multi-year deal to provide computing power for Anthropic's Claude AI models. This deal means nine of the top ten AI model providers now use CoreWeave's platform, reflecting growing demand for the specialized infrastructure needed to run large AI systems at scale.
Filmmaker Daniel Roher created a documentary called "The AI Doc: Or How I Became an Apocaloptimist" to explore whether AI will improve or harm humanity, after questioning whether it was wise to have a child in an AI-driven world. The film features interviews with 40 people including major AI company leaders, and examines how people tend to view AI in extreme terms, either as a cure-all solution or as an existential threat. The filmmakers learned that even top AI scientists struggle to explain what AI actually is in simple terms, and they focused on making content that would remain relevant over time rather than chasing headline-driven narratives.
AI bots are creating fake music and uploading it to Spotify under the names of real musicians, including famous artists like jazz pianist Jason Moran and rapper Drake. Spotify has acknowledged the problem, removing over 75 million spammy tracks in 12 months, and says it is developing a new tool that will let artists review and approve releases before they go live on the platform.
Fix: Spotify stated it is 'working on a new tool to give artists more control over what shows up under their name' that would 'let artists review and then approve or decline releases before they go live on the platform.' The company also said that 'estate or rights holders for a deceased artist can opt into the company's new tool if they have an account.' Additionally, Spotify noted it 'employs a range of safeguards to protect artists, including systems designed to detect and prevent unauthorized content, human review, and reporting and takedown processes.'
The Guardian TechnologyU.S. government officials, including Vice President JD Vance and Treasury Secretary Scott Bessent, met with tech CEOs from companies like Anthropic, OpenAI, Google, and Microsoft to discuss the security of large language models (AI systems trained on large amounts of text data) and how to protect against cyber attacks before Anthropic released its new Mythos model. Anthropic briefed government officials on the model's capabilities, including potential offensive and defensive cybersecurity applications, and emphasized that bringing the government into the conversation early about risks and safety measures was a priority.
Fix: Update to Docker Engine 29.3.1 or Docker Desktop 4.66.1. If immediate updates cannot be deployed, route API requests through a reverse proxy that blocks all requests over 512KB as a temporary mitigation. Additionally, administrators can search daemon logs using 'journalctl -u docker | grep "Request body is larger than"' to detect potential exploitation attempts.
CSO OnlineAnthropic released Claude Mythos Preview, an AI model that can automatically discover vulnerabilities (weaknesses in software) and create working exploits (code that takes advantage of those weaknesses) across operating systems and software products. The company is currently limiting access to a few dozen organizations through Project Glasswing to give defenders time to find and fix weaknesses in their own systems before attackers gain widespread access to the model.
Fix: The source mentions that Project Glasswing participants are being given early access to Mythos Preview so they can 'find weaknesses in their own systems using the model and start to grapple more broadly with how software development, update cycles, and patch adoption needs to change.' However, no specific technical mitigation, patch, update, or fix is described in the text.
Wired (Security)A cyber-attack on a London pathology company in June 2024 caused widespread hospital disruptions and contributed to a patient's death, highlighting real dangers from digital attacks. The article warns that a new AI release could enable more frequent and severe cyber-attacks by giving attackers powerful hacking capabilities, potentially creating widespread chaos in critical digital systems we depend on.
Federal Reserve Chairman Jerome Powell and Treasury Secretary Scott Bessent met with major U.S. bank CEOs to discuss cyber risks from Anthropic's Mythos model, a new AI system with advanced capabilities for both offensive and defensive hacking. Anthropic released the model in limited capacity through Project Glasswing, a cybersecurity initiative involving major tech companies, and briefed government agencies on its cyber applications because of concerns that hackers could exploit its capabilities.
Claude Mythos is a new AI model developed by Anthropic that can autonomously discover zero-day vulnerabilities (previously unknown security flaws) and create working exploits (tools that take advantage of those flaws) in major software like operating systems and web browsers. Although currently restricted to responsible organizations like Microsoft and Google, the source warns that similar capabilities will likely become publicly available within 12-18 months, leading to a surge in discovered vulnerabilities and requiring security teams to adopt new AI-focused strategies to defend against attacks.
Fix: The source explicitly recommends that security teams and vendors adopt the following strategies across three phases: (1) Short term: vendors should "invest in making sure that patching their products is as seamless and painless as possible, to support end-users dealing with the onslaught of new CVEs"; (2) Medium-to-long term: "plan to invest efforts into an AI-focused AppSec program (application security program), which will ensure you find the AI vulnerabilities before threat actors have a chance to exploit them."
Wiz Research Blog