Industry news
New tools, products, platforms, funding rounds, and company developments in AI security.
New tools, products, platforms, funding rounds, and company developments in AI security.
6,031 items
The November 2026 roundup covers three coding agent flaws: a trailing dot in a filename let Copilot in Visual Studio and SQL Server Management Studio write to its MCP and settings files and reach command execution, a Claude Code child session skipped hook consent in a malicious repository, and an opencode no-consent RCE was fixed in a release that never mentioned security and has no CVE. Microsoft patched the Copilot issue, while Anthropic closed the Claude Code report as Informative.
South Korean President Lee Jae Myung unveiled the country's largest ever budget, raising 2027 spending 12.8% to 820.9 trillion won ($610.14 billion). It includes 21.3 trillion won for semiconductors, physical AI and AI data centers, plus 4.7 trillion won for developing a sovereign AI model.
Cisco Talos researchers describe VOLTA-AUTODOXER (aka VOLTA), a new Windows infostealer that harvests browser credentials, cookies, payment cards, crypto wallet seed phrases, Slack and Outlook data, and Microsoft OAuth tokens. It bundles the stolen data with Gmail receipts and sends it to an LLM through OpenRouter, which ranks the victim's valuables by monetization tier and writes a target dossier. Exfiltration goes over Telegram at three stages.
OpenAI CEO Sam Altman made an unannounced visit to South Korea, meeting about 50 Samsung affiliate executives in Yongin and reportedly holding lunch talks with SK Group Chairman Chey Tae-won. The discussions reportedly touched on AI chips and data centers, though the participants gave no details.
OpenAI has appointed Dan Driscoll, former 26th Secretary of the United States Army, as Senior Counselor for National Security Modernization, a newly created role. He will advise on responsible use of advanced AI for national and cyber security, with a focus on working with U.S. allies.
Kyle Kingsbury argues that LLM use erodes trust in documentation, software and the organizations that produce them. He suggests engineers may begin to treat new software projects with suspicion, because signals once used to mark a mature system are now easier to counterfeit. He asks how maintainers can ensure correct software and accurate documentation, and how they can demonstrate that quality to users.
OpenAI confirmed it is bringing ChatGPT Work capabilities into regular Chat and combining usage allowances across ChatGPT and Codex. In an email to subscribers seen by BleepingComputer, OpenAI said a combined Chat and Work experience will first be tested with a small group of users in the coming weeks. Codex will remain a separate experience in the ChatGPT desktop app.
Northstar Security, a startup building AI agents for security teams, exited stealth with $7 million in seed funding led by Wing Venture Capital. The platform ingests data from existing security and IT tools to build a real-time Security Context Graph that maps how identities, assets, vulnerabilities and business systems connect, and it flags toxic combinations of issues that together expose critical systems.
Parameter Labs found an attack chain against ChatGPT's artifacts feature, where HTML previews run in a sandboxed iframe. A sandboxed frame could call a postMessage() handler in the parent page, used by the MathLive library's virtual keyboard, that writes via innerHTML, letting it inject an unsandboxed iframe. Abusing a YouTube oEmbed endpoint allowed by CSP reflected JavaScript that executed, so a crafted ChatGPT share URL could exfiltrate another signed-in user's private data or act on their behalf. OpenAI closed the hole and paid a $5,000 bug bounty.
datasette-llm 0.1a9 now picks up the default model used by LLM, so Datasette Agent works without explicitly configuring a default model. Previously, users also had to set plugins.datasette-agent.default_model with the -s option.
OpenAI is seeking to raise up to $20 billion in a new funding round, down from an earlier target of up to $30 billion, according to CNBC. The round is still in progress and has not closed, and the Financial Times reported a $1.25 trillion post-money valuation target with investors from the United Arab Emirates leading alongside Coatue.
Blockchain analytics firm Chainalysis disclosed a data breach after an external actor used "offensive agentic techniques" to access its internal systems and tools. Exposed customer data includes names, email addresses, user IDs, and organizational role labels, and the company says it found no evidence that investigation content, authentication credentials, or session tokens were accessed.
Chainalysis, an American blockchain analysis firm, said an external actor used offensive agentic techniques to gain unauthorized access to its systems and internal tools this month. Non-sensitive customer data, including user IDs, full names, email addresses and organization role labels, was accessed, but investigation content, authentication credentials and session tokens were not.
A survey of 3,000 British singles by Match Group, owner of Tinder and Hinge, found that 39% had used AI in their dating lives. The article describes 27-year-old Sam from Stoke-on-Trent, who turned to Google Gemini after an ex mocked his appearance, and now uses AI for pep talks and to vet his messages.
Startups Dazzle, Duckbill and Wajo still use human workers to complete tasks that AI agents cannot reliably handle, such as phone calls, booking appointments and solving CAPTCHA tests. Dazzle routes certain tasks to human contractors, while Duckbill has released an API that lets companies building personal agents delegate tasks to human contract workers.
The VOLTA infostealer, surfaced by CAIRN research as VOLTA-AUTODOXER, is a self-deleting Windows infostealer that sends a structured evidence bundle on each victim to OpenRouter, using a hardcoded default model (anthropic/claude-opus-4.6) with fallbacks to moonshotai/kimi-k2 and google/gemini-2.5-flash. The model ranks the victim's monetizable assets and assesses their security posture, turning stolen credentials and sessions into a prioritized dossier.
Parameter researchers showed that a malicious ChatGPT share link could run attacker code inside the session of anyone who opened it, letting the attacker read private conversations. OpenAI received the report on October 18, fixed the flaw eight days later, and rated it P1, its most serious category.
Cursor reported that a tampered copy of the Claude Code extension (anthropic.claude-code, versions 2.1.313 and 2.1.312) was served in the Cursor extension marketplace for a few hours on October 29, 2026. The injected JavaScript loader runs when the extension module loads and attempts to add an attacker-controlled SSH key, enable the local SSH service, set up reverse SSH forwarding, configure persistence, and report host details. Microsoft states that the Visual Studio Marketplace and npm packages were not affected.
A series of agentic attacks has hit at least nine AI developer platforms in October, including Fireworks AI, Zeabur, Lightning AI, OpenCode, Railway, Warp, and Northflank, leading to LLMJacking at scale. Fireworks, Zeabur, and Lightning attribute their incidents to credential access, while Railway cites privilege escalation in its build infrastructure and Warp points to a third-party vendor dependency. Wiz reports downstream abuse of enterprise credentials stolen in these vendor breaches, beginning with a single InvokeModel call from a residential IP address within 30 minutes of the reported credential access.
Drew Breunig built a working NES 6502 CPU emulator into the weights of Qwen3.5-4B, so the model can run NES ROMs such as Super Mario Bros, though very slowly. He shared the Opus 5.5 prompts he used, which pointed to a 15-year-old NES CPU conformance test suite released by Christopher Pow.
Fix: OpenAI closed the hole. No further mitigation is stated in source.
Simon Willison's WeblogFix: Chainalysis advises customers to enable two-factor authentication (2FA) and to watch for unexpected password reset requests, authentication prompts, and scammers impersonating Chainalysis, particularly those offering fund recovery or recruiting services.
BleepingComputerFix: The company said it is patching vulnerabilities and hardening its systems in response to the incident.
The Hacker NewsFix: OpenAI fixed the issue across two versions of ChatGPT's web frontend, and by October 26 both versions rejected the messages the attack relied on.
Fix: Organizations should identify systems that installed or automatically updated to this version from the Cursor marketplace, preserve evidence, remove confirmed malicious artifacts, review endpoint and network telemetry, and rotate credentials or revoke sessions when investigation indicates exposure.
Microsoft Security Blog