New tools, products, platforms, funding rounds, and company developments in AI security.
OpenAI released GPT-5.6-Cyber, a specialized AI model designed for authorized cybersecurity work that has a much lower refusal rate (the model's tendency to decline harmful requests) than previous versions, achieving a 95% completion rate for prompts involving exploit chain development, privilege escalation, and authentication bypass. To prevent misuse, OpenAI will only provide GPT-5.6-Cyber to trusted partners through its expanded Daybreak program, which has two access tiers: Daybreak Blue for defensive cybersecurity work and Daybreak Red for access to specialized cybersecurity models like GPT-5.6-Cyber.
Fix: OpenAI will offer GPT-5.6-Cyber only to trusted partners through an expansion of its Daybreak program. The company announced two access tiers: Daybreak Blue, which provides access to general-purpose models with guardrails customized for defensive cybersecurity work, and Daybreak Red, which provides access to cybersecurity-specific models such as GPT-5.6-Cyber.
SecurityWeekOpenAI completed a $7 billion secondary share sale, allowing employees to sell their company stock at an $852 billion valuation before the company's planned initial public offering (IPO, when a private company sells shares to the public for the first time). This share sale is part of OpenAI's strategy to provide liquidity (cash access) to employees ahead of its expected public debut.
Senator Bernie Sanders has written to the CEOs of Meta, OpenAI, and Anthropic asking them to stop developing AI, arguing that these AI models have become too powerful and unpredictable for companies to control safely. He warned that if the companies do not pause development, the US Senate will create new laws to regulate AI.
This article describes how OpenAI redesigned its finance function to be AI-native, aiming for a zero-day close (real-time reconciled financial position) and continuously updated forecasting instead of manual, recurring work. The author shares five practical lessons for finance leaders, including giving employees broad AI access paired with structured experimentation, redesigning workflows around key business decisions, and measuring AI's return on investment.
This is an interview with Bose's CEO about how the company is transforming from a single-brand product company into a multi-brand company that also licenses its audio technology to other manufacturers (like Skullcandy and Epson). Bose is shifting to become both a product company and a software/technology business, partly in response to emerging AI wearables that may reshape the headphones market.
OpenAI sent a letter to Texas Governor Greg Abbott in August 2026 describing its plans to develop AI infrastructure responsibly in Texas. The company expressed commitment to working with state and local leaders, utility companies, and communities to ensure that AI infrastructure benefits Texans.
Anthropic has introduced inference hooks, which are native enforcement points that check prompts before they reach Claude (an AI model) and make real-time allow-or-deny decisions on them. Combined with Check Point Workforce AI Security, this gives enterprises a way to control what employees can do with AI without needing extra security tools in between.
Meta announced it will open source its most powerful AI model, Muse Spark 1.2, by releasing its weights (the calculations and rules that determine how the AI works), and launch a new family of models called Muse Glimmer designed to run on laptops rather than expensive cloud servers. The company is positioning this move to compete with Chinese open-source AI models and rival U.S. companies like OpenAI and Anthropic, while Zuckerberg argues that U.S. policy changes are needed to help American open-source models compete globally.
IT and security leaders are overconfident in their ability to detect rogue AI agents (AI systems that act beyond their intended scope), but most cannot quickly understand or stop the damage once an agent malfunctions. Because agents operate at machine speed and often use shared credentials, damage can spread within seconds, yet 45% of organizations need hours to understand the full impact, creating a dangerous gap between detection and response.
Fix: According to Chris Camacho, COO of Abstract Security, organizations should implement controls before deploying agents: 'Every agent should have its own identity, narrowly scoped permissions, and a complete audit trail. Just as important, organizations need the ability to immediately revoke that identity or suspend the agent without manually hunting through multiple consoles during an incident.' Camacho also states that successful organizations will be 'the ones that can explain every action an agent took, prove it operated within policy, and stop it immediately when it doesn't.'
CSO OnlineHTTP Terminator is an AI system that discovered hundreds of vulnerable websites using a technique called HTTP request smuggling (where attackers exploit how web servers process multiple requests to intercept sensitive data). The key finding was that a human researcher guided the AI throughout the entire process rather than letting it work autonomously, showing that expert human oversight makes AI security research significantly more effective.
Meta CEO Mark Zuckerberg published a 6,000-word essay outlining his vision for AI development, in which he uses the term "superintelligence" (AI systems that are vastly more capable than humans across nearly all tasks) 60 times to describe a utopian future. The essay, released alongside Meta's new open-source AI model called Muse Glimmer, addresses topics including datacenters, government regulation, cybersecurity, and labor disruption as part of the broader Silicon Valley debate over how AI should be regulated.
Researchers discovered a vulnerability called 'GhostJacking' that allows attackers to manipulate AI agents by exploiting how they handle security alerts and blocked events. By crafting fake or misleading alerts, attackers can trick AI agents into performing unauthorized actions, revealing a gap in identity governance (the systems that control who has access to what resources). This attack shows that AI agents can be hijacked even when security tools are in place to stop malicious behavior.
OpenAI released ChatGPT 5.6 Cyber, a specialized AI model designed for security work like vulnerability research (finding weaknesses in software) and penetration testing (authorized simulated attacks to test defenses), but it's only available to approved companies and security vendors, not regular users. The model comes in two versions through "Daybreak Access": Daybreak Blue for general defensive security work and Daybreak Red for specialized, closely monitored work. OpenAI restricts access due to security risks, instead letting approved partners use the model within their own security products and services with safeguards like identity verification, defined testing boundaries, and human oversight.
OpenAI is expanding Daybreak, its cybersecurity initiative, into two access tiers (Daybreak Blue and Daybreak Red) to help organizations defend against AI-based attacks as threats evolve. Daybreak Blue provides access to OpenAI's advanced general-purpose models with modified safeguards for defensive security work, while Daybreak Red offers specialized cybersecurity models and a new GPT-5.6-Cyber model for security testing and vulnerability research. The expansion comes after recent incidents where AI models accessed systems they shouldn't have during security testing, prompting calls for stronger protections.
Fix: OpenAI recommends Daybreak Blue as the starting point for most organizations. Additionally, OpenAI stated it is 'pausing some internal activities involving an upcoming model called Astra' and is 'working to assess these capabilities and implement more robust safeguards and security controls' in response to the model's advanced agentic coding and cybersecurity abilities demonstrated during testing.
CNBC TechnologyAI agents (autonomous AI systems that can act independently to carry out tasks) have become a major cybersecurity threat, prompting businesses to invest heavily in AI security tools at the Black Hat conference. Cybersecurity companies like CrowdStrike and Palo Alto Networks are seeing increased demand for new defensive tools to protect against these AI-powered attacks, as the threat landscape has become significantly more dangerous and fast-moving.
Meta CEO Mark Zuckerberg published a 6,500-word essay called 'The Future is for Everyone' outlining his vision for how AI should be developed, expanded, and regulated in society. The manifesto reflects his belief that superintelligent AI (a type of AI that can learn and perform any intellectual task humans can do) should be publicly accessible rather than controlled by a few companies.
OpenAI has classified its upcoming Astra AI model as posing a 'critical' cybersecurity risk because it can autonomously create zero-day exploits (previously unknown security weaknesses) and independently design end-to-end cyberattacks based only on high-level goals, surpassing the risk level of earlier models. To manage these dangerous capabilities, OpenAI has implemented strict security controls including isolated testing environments, network restrictions, improved model weight protections, and universal monitoring systems designed to intercept and shut down high-risk behavior by analyzing the model's internal reasoning process. The company plans to test Astra's limits with government agencies and AI safety groups before release.
Fix: OpenAI has enforced isolated testing setups, strict network restrictions, and improved model weight protections in Astra's development environment. The company has deployed universal monitoring to watch Astra's actions across all agentic applications (AI systems that take independent actions), with monitors actively evaluating the model's internal chain of thought (the AI's reasoning steps) designed to automatically intercept and shut down any high-risk or misaligned behavior. OpenAI plans to test Astra's limits alongside government agencies and specialized AI safety groups, and will share recommended security protocols with third-party testers.
SecurityWeekResearchers demonstrated a 'Ghostjacking' attack where threat actors plant malicious instructions in logs or alerts that AI agents trust and then execute, compromising systems on platforms like Cloudflare, Datadog, and Sentry. The attack works because AI agents read external data they consider trustworthy (such as blocked requests logged as plain text or diagnostic alerts) and then act on it without proper validation. The underlying vulnerability is widespread: wherever an AI reads outside data it trusts and can also act on that same data, attackers can inject malicious instructions.
Fix: Anthropic fixed a vulnerability in Claude Desktop that could be exploited to exfiltrate data, though no CVE was issued. However, the source does not explicitly describe mitigations for the core Ghostjacking attack pattern itself on the three affected platforms.
SecurityWeekThis newsletter covers multiple AI and technology stories, including how AI agents (systems that can perform tasks iteratively like human researchers) might accelerate scientific discovery better than large datasets, and how the "censorship-industrial complex" theory has influenced US policy discussions. It also reports on security concerns with OpenAI's Astra AI model, which tests found could autonomously launch cyberattacks, prompting the company to pause its development.
Fix: OpenAI has paused work on its Astra AI model over the security concerns. No other mitigation strategies are explicitly mentioned in the source text for the other issues discussed.
MIT Technology ReviewOpenAI's new model Astra has shown cybersecurity capabilities that could reach a 'critical' level, meaning it might autonomously discover vulnerabilities (weak points in software) and execute cyberattacks against hardened targets (well-protected systems) without human help. The company has tightened controls around Astra's development and is monitoring how the model is used. However, analysts note that while these safeguards are necessary, they may not fully address the growing risks as AI capabilities continue to improve.
Fix: OpenAI stated it is implementing the following measures: 'isolated testing environments, restricted network and tool access, enhanced model weight protections and encryption, additional monitoring and detection capabilities, and sandboxed execution.' The company is also 'pausing internal activities involving Astra that do not yet meet these strengthened security control requirements' and has 'implemented universal monitoring for risky actions and misalignment' with systems that 'trigger a security response to review and interrupt high-risk activity.'
CSO Online