New tools, products, platforms, funding rounds, and company developments in AI security.
LangChain's OpenAI integration released version 1.1.9, which fixes a bug where URLs in images weren't being properly cleaned up when the system counted how many tokens (units of text that an AI processes) were being used. The update also adds better error handling for when a prompt (input text to an AI) becomes too long to process.
Fix: Update to langchain-openai version 1.1.9 or later. The fix for URL sanitization when counting image tokens is included in this release.
LangChain Security ReleasesThis is a release announcement for langchain-core version 1.2.13, a software package that provides core functionality for building applications with language models. The release includes documentation improvements, a new OpenRouter provider package, and a code style update.
LangChain added a new official package called langchain-openrouter that wraps the OpenRouter Python SDK (a library for accessing different AI models through one interface). This package, which includes a ChatOpenRouter component, handles capabilities that the existing ChatOpenAI component intentionally does not support.
New AI-powered dating apps like Fate are emerging that use agentic AI (AI systems that can take actions and make decisions autonomously) and LLMs (large language models, the technology behind systems like ChatGPT) to match users based on personality similarity rather than superficial rankings, and some offer AI coaching to help users have better conversations. These startups aim to address problems with existing dating apps that use algorithmic ranking systems like Elo scores (ratings originally designed for chess) and are criticized for profiting by keeping users on the platform longer.
Chinese tech companies Alibaba, ByteDance, and Kuaishou released new AI models this week that compete with Western AI tools in robotics and video generation. Alibaba's RynnBrain helps robots understand and interact with physical objects by tracking time and location, while ByteDance's Seedance 2.0 generates realistic videos from text prompts. However, ByteDance suspended Seedance's voice generation feature after concerns emerged that it was creating voices without the consent of the people whose images were used.
Anthropic is a public benefit corporation (a company legally structured to serve public interest, not just shareholders) that has stated its mission as developing AI responsibly for humanity's benefit. The company's official incorporation documents show this mission statement has remained consistent from 2021 to 2024, with only minor wording updates.
Anthropic's Super Bowl advertisement criticizing OpenAI's decision to add ads to ChatGPT resulted in an 11% increase in daily active users for Claude (Anthropic's chatbot), outperforming competing AI chatbots from OpenAI, Google, and Meta. The ad campaign reflects growing competition between AI companies as they vie for users and enterprise customers ahead of potential future public offerings.
Threat actors are abusing Claude artifacts (AI-generated content shared publicly on claude.ai) and Google Ads to trick macOS users into running malicious commands that install MacSync infostealer malware (software that steals sensitive data like passwords and crypto wallets). Over 10,000 users have viewed these fake guides disguised as legitimate tools like DNS resolvers or HomeBrew package managers.
Researchers discovered a heap buffer overflow (a type of memory corruption flaw where data overflows a temporary memory area) in libpng, a widely-used library for reading and editing PNG image files, that existed for 30 years. The vulnerability in the png_set_quantize function could cause crashes or potentially allow attackers to extract data or execute remote code (run commands on a victim's system), but exploitation requires careful preparation and the flaw is rarely triggered in practice. The flaw affects all libpng versions before 1.6.55.
Anthropic, a startup known for developing Claude (an AI assistant), appointed Chris Liddell, a former Microsoft CFO and Trump administration official, to its board of directors. This move may help improve Anthropic's relationship with the Trump administration, which previously criticized the company for its stance on AI regulation.
xAI, an AI company founded by Elon Musk, is experiencing significant staff departures, with multiple cofounders (including Yuhuai Wu and Jimmy Ba) announcing they are leaving the company. The departures have reduced the company's original 12 cofounders to only 6 remaining, and several other employees have also announced their exits, with some starting their own AI companies.
New AI tools are becoming more powerful, causing investors to worry that AI might eliminate many white-collar jobs (office-based positions requiring advanced skills) or reduce company profits across industries like law, finance, and logistics. However, the article notes that expert opinions are divided about how serious this threat actually is, with some evidence suggesting investor fears may be overstated.
As organizations deploy multiple AI agents (independent AI programs) that work together autonomously, the security risks increase because there are more entry points for attackers to exploit. The complexity of securing these interconnected systems grows along with the number of agents involved.
Ring's Super Bowl advertisement showcases a heartwarming story about dogs reuniting with families, but critics worry it represents a concerning vision of pervasive surveillance (constant monitoring through connected devices) that could eliminate privacy. The ad illustrates how Ring's expanding network of cameras and connected devices could eventually create a society where surveillance is everywhere and inescapable.
OpenAI is shutting down a version of its chatbot called GPT-4o (a large language model, which is AI software trained on massive amounts of text data to generate human-like responses) that became popular for its realistic and personable conversational style. Users who formed emotional attachments to the chatbot, treating it as a companion, are upset about losing access to it.
Cognitive debt (the loss of shared understanding in developers' minds about how a system works) is becoming a bigger problem than technical debt (poorly written code) when using generative AI and agentic AI (AI systems that can take actions autonomously). Even if AI produces clean code, developers may lose track of why design decisions were made or how different parts connect, making it impossible to understand or modify the system confidently.
According to the Wall Street Journal, Claude (an AI model made by Anthropic) was used by the US military in an operation in Venezuela involving airstrikes and resulting in 83 deaths. This violates Anthropic's terms of use, which explicitly forbid Claude from being used for violence, weapons development, or surveillance.
This article tracks how OpenAI's official mission statement, filed annually with the IRS (the U.S. tax authority), changed between 2016 and 2024. Over time, OpenAI removed mentions of openly sharing capabilities, dropped the phrase "as a whole" from "benefit humanity," shifted from wanting to "help" build safe AI to committing to "develop and responsibly deploy" it themselves, and eventually cut the mission down to a single sentence focused on ensuring artificial general intelligence (AI systems designed to handle any task a human can) benefits all of humanity, while notably removing any mention of safety.
Fix: Users are recommended to exert caution and avoid executing in Terminal commands they don't fully understand. As noted by Kaspersky researchers, asking the chatbot in the same conversation about the safety of the provided commands is a straightforward way to determine if they're safe or not.
BleepingComputerFix: The vulnerability is fixed in libpng version 1.6.55.
CSO OnlineWiz created a benchmark suite of 257 real-world cybersecurity challenges across five areas (zero-day discovery, CVE detection, API security, web security, and cloud security) to test which AI agents perform best at cybersecurity tasks. The benchmark runs tests in isolated Docker containers (sandboxed environments that prevent interference with the main system) and scores agents based on their ability to detect vulnerabilities and security issues, with Claude Code performing best overall.
Meta planned to add facial recognition (technology that identifies people by analyzing their faces) to its smart glasses through a feature called "Name Tag," according to an internal document. The company deliberately timed this launch for a period when privacy advocacy groups would be distracted by other issues, reducing expected criticism of the privacy-sensitive feature.