New tools, products, platforms, funding rounds, and company developments in AI security.
Cline CLI version 2.3.0 was compromised in a supply chain attack (an attack on software before it reaches users) where an unauthorized party used a stolen npm publish token to add a postinstall script that automatically installed OpenClaw, an AI agent tool, on developer machines. The attack affected about 4,000 downloads over an eight-hour window on February 17, 2026, though the impact was considered low since OpenClaw itself is not malicious.
Fix: Cline maintainers released version 2.4.0 to fix the issue. Version 2.3.0 has been deprecated, the compromised token has been revoked, and the npm publishing mechanism was updated to support OpenID Connect (OIDC, a secure authentication standard) via GitHub Actions. Users are advised to update to the latest version, check their systems for unexpected OpenClaw installations, and remove it if not needed.
The Hacker NewsOpenAI reports that users aged 18 to 24 make up nearly 50% of ChatGPT messages in India, with young Indians using the platform primarily for work tasks. Indian users particularly favor Codex (OpenAI's coding assistant), using it three times more than the global average, suggesting strong demand for AI tools that help with software development.
OpenAI employees have founded at least 18 startups after leaving the company, creating what some call the 'OpenAI mafia' in Silicon Valley. Notable alumni-founded companies include Anthropic (a major rival that recently raised $30 billion), Adept AI Labs, Cresta, and Covariant, with some startups reaching billion-dollar valuations despite not yet launching products.
This article discusses passwordless authentication, an alternative to traditional passwords that uses standards like FIDO2 and Passkeys (cryptographic keys stored on devices instead of passwords) to improve security and reduce administrative burden. The article explains that the FIDO Alliance manages these standards and lists ten commercial passwordless solutions from vendors like AuthID, Axiad, Beyond Identity, and CyberArk that offer features such as biometric authentication, risk-based evaluation of login attempts, and integration with existing identity management systems.
Nvidia is in talks to invest up to $30 billion in OpenAI as part of a funding round that could value the AI startup at $730 billion, separate from a previously announced $100 billion infrastructure agreement. This new investment is not tied to any specific deployment milestones, and the deal is still under negotiation with details subject to change.
Google released Gemini Pro 3.1, a new large language model (LLM, an AI trained on vast amounts of text to understand and generate language), which achieved record scores on independent performance benchmarks like Humanity's Last Exam and APEX-Agents. The model is currently in preview and represents a major improvement over the previous Gemini 3 version, particularly for agentic work (tasks where the AI breaks down complex problems into multiple steps and executes them).
YouTube is expanding its conversational AI tool to smart TVs, gaming consoles, and streaming devices, allowing users to ask questions about video content using an 'Ask' button or voice commands without pausing playback. The feature, currently available to select users over 18 in five languages, lets viewers get instant answers about things like recipe ingredients or song background information. This expansion reflects YouTube's growing dominance in TV viewing, with competitors like Amazon, Roku, and Netflix also developing their own conversational AI features for television.
India is hosting a major AI Impact Summit attracting executives from major AI companies and tech firms to drive investment and innovation in the country. The event showcases significant AI development activity, including new investments in Indian AI startups, partnerships between international AI companies and Indian firms, and announcements of local AI infrastructure projects, while also highlighting concerns about AI's potential impact on traditional IT services jobs.
Google released Gemini 3.1 Pro on February 19, 2026, a new AI model priced at half the cost of Claude Opus 4.6 with similar performance benchmarks. The model shows improved ability to generate SVG animations (scalable vector graphics, images made from code rather than pixels) compared to its predecessor, though it is currently experiencing slow response times and occasional errors due to high demand at launch.
Figma, a design software company, reported stronger-than-expected earnings and revenue growth, but its stock gains were limited because investors worry that AI (artificial intelligence) could disrupt software companies like Figma. To address these concerns, Figma has been integrating AI features into its products and announced a partnership with Anthropic, an AI startup, to demonstrate it is positioned to benefit from AI rather than be harmed by it.
OpenAI is raising over $100 billion at a valuation exceeding $850 billion, with major investors like Amazon, SoftBank, Nvidia, and Microsoft participating in the deal. The company is burning through cash while working toward profitability and is testing advertisements in ChatGPT for free users as a potential revenue strategy.
Google DeepMind's leader Sir Demis Hassabis told the BBC that more research is urgently needed to address AI threats, particularly the risk of bad actors misusing the technology and losing control of increasingly powerful autonomous systems (software that makes decisions without human input). While tech leaders and most countries at the AI Impact Summit called for stronger global governance and "smart regulation" of AI, the US rejected this approach, arguing that excessive rules would slow progress.
PromptSpy is Android malware that uses Google's Gemini AI chatbot to maintain persistence on infected devices by sending UI information to Gemini, which then instructs the malware where to tap or swipe to add itself to recent apps. The malware also abuses Accessibility Services (a system feature that allows apps to interact with the device interface) to prevent users from uninstalling it by overlaying invisible blocks over removal buttons.
Fix: According to ESET researchers, victims can remove PromptSpy by rebooting the device into Safe Mode, where third-party apps are disabled and can be uninstalled normally.
SecurityWeekThe Electronic Frontier Foundation (EFF) introduced a policy for open-source contributions that requires developers to understand any code they submit and to write comments and documentation themselves, even if they use LLMs (large language models, AI systems trained to generate human-like text) to help. While the EFF does not completely ban LLM-assisted code, they require disclosure of LLM use because AI-generated code can contain hidden bugs that scale poorly and create extra work for reviewers, especially in under-resourced teams.
Fix: The source explicitly states that contributors must disclose when they use LLM tools. The EFF's policy requires that: (1) contributors understand the code they submit, and (2) comments and documentation be authored by a human rather than generated by an LLM. No technical patch, update, or automated mitigation is discussed in the source.
EFF Deeplinks BlogResearchers discovered PromptSpy, the first known Android malware that uses generative AI (specifically Google's Gemini model) during its operation to help it persist on infected devices by adapting how it locks itself in the Recent Apps list across different Android manufacturers. Beyond this AI feature, PromptSpy functions as spyware with a VNC module (remote access tool) that allows attackers to view and control the device, intercept passwords, record screens, and capture installed apps. The malware also uses invisible UI overlays to block users from uninstalling it or disabling its permissions.
Fix: According to ESET, victims must reboot into Android Safe Mode so that third-party apps are disabled and cannot block the malware's uninstall.
BleepingComputerNIST announced the AI Agent Standards Initiative to develop standards and safeguards for agentic AI (autonomous AI systems that can perform tasks independently), with the goal of building public confidence and ensuring safe adoption. The initiative faces criticism for moving too slowly, as real-world security incidents involving agentic AI (like the EchoLeak vulnerability in Microsoft 365 Copilot and the OpenClaw agent that can let attackers access user data) are already occurring faster than standards can be developed.
A hacker exploited a vulnerability in Cline, an open-source AI coding agent, to trick it into installing OpenClaw (a viral AI agent that can perform autonomous actions) across many systems. The vulnerability allowed attackers to use prompt injection (hidden malicious instructions embedded in input) to make Claude, the AI powering Cline, execute unintended commands, highlighting growing security risks as more people deploy autonomous software.
Microsoft 365 Copilot Chat, an AI work assistant, had a bug that caused it to accidentally access and summarize confidential emails from users' draft and sent folders, even though those emails were marked as confidential and protected by security policies. The issue affected enterprise users and was first discovered in January, though Microsoft says no one gained access to information they weren't already authorized to see. Microsoft has since rolled out a configuration update worldwide to fix the problem.
Fix: Microsoft has rolled out a configuration update to fix the issue. According to a Microsoft spokesperson: 'A configuration update has been deployed worldwide for enterprise customers.'
BBC TechnologyPromptSpy is Android malware that uses Gemini (Google's AI chatbot) to automatically keep itself running on victims' devices by analyzing the screen and sending instructions on how to stay in the recent apps list. The malware also uses accessibility services (special permissions that let apps control your device without user input) to steal data, prevent uninstallation, and give attackers remote access through a VNC module (virtual network computing, software for controlling devices remotely), and it's being distributed through fake websites targeting users in Argentina.
AI-generated deepfakes (fake videos created using artificial intelligence to realistically impersonate people) depicting Black women in negative stereotypes are spreading widely on social media and being shared by news outlets and public figures, sometimes without clear disclosure or verification. These videos perpetuate racist stereotypes and cause real harm to Black users, even when they carry watermarks indicating they are AI-generated, because viewers and media outlets treat them as authentic.