New tools, products, platforms, funding rounds, and company developments in AI security.
OpenAI is testing advertisements in ChatGPT, starting with U.S. users on free and low-cost subscription tiers while keeping paid tiers ad-free. The company says ads don't influence ChatGPT's answers, keeps conversations private from advertisers, and is expanding the pilot to multiple countries including Canada, Australia, the United Kingdom, and others.
This article discusses testimony from Shivon Zilis in the Musk v. Altman trial, where she revealed she is the mother of four of Elon Musk's children and has worked across his AI companies (Tesla, Neuralink, and OpenAI) since 2017. The piece questions her role and influence in Musk's AI ventures, noting she met Musk through OpenAI and had a romantic relationship before becoming colleagues.
This article describes a legal case where Elon Musk is suing OpenAI, claiming that the company's leaders broke their founding agreement by converting OpenAI from a non-profit (an organization that doesn't aim to make money for owners) to a for-profit business. Shivon Zilis, an executive at Musk's company Neuralink, testified in the case after serving on OpenAI's board. The article is about a business and legal dispute, not a technical AI security issue.
Anthropic's CEO reported that the company experienced 80-fold growth in revenue and usage during the first quarter, far exceeding their planned 10-fold growth, which has created severe strain on their computing infrastructure. To address the shortage, Anthropic signed a deal with SpaceX to access over 300 megawatts of computing capacity from the Colossus 1 data center in Memphis, Tennessee, and is working to increase capacity through other agreements including a multibillion-dollar deal with Amazon.
Snap reported first-quarter earnings that met revenue expectations but provided cautious guidance for the next quarter, partly due to ending its $400 million partnership with Perplexity (a generative AI startup that creates search engines). The company also cited uncertainty from the geopolitical situation in the Middle East as a factor affecting its sales outlook.
Google has shut down Project Mariner, an experimental AI feature that could automatically perform tasks for users across the web, as of May 4th, 2026. The company stated that the technology has been integrated into other Google AI products, particularly Gemini Agent (an AI that can perform multiple actions autonomously). Project Mariner was originally announced in December 2024 and could handle up to 10 tasks at once before being discontinued.
This article discusses political developments around AI policy in the White House, specifically reporting that the administration was considering government review of AI models before their release. The piece appears to analyze shifts in policy direction related to AI regulation and governance.
This article reports on testimony from Shivon Zilis, a former OpenAI board member, in a lawsuit where Elon Musk is trying to reverse OpenAI's shift to a for-profit company structure. Zilis, who has worked across multiple Musk companies and served as an OpenAI advisor and director, revealed details about her personal relationship with Musk, including that he offered to father her children in 2020, which resulted in four children together. The article discusses potential conflicts of interest, as OpenAI leaders claim they trusted Zilis to manage the conflict of interest (a situation where someone's personal relationships or financial stakes could bias their decisions) created by her relationships with both Musk and OpenAI.
AWS has released a compliance guide for ISO/IEC 42001:2023, which is an international standard for managing AI systems responsibly. The guide helps organizations design and operate an AI Management System (AIMS, a set of policies and controls for governing AI) on AWS by mapping the standard's requirements to specific AWS services and explaining how to collect evidence for compliance audits. While AWS provides secure infrastructure and tools, organizations remain responsible for defining their own AI governance scope, implementing the required controls, and proving they meet the standard during certification.
Mira Murati, OpenAI's former Chief Technology Officer (CTO, a senior technical leader), testified in court that CEO Sam Altman lied to her about whether a new AI model needed safety review before being released to users. Murati stated under oath that Altman falsely claimed the legal department had approved skipping the company's safety review process, when this was not true.
Anthropic announced a deal with SpaceX to use over 300 megawatts of compute capacity (computing power) from SpaceX's Colossus 1 data center in Memphis, Tennessee, with plans to develop gigawatts of capacity in space. This agreement aims to improve service for Anthropic's paid Claude Pro and Claude Max subscribers, following the company's recent statement that demand has strained its infrastructure and affected reliability during peak hours.
This live blog covers Anthropic's Code w/ Claude 2026 event, where the company announced increased rate limits for developers, a partnership with SpaceX to use their Colossus data center for capacity, and three new Claude Managed Agents features: multi-agent orchestration (coordinating multiple AI agents to work together), outcomes-based iteration (setting success criteria for agents to achieve), and "Dreaming" (where agents review past sessions to self-improve). The blog notes that API volume has grown 17x year-over-year and highlights the importance of tool use, long context windows (allowing AI to process more information), and agentic loops (repeated cycles of agent reasoning and action) in modern AI development.
WiseTech, a logistics software company, announced in February that it would cut 2,000 jobs due to advances in AI, but three months later employees still don't know which positions will be eliminated. The company's founder claimed that AI agents could learn human jobs in just 15 minutes, leaving workers stressed about the prolonged uncertainty.
Microsoft is reorganizing its leadership structure following the retirement of executive Rajesh Jha. Ryan Roslansky, who previously led LinkedIn and then Office, is now taking on expanded responsibilities to head a new Work Experiences Group that includes Microsoft Teams, Office, and other products.
AlphaEvolve is a Gemini-powered coding agent (an AI system that writes and optimizes code) that helps design and improve algorithms across science and industry. The system has achieved significant results including improving DNA sequencing accuracy by 30%, increasing electricity grid optimization from 14% to 88%, and enabling quantum computing simulations with 10x lower error rates.
Google Chrome is automatically downloading a large 4GB file called weights.bin (a set of numerical values that power an AI model) to users' computers when certain AI features are enabled, which is unexpectedly consuming significant storage space. This file contains Google's Gemini Nano AI model, which runs Chrome's features like scam detection and writing assistance.
Fix: Anthropic is working as quickly as possible to provide more computing capacity and will pass that compute on to users as soon as possible. The company has inked several compute deals in recent weeks, including a deal with SpaceX for over 300 megawatts of capacity at the Colossus 1 data center and a multibillion-dollar agreement with Amazon.
CNBC TechnologyFix: The guide provides implementation guidance including: mapping ISO 42001:2023 clauses 4-10 and Annex A controls to AWS services; recommendations for evidence collection, documentation, and audit readiness using AWS native tooling; and best practices for operationalizing AI compliance activities through automation and infrastructure-as-code. Organizations are directed to download the full ISO/IEC 42001:2023 on AWS Compliance Guide and contact AWS Security Assurance Services for further assistance.
AWS Security BlogModern security operations centers (SOCs, teams that monitor and respond to cyber attacks) are shifting from rule-based automation to AI-driven automation that helps human analysts make better decisions faster. Microsoft was named a leader in this space for evolving its security tools, including features like automatic attack response, AI-powered phishing detection, incident prioritization, and AI agents that can reason across multiple security signals and assist analysts with decision-making.
Simon Willison discusses how vibe coding (using AI to generate code without understanding or reviewing it) and agentic engineering (using AI tools while maintaining professional standards and code quality) are becoming harder to distinguish in practice. As AI coding tools become more reliable, even experienced engineers like Willison find themselves not reviewing all AI-generated code in production systems, which blurs the line between the two approaches and raises questions about responsible software development.
This article is a retrospective review by Dark Reading marking their 20th anniversary, highlighting 20 major news events from the past two decades that have significantly influenced the cybersecurity industry and the threat landscape that security teams face today. The piece spans from Stuxnet (a sophisticated malware attack on industrial systems) to ChatGPT (a large language model AI), showing how the security field has evolved over time.
AI agents are being deployed in enterprises much faster than companies can manage them, creating a visibility problem because traditional identity and access management (IAM, systems that control who can access what) was designed for human users, not continuously-running software agents. About half of enterprise identity activity already happens outside the view of central IAM tools, leaving organizations unable to see what AI agents are operating, what data they access, or what permissions they use. The source describes using observability tools (systems that let you see what's happening) built into applications to discover AI agents and check compliance with security standards like NIST (the National Institute of Standards and Technology).
Fix: The source describes a capability called "Ask Orchid" built into Orchid Security's platform that applies identity observability at the application level to: automatically discover AI agents and their risk profiles, identify where AI agents are not in use for a complete picture, and provide recommended actions for oversight. For compliance checking, the same tool can examine how identity controls are actually implemented inside applications and compare them against NIST requirements.
The Hacker News