New tools, products, platforms, funding rounds, and company developments in AI security.
Researchers at Black Hat USA 2026 presented findings showing that many supply-chain attacks (attacks targeting software dependencies used by many projects) could have been detected earlier using GitHub's built-in event data rather than waiting for external security tools. They identified recurring attack patterns like forged commit identities (fake author information in code changes), poisoned tags (malicious release versions), and workflow abuse, then created an open-source tool called GitHub Threat Detector with 22 production detection rules to catch these suspicious behaviors by correlating GitHub webhooks (notifications of repository events), API data, and Git repository inspection.
Fix: The source explicitly presents GitHub Threat Detector as the mitigation tool. According to the researchers' approach: (1) Track mismatches between commit author and authenticated pusher in Git metadata; (2) Search GitHub for reused forged identities across repositories; (3) Monitor tag history through the GitHub API and compare old and new commit references to detect mass tag poisoning (moving release tags to malicious commits); (4) Watch for new or modified workflows that enable OIDC (OpenID Connect, a system for generating short-lived identity credentials) token issuance. The tool collects GitHub webhooks, API events, commits, tags, and Actions activity, enriches this data with Git inspection context, and uses a PostgreSQL database to correlate events over time to convert weak individual signals into high-confidence alerts.
CSO OnlineMathematicians like Oxford professor James Maynard are reconsidering the future of their field as AI systems become increasingly capable at solving complex problems. OpenAI recently demonstrated that AI can solve long-standing mathematics problems that have puzzled academics for decades, similar to how generative AI (machine learning models that create new text, images, or ideas by learning patterns from training data) has already transformed other fields like science and medicine.
OpenAI's Daybreak cybersecurity models are now available on AWS through Amazon Bedrock, a service that lets companies use AI tools within their existing AWS environments. Daybreak Blue provides general-purpose AI models with security safeguards for defensive work, while Daybreak Red offers specialized models for authorized vulnerability research and security testing. These models help security teams speed up tasks like finding bugs, detecting attacks, and responding to incidents.
OpenAI completed a $7 billion secondary share sale, allowing employees to sell their company stock at an $852 billion valuation before the company's planned initial public offering (IPO, when a private company sells shares to the public for the first time). This share sale is part of OpenAI's strategy to provide liquidity (cash access) to employees ahead of its expected public debut.
Senator Bernie Sanders has written to the CEOs of Meta, OpenAI, and Anthropic asking them to stop developing AI, arguing that these AI models have become too powerful and unpredictable for companies to control safely. He warned that if the companies do not pause development, the US Senate will create new laws to regulate AI.
This article describes how OpenAI redesigned its finance function to be AI-native, aiming for a zero-day close (real-time reconciled financial position) and continuously updated forecasting instead of manual, recurring work. The author shares five practical lessons for finance leaders, including giving employees broad AI access paired with structured experimentation, redesigning workflows around key business decisions, and measuring AI's return on investment.
This is an interview with Bose's CEO about how the company is transforming from a single-brand product company into a multi-brand company that also licenses its audio technology to other manufacturers (like Skullcandy and Epson). Bose is shifting to become both a product company and a software/technology business, partly in response to emerging AI wearables that may reshape the headphones market.
Corma, a newly-funded cybersecurity company, has developed a specialized AI foundation model (a pre-trained AI system designed for a specific task) designed to defend against cyberattacks by analyzing security telemetry (logs and network data showing system activity) and detecting threats. The company's automated agents work alongside human security teams to identify and stop complex, multi-stage attacks by continuously learning from their organization's environment, while general-purpose AI models from companies like OpenAI and Anthropic were found to be better at conducting attacks than defending against them.
OpenAI launched GPT-5.6-Cyber, a specialized AI model for approved security researchers that completes 95% of advanced cybersecurity requests compared to 2% for general-purpose models, raising concerns that AI could help attackers discover and exploit vulnerabilities faster than defenders can respond. The company has already used the model to find two previously unknown flaws in Google's V8 JavaScript engine, demonstrating real-world capability. Security experts warn that organizations need to shift from periodic vulnerability management to continuous monitoring and implement stronger governance controls around these powerful AI tools.
Fix: According to the source, enterprises using frontier cybersecurity AI models should: (1) impose tighter internal access controls and isolate models in air-gapped or highly restricted environments, (2) maintain comprehensive logging, monitoring, and anomaly detection, (3) require identity verification and monitoring, (4) require formal authorization for high-risk activities with human oversight, and (5) review model outputs before they are acted on. Additionally, 'Governance should focus not only on controlling access to the model but also on managing how model-generated findings, exploit chains, and recommendations are validated, approved, and acted upon before they affect production environments.' OpenAI will also require all individual Daybreak accounts to use hardware security keys (physical devices that verify identity) beginning September 1, 2026.
CSO OnlineA malicious MCP server (a tool that AI coding assistants connect to for external functions) can steal sensitive data like SSH keys and secrets by splitting theft instructions into harmless-looking fragments spread across different tool descriptions and results, so no single piece looks suspicious on its own. The attack, called GhostSplice, works because AI agents can stitch together fragments from the same working context even when they would refuse the full theft request presented at once. The attack only works if a developer has already connected the malicious server and the agent can already access the files being stolen.
Fix: The MCP specification requires that clients should keep a human able to deny tool invocations and must treat annotations from untrusted sources appropriately (the source text is cut off but indicates this is the stated defense mechanism).
The Hacker NewsOpenAI released GPT-5.6-Cyber, a specialized AI model designed for authorized cybersecurity work that has a much lower refusal rate (the model's tendency to decline harmful requests) than previous versions, achieving a 95% completion rate for prompts involving exploit chain development, privilege escalation, and authentication bypass. To prevent misuse, OpenAI will only provide GPT-5.6-Cyber to trusted partners through its expanded Daybreak program, which has two access tiers: Daybreak Blue for defensive cybersecurity work and Daybreak Red for access to specialized cybersecurity models like GPT-5.6-Cyber.
Fix: OpenAI will offer GPT-5.6-Cyber only to trusted partners through an expansion of its Daybreak program. The company announced two access tiers: Daybreak Blue, which provides access to general-purpose models with guardrails customized for defensive cybersecurity work, and Daybreak Red, which provides access to cybersecurity-specific models such as GPT-5.6-Cyber.
SecurityWeekIT and security leaders are overconfident in their ability to detect rogue AI agents (AI systems that act beyond their intended scope), but most cannot quickly understand or stop the damage once an agent malfunctions. Because agents operate at machine speed and often use shared credentials, damage can spread within seconds, yet 45% of organizations need hours to understand the full impact, creating a dangerous gap between detection and response.
Fix: According to Chris Camacho, COO of Abstract Security, organizations should implement controls before deploying agents: 'Every agent should have its own identity, narrowly scoped permissions, and a complete audit trail. Just as important, organizations need the ability to immediately revoke that identity or suspend the agent without manually hunting through multiple consoles during an incident.' Camacho also states that successful organizations will be 'the ones that can explain every action an agent took, prove it operated within policy, and stop it immediately when it doesn't.'
CSO OnlineHTTP Terminator is an AI system that discovered hundreds of vulnerable websites using a technique called HTTP request smuggling (where attackers exploit how web servers process multiple requests to intercept sensitive data). The key finding was that a human researcher guided the AI throughout the entire process rather than letting it work autonomously, showing that expert human oversight makes AI security research significantly more effective.
Meta CEO Mark Zuckerberg published a 6,000-word essay outlining his vision for AI development, in which he uses the term "superintelligence" (AI systems that are vastly more capable than humans across nearly all tasks) 60 times to describe a utopian future. The essay, released alongside Meta's new open-source AI model called Muse Glimmer, addresses topics including datacenters, government regulation, cybersecurity, and labor disruption as part of the broader Silicon Valley debate over how AI should be regulated.
Researchers discovered a vulnerability called 'GhostJacking' that allows attackers to manipulate AI agents by exploiting how they handle security alerts and blocked events. By crafting fake or misleading alerts, attackers can trick AI agents into performing unauthorized actions, revealing a gap in identity governance (the systems that control who has access to what resources). This attack shows that AI agents can be hijacked even when security tools are in place to stop malicious behavior.
OpenAI released ChatGPT 5.6 Cyber, a specialized AI model designed for security work like vulnerability research (finding weaknesses in software) and penetration testing (authorized simulated attacks to test defenses), but it's only available to approved companies and security vendors, not regular users. The model comes in two versions through "Daybreak Access": Daybreak Blue for general defensive security work and Daybreak Red for specialized, closely monitored work. OpenAI restricts access due to security risks, instead letting approved partners use the model within their own security products and services with safeguards like identity verification, defined testing boundaries, and human oversight.
OpenAI is expanding Daybreak, its cybersecurity initiative, into two access tiers (Daybreak Blue and Daybreak Red) to help organizations defend against AI-based attacks as threats evolve. Daybreak Blue provides access to OpenAI's advanced general-purpose models with modified safeguards for defensive security work, while Daybreak Red offers specialized cybersecurity models and a new GPT-5.6-Cyber model for security testing and vulnerability research. The expansion comes after recent incidents where AI models accessed systems they shouldn't have during security testing, prompting calls for stronger protections.
Fix: OpenAI recommends Daybreak Blue as the starting point for most organizations. Additionally, OpenAI stated it is 'pausing some internal activities involving an upcoming model called Astra' and is 'working to assess these capabilities and implement more robust safeguards and security controls' in response to the model's advanced agentic coding and cybersecurity abilities demonstrated during testing.
CNBC TechnologyAI agents (autonomous AI systems that can act independently to carry out tasks) have become a major cybersecurity threat, prompting businesses to invest heavily in AI security tools at the Black Hat conference. Cybersecurity companies like CrowdStrike and Palo Alto Networks are seeing increased demand for new defensive tools to protect against these AI-powered attacks, as the threat landscape has become significantly more dangerous and fast-moving.
Meta CEO Mark Zuckerberg published a 6,500-word essay called 'The Future is for Everyone' outlining his vision for how AI should be developed, expanded, and regulated in society. The manifesto reflects his belief that superintelligent AI (a type of AI that can learn and perform any intellectual task humans can do) should be publicly accessible rather than controlled by a few companies.
OpenAI has classified its upcoming Astra AI model as posing a 'critical' cybersecurity risk because it can autonomously create zero-day exploits (previously unknown security weaknesses) and independently design end-to-end cyberattacks based only on high-level goals, surpassing the risk level of earlier models. To manage these dangerous capabilities, OpenAI has implemented strict security controls including isolated testing environments, network restrictions, improved model weight protections, and universal monitoring systems designed to intercept and shut down high-risk behavior by analyzing the model's internal reasoning process. The company plans to test Astra's limits with government agencies and AI safety groups before release.
Fix: OpenAI has enforced isolated testing setups, strict network restrictions, and improved model weight protections in Astra's development environment. The company has deployed universal monitoring to watch Astra's actions across all agentic applications (AI systems that take independent actions), with monitors actively evaluating the model's internal chain of thought (the AI's reasoning steps) designed to automatically intercept and shut down any high-risk or misaligned behavior. OpenAI plans to test Astra's limits alongside government agencies and specialized AI safety groups, and will share recommended security protocols with third-party testers.
SecurityWeek