Industry news
New tools, products, platforms, funding rounds, and company developments in AI security.
New tools, products, platforms, funding rounds, and company developments in AI security.
6,031 items
Australian Prime Minister Anthony Albanese released recommendations from a rapid review of a June breach of a Medicare statistics reporting service portal run by Services Australia. OpenAI will not face criminal penalties over the breach, but Albanese flagged changes to Australia's criminal law targeting future breaches by AI companies. The source lists recommended duties for AI developers, including maintaining security controls, mandatory incident notification and independent model evaluation.
Fix: Maintaining security controls across all stages of development and deployment. Identifying and managing serious risks associated with their models. Providing mandatory notification of incidents to the Australian government rapidly. Allowing independent evaluation of their models. Maintaining and publishing safety and security frameworks to ensure good governance, risk management and transparency. Responding to updated standards and rules as technologies change.
The Guardian TechnologyCogent Security combines OpenAI models with enterprise context to build Cyber Defense Factories that use AI agents to investigate vulnerabilities and carry out verified remediation. Its agents assess exposures, execute permitted changes and confirm the risk is eliminated, under policies enforced by its TRACE engine. Cogent reports that a Fortune 1000 automotive customer cut mean time to remediate critical vulnerabilities by 75%.
llm-anthropic 0.31 adds support for Anthropic's Fable 5.2 and Mythos 5.2 models, so users can run prompts against claude-fable-5.2 through the llm CLI. In the author's pelican-on-a-bicycle SVG tests, the max reasoning effort level returned no image, running out of tokens after 128,000 thinking tokens, a bug the author says also appeared with Opus 5.5 but not in Fable 5 or 5.1. Fable 5.2 is priced at $8 per million input tokens and $40 per million output tokens.
A developer used Claude Code to build Beep Locator, a browser-based system that triangulates a mysterious intermittent beep using several everyday devices as microphones. The system estimated the source to within about 40cm, which led to an old carbon monoxide detector needing new batteries. The approach builds on BeepBeep, a 2007 acoustic ranging paper by Peng, Shen, Zhang, Li and Tan.
Nvidia's chips underpin advanced AI development in the US, and the company has invested about $99 billion in frontier AI labs, neoclouds and infrastructure companies. Its CEO and cofounder Jensen Huang has become close with President Donald Trump, which the article presents as making him a valuable target for a foreign adversary.
CNBC's Jim Cramer said Anthropic's upcoming IPO could be a crucial test of investor confidence in the AI trade, arguing that AI stocks need it to make a real recovery. He noted that the billions spent on AI chips and data centers depend on developers like Anthropic generating enough revenue to justify them. The Wall Street Journal reported Anthropic is targeting a trading debut as early as Thursday or Friday of next week.
Microsoft's FORGE Lab found memory-safety bugs in Rust's standard library (std and core), including cases where safe Rust code can trigger undefined behavior. The team used Hyenas, its research version of codename MDASH, an AI-powered vulnerability-scanning system, to investigate three recurring patterns of misplaced trust in unsafe code. Two of the reported issues remained open at publication.
Cisco is adding Anthropic's Claude Mythos to Cisco AI Defense to augment its adaptive AI red teaming framework. The offering pairs attacker reasoning from the model with controls that limit testing to authorized targets, attribute operations to a named operator, and keep full audit trails.
Google DeepMind introduced Gemini Robotics 2.5, a vision-language-action model that increases the range of skills robots can learn and the speed of learning them. Tested across more than 200 tasks, it reached a 96% success rate in a proof-of-concept with Apptronik's Apollo 2 humanoid on Mercedes-Benz production lines, and it is rolling out to robotics partners.
France has attributed a cyber-attack on supermarket refrigeration systems to hackers operating under Iran's Islamic Revolutionary Guard Corps. The attackers used default passwords to access fridge controls, raising temperatures so high that some units caught fire and forcing employees to discard spoiled meat and ice cream. A Sophos director said the attack's relatively unsophisticated nature fits Iranian capabilities, and a wave of similar defrosting hacks across Europe is presumed to be linked.
Apple has updated Logic Pro with a "Buy More Usage" option that sells one-time Intelligence Usage Packs for $49.99. The packs extend access to Apple Intelligence features that have usage limits because they rely on cloud-based AI models from OpenAI or Google Gemini. The update follows an early September support article that outlined those limits.
Amazon Bedrock AgentCore Memory gives AI agents persistent short-term and long-term memory, and memory content is automatically retrieved into future conversations. The post shows how to compose AgentCore's existing controls (IAM condition keys, namespace-variable validation, consolidation prompts and the ApplyGuardrail API) with an embedding-based semantic-drift signal into a write-time validation layer against memory poisoning, which it describes as a form of indirect prompt injection.
Anthropic released two new models on Monday, Claude Fable 5.2 and Claude Mythos 5.2, which the company says generate outputs 30% faster than their predecessors and cost 20% less than the 5.1 generation. The launch is the first frontier release since CEO Dario Amodei called for slowing AI development in September, and it comes as Anthropic prepares a potential IPO.
OpenAI has made ChatGPT Enterprise available through AWS Marketplace, letting organizations buy and manage it through their existing AWS purchasing and billing relationship and apply eligible spend toward AWS commitments. The same models and features available directly from OpenAI ship at the same time in the Marketplace version. Eligible customers can also access ChatGPT for Healthcare and ChatGPT for Financial Services there.
Anthropic announced two new models, Claude Fable 5.2 and Claude Mythos 5.2, which it says are built for demanding technical work. The company claims gains in coding, reasoning and vision, and faster output than the 5.1 versions.
Attackers can exploit a flaw in Claude's document-processing tool by creating a temporary file that Anthropic's AI assistant can access and run on a user's machine. The source describes the attack as running malicious code on Linux.
Scott Wiener, the California state senator who authored SB 1047 and SB 53, won a tight congressional race for Nancy Pelosi's open San Francisco seat and could help set federal AI policy. He said a METR report widely read as evidence of recursive self-improvement at Anthropic makes the need for regulation more urgent, and he hopes Congress will act before the end of the year.
Straiker reports detection results for its runtime security engine, which reached a 98.9% true positive rate at a 1.0% false positive rate for AI applications and a 96.58% true positive rate at a 0.31% false positive rate for AI agents, with a mean detection latency of 125 milliseconds per request. The company compares these figures with Claude Opus 5.5, GPT-6.1 Sol and Gemini 3.1 Pro, and notes that system-log detection shows a tradeoff between broader coverage and fewer false alerts.
On 60 Minutes, Trump said AI safety risks are overstated and can be managed, and that the DOJ is managing them. He said the DOJ told an unnamed leader of a major AI company to "get ready to go to jail" after a report of misuse, but he declined to name the person or company.
The Walt Disney Company has partnered with Adobe on a multiyear deal to develop proprietary "artist-led" generative AI models for Disney's production pipeline. The partnership was announced at Adobe's MAX conference and gives Disney early access to Adobe's latest technologies across its theme parks, cruise line and ESPN content.
Fix: The post's approach is to compose AgentCore's built-in controls into a defense-in-depth pattern on the memory write path, adding an embedding-based semantic-drift signal and a single ALLOW, QUARANTINE or DENY decision with quarantine isolation and alerting, without changes to agent code.
AWS Security Blog