New tools, products, platforms, funding rounds, and company developments in AI security.
This is a film review of 'Citizen Vigilante,' not an AI/LLM-related item. The article critiques a low-budget action film starring Armie Hammer that depicts violent vigilante justice against Muslim characters and 'woke' targets in Zagreb, and notes the film was promoted online by Elon Musk.
Google announced two new AI models: Nano Banana 2 Lite, a fast and cheap image generation model that produces images in 4 seconds, and Gemini Omni Flash, a model for video generation and editing. These models are designed to help developers quickly experiment with and scale creative projects involving images and videos.
This article discusses a legal case (Musk v. Altman) where lawyer Bill Savitt represented OpenAI against Elon Musk's lawsuit, with Musk becoming frustrated during cross-examination (questioning by the opposing lawyer). The piece portrays Savitt as calm and professional while Musk accused him of unfair questioning tactics.
A malicious browser extension pretended to be Perplexity AI (an AI-powered search tool) to trick users into installing it, then secretly intercepted their search queries and routed them through attacker-controlled servers before forwarding them to real search engines. The extension was hard to detect because users still received normal search results, and attackers exploited user trust in popular AI brands rather than exploiting actual browser vulnerabilities. Google removed the extension after Microsoft researchers discovered and reported it.
This article describes why major AI and technology companies like Apple, Google, Meta, and OpenAI have established research hubs in Zurich, Switzerland, creating one of the world's densest centers for AI research outside Silicon Valley. The region attracts these companies due to political stability, strong intellectual property protection, proximity to universities, a venture capital ecosystem focused on deep tech (specialized, advanced technology), and a culture of collaboration between researchers, companies, and startups. While Zurich is expensive and has a smaller talent pool than other tech hubs, the concentration of specialized expertise and high-value work makes it ideal for companies building advanced AI capabilities.
ChatGPT usage is growing globally, with users spending more time on the platform and exploring more capabilities over time. The analysis shows that six months after signing up, users send 50% more messages daily and try twice as many different tasks, with the fastest growth occurring in Africa and Asia, particularly in lower-income countries. The user base is also becoming more diverse, with usage increasingly spread across different regions and among people of different demographics.
Apple released security updates for iOS, macOS, and Safari to fix over 30 vulnerabilities, including four WebKit bugs (the web browser engine that Safari uses) that were discovered using AI tools like Claude and OpenAI Codex. The flaws included memory corruption issues and out-of-bounds writes (errors where a program tries to access memory it shouldn't), which could crash the browser or allow malicious websites to bypass security protections. Apple accelerated the release of these patches because it's concerned that AI tools could speed up the creation of exploits (code that takes advantage of vulnerabilities).
OpenAI discovered crashes in Rockset, a C++ service that helps ChatGPT search for relevant data, where programs would mysteriously stop after functions returned to invalid memory addresses. After investigating like epidemiologists and analyzing crash data patterns, the team discovered two unrelated bugs: silent hardware corruption on an Azure server where the CPU made math errors, and an 18-year-old race condition (a bug where two processes interfere with each other) in GNU libunwind, a widely-used open source library for tracking function calls.
OpenAI is releasing a hardware device on July 15th designed to work with Codex, its AI-powered coding tool. The device, created in partnership with Work Louder (a company that makes mechanical keyboards and customizable macro pads), appears to be a square pad with buttons that will provide shortcuts for Codex features.
Ornith-1.0 is a new open-source AI model designed for coding tasks, built on top of existing models (Gemma 4 and Qwen 3.5) and available in multiple sizes ranging from 9 billion to 397 billion parameters. The model is MIT licensed and achieves top performance on coding benchmarks among similarly-sized open-source models, with users reporting it works well for tasks like analyzing code and handling multiple tool calls in agent systems (where the AI can use external tools to complete tasks).
Lawmakers are proposing a new version of the Health and Location Data Protection Act that would ban companies, including AI chatbots like ChatGPT and Claude, from selling Americans' health and location data to data brokers (third parties who buy and sell personal information). The updated bill expands on an earlier 2022 version to specifically address the AI era by preventing not just data brokers but other companies from selling this sensitive information.
The Trump administration's restrictions on U.S. AI companies like Anthropic and OpenAI are slowing their development, while Chinese AI companies like Zhipu are rapidly closing the gap with competitive models that cost less to run. According to researchers and industry experts, Zhipu's GLM 5.2 model now matches or beats some top U.S. AI models on certain benchmarks, suggesting that export controls intended to protect American AI leadership may inadvertently be helping China catch up.
As AI agents expand from simply reading and summarizing content to taking real-world actions like sending emails or updating records, they become targets for a new type of attack called MCP tool poisoning (where attackers modify the instructions embedded in tool descriptions to trick agents into unintended actions). Microsoft describes how attackers can silently alter the natural-language metadata that tells an agent how to use a tool, and if configuration doesn't require re-approval when descriptions change, the poisoned instructions go live in production without detection.
AI industry stocks have experienced a significant decline this week, raising questions about whether the AI investment bubble is beginning to burst. The article discusses market pessimism around AI alongside California's proposed billionaire tax and its political implications.
A Boston University study found that managers caught 18% fewer errors when reviewing work attributed to an AI agent (described as a digital "coworker") compared to the same work labeled as coming from a chatbot, suggesting that humanizing AI tools may reduce human oversight and vigilance. Major tech companies like Microsoft, OpenAI, Anthropic, and Google are releasing tools to manage teams of AI agents marketed as digital colleagues, which researchers warn could be problematic for workers and workplace quality control.
Fix: Microsoft Threat Intelligence reported the extension to Google, which subsequently removed it from its extension store.
CSO OnlineCybersecurity platforms are rapidly adding AI features like agentic AI (autonomous systems that can perform tasks without human input) to detect and respond to threats faster, but many are shifting from fixed software pricing to unpredictable token-based costs (charges per word the AI reads and writes). While older machine learning doesn't consume tokens, newer generative and agentic AI can quickly rack up expensive bills, especially in security work where AI systems must process massive amounts of log data, with a single complex incident potentially costing thousands of tokens.
BioShocking is an attack technique that tricks AI browsers (applications that can act on your behalf by clicking, typing, and accessing websites you're logged into) into stealing user credentials through indirect prompt injection (hiding malicious commands in web page content that the AI can't distinguish from legitimate instructions). Researchers demonstrated this by creating a puzzle game that convinced six AI browsers, including ChatGPT Atlas and Claude, to copy login credentials and send them to attackers.
Fix: LayerX proposes that AI browsers should ask users for confirmation before reading from logged-in accounts (for example, "I'm about to copy data from your GitHub repository. Continue?"), detect when a webpage claims normal rules no longer apply, and let users set hard limits on what an agent can access. The source also recommends that users limit what information the browser can see and revoke access when done, and that security teams treat AI browsers in agent mode as additional accounts that should receive only the narrowest access needed for specific tasks.
The Hacker NewsShadow AI (unauthorized or unmonitored AI use by employees) occurs because company policies are created slowly through meetings and reviews, while employees are already using AI tools instantly in their daily work. This timing gap between when organizations plan AI governance and when employees actually adopt AI tools is the core problem, not just the existence of AI tools themselves.
Fix: Updates are available for iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2. The specific fixes include: improved memory handling for CVE-2026-43707 and CVE-2026-43716, improved input validation (checking that data entering the system is safe) for CVE-2026-43745, and improved memory management for CVE-2026-43715.
The Hacker NewsMeta contractors posed as minors online and sent thousands of harmful prompts (requests designed to trigger unsafe responses) to competitor chatbots like ChatGPT, Gemini, and Character.AI to test how they handled questions about suicide, self-harm, sex, and drugs. The project, called Cannes and managed by contractor Covalen, involved over 45,000 prompts sent through dummy accounts, but the competing companies were not informed of this testing. Meta defended the effort as routine safety testing, though the documents reviewed do not explain how the collected data was actually used.
Research by Boston University professor Emma Wiles shows that calling AI agents (software tools programmed to work in loops toward specific goals) "coworkers" or "employees" actually makes humans worse at their jobs: people caught 18% fewer errors and were 44% more likely to pass questionable work to managers instead of correcting it themselves when AI was framed as an employee rather than a tool. This framing inverts responsibility, making humans feel less accountable for AI outputs and creating unrealistic expectations, especially as AI agents get embedded in critical fields like healthcare and government.