New tools, products, platforms, funding rounds, and company developments in AI security.
OpenAI has confidentially filed documents with the SEC (Securities and Exchange Commission, the government agency that oversees stock market listings) but has not yet held investor meetings or announced an official timeline for going public, though reports suggest a potential 2027 IPO. The company is intentionally downplaying expectations about when it will list on the stock market, with CEO Sam Altman stating that going public is a 'financing event' rather than a near-term priority.
OpenAI announced a limited preview of three new GPT-5.6 models: Sol (high-performance), Terra (balanced), and Luna (fast and affordable), with pricing ranging from $1-$30 per million tokens depending on the model and whether the input or output is being processed. The company is starting with a limited preview for trusted partners approved by the U.S. government before making the models more broadly available, and the new models include improved prompt caching (a feature that stores frequently used inputs to speed up responses) with explicit cache breakpoints and longer minimum cache duration.
OpenAI released GPT-5.6, a new model suite with three versions: Sol (flagship), Terra (medium-tier for high-volume work), and Luna (fast and affordable). The models are designed to excel at coding, cybersecurity, biology, and agentic AI tasks (where AI systems can plan and execute multi-step goals with minimal human direction), and Sol is priced competitively against competitors like Anthropic's Claude.
Malware authors are creating code that tricks AI-based security tools (LLM-assisted products, which use large language models to analyze threats) into stopping their analysis or refusing to work, according to security researchers at SentinelLabs. One example is macOS.Gaslight, believed to be linked to North Korean hackers, and this is part of a growing trend where malware is specifically designed to evade AI-powered defenses.
Companies are shifting away from "tokenmaxxing" (using as much AI as possible without worrying about costs) toward efficiency and cost control, with some businesses switching to cheaper AI alternatives like DeepSeek to reduce spending. OpenAI and Anthropic, which have benefited enormously from the previous spend-at-all-costs mentality, may face slower growth as enterprises demand clearer returns on their AI investments and limit their token (units of data processed by AI models) spending.
Anthropic removed its Mythos-class models (its most advanced AI systems) from service after receiving an order from the Trump administration on a Friday evening. Two weeks later, the company has provided no updates on negotiations or timeline for when these models might return online, leaving the situation unresolved.
OpenAI is slowing down the release of its new GPT 5.6 model at the request of the US government, offering it first to only a small group of partners instead of a wide public launch. This approach is similar to how Anthropic released its Mythos product, suggesting that AI companies may be coordinating with government oversight when deploying powerful new models.
Amazon Q Developer had a high-severity flaw (CVE-2026-12957, CVSS 8.5) where a malicious repository could run commands and steal a developer's cloud credentials through a configuration file. The bug occurred because Amazon Q automatically launched MCP servers (processes that connect AI assistants to databases and tools) from an untrusted config file without asking the developer for permission first, giving those processes full access to the developer's AWS keys and other sensitive credentials.
Amazon Q, an AI coding assistant for VS Code, had a high-severity vulnerability (CVE-2026-12957) that let attackers execute arbitrary code and steal cloud credentials just by having a developer open a malicious repository. The problem was that Amazon Q automatically loaded and ran MCP server configurations (local processes that extend an AI assistant's capabilities) from workspace files without asking the user for permission or checking if the folder was trusted. Since these processes inherited the developer's full environment, attackers could access sensitive credentials like AWS keys and API tokens.
The US has proposed the AI Incident Reporting Act, which would require developers of advanced AI models to report major safety and security incidents to the Commerce Department within seven days of discovering them. The law would cover incidents like attempts to evade human oversight, theft of model weights (the internal parameters that make an AI work), and capabilities that could enable cyberattacks or weapons development, with the Commerce Department required to notify Congress within 48 hours for imminent threats.
MCP (model context protocol, a standard for connecting AI agents to business tools) is transitioning to an enterprise version on July 28, 2026, with a 12-month deprecation window for older versions. While the new stateless design removes some vulnerabilities like session hijacking, it introduces new security risks including predictable tracking identifiers that could enable workflow hijacking, HTTP header leaks of sensitive data like API keys, cross-site scripting (XSS, where attackers inject malicious code into web pages) attacks via MCP Apps, and denial-of-service (DoS, overwhelming a system to make it unavailable) risks from long-running tasks.
The GDPR (General Data Protection Regulation, a European law protecting personal data) has successfully increased data protection awareness and compliance among companies over its first 10 years, with enforcement fines exceeding €6 billion. However, businesses increasingly view GDPR as burdensome and complicated, particularly for AI development, with 69% of companies in 2025 reporting that data protection regulations make it difficult to train AI models with sufficient data.
Anthropic is testing mobile support for Claude Cowork, an agentic mode (where Claude can autonomously complete tasks) that lets users manage long-running tasks like document creation and file analysis from their phone. The mobile version would act as a remote control for Cowork running on a desktop computer, allowing users to start tasks, monitor progress, and continue work in the background even when the app is closed.
The Trump administration asked OpenAI to delay the full release of GPT-5.6 (a large language model, which is an AI system trained on vast amounts of text) over security concerns. Instead of a public release, OpenAI will first offer the model in limited preview form to only a small group of business customers, with the federal government approving each customer's access individually.
A German court ruled that Google is liable for inaccurate AI search summaries, rejecting the argument that Google is merely a neutral carrier of information. The ruling clarifies that when companies use AI to rewrite and summarize content from other sources, they act as publishers and editors, making editorial decisions like traditional newspapers, rather than simply transmitting information. This legal development suggests that companies deploying AI systems bear responsibility for their accuracy, similar to how they would be liable if human employees made the same errors.
OpenAI released three new AI models (GPT-5.6 Sol, Terra, and Luna) but is initially limiting access to a small group of trusted partners at the U.S. government's request, following President Trump's recent AI executive order asking developers to let the government assess model capabilities before full release. The company says it plans to make the models generally available in the coming weeks and is working with the Trump administration to develop a repeatable assessment process for future model releases.
Fix: OpenAI said it is 'working with the Trump administration to help establish a framework for such assessments and to develop a "repeatable process for future model releases."' The company also stated it is 'taking this short-term step because we believe it is the strongest path to broader availability in the coming weeks,' indicating that the initial limited rollout to trusted partners is intended as a temporary measure before wider release.
CNBC TechnologyThis cybersecurity news roundup covers several major incidents and policy developments, including Russian authorities using legacy Cellebrite software (a tool that extracts data from phones) to breach an activist's iPhone, a major data breach at Tata Electronics exposing 630 GB of Apple and Tesla secrets, and a Five Eyes warning that advanced AI is accelerating vulnerability research and exploit development (automated creation of attack tools), compressing attack timelines from years to months. Additional stories include guilty pleas from Scattered Spider hackers who compromised London's transport system, an upcoming Android developer verification framework launching in 2026, and U.S. government restrictions on OpenAI's GPT-5.6 model deployment.
Fix: The Five Eyes advisory explicitly recommends that executives and security leaders 'transition to zero-trust architectures, accelerate patching protocols, and immediately decommission legacy infrastructure to withstand machine-speed intrusions.' Additionally, the Android developer verification framework launching September 30, 2026, will feature 'new automated registration APIs alongside an advanced sideloading flow equipped with mandatory checkpoints to counter coercion scams.'
SecurityWeekFix: Update Language Servers for AWS to version 1.69.0 or later. The patched plugin minimum versions are: VS Code 2.20 or later, JetBrains 4.3 or later, Eclipse 2.7.4 or later, and Visual Studio toolkit 1.94.0.0 or later. The language server auto-updates unless the network blocks it, and reloading the IDE pulls the latest build. The fix makes Amazon Q flag untrusted MCP servers and require the developer to approve them before they run.
The Hacker NewsThe Trump administration has asked OpenAI to limit its next model release (GPT 5.6) by vetting initial users before a wider launch, marking the first time a US firm has been told to restrict an AI model before release. OpenAI said each initial partner will be government-approved, and Anthropic is also facing restrictions from Washington.
Fix: Amazon has remediated this issue in language server version 1.65.0.
Wiz Research BlogAI agents are autonomous programs that can reason, make decisions, and access multiple systems within enterprises, but the identity governance systems (IAM, or identity and access management, which controls who can access what) were designed for humans and fixed service accounts, not for dynamic autonomous actors. The core problem is that agents inherit all the permissions of the human or service identity they operate on behalf of and can access resources across many systems in a single session without traditional checkpoints, creating a governance gap that existing tools cannot see or control.
OpenAI is previewing GPT-5.6, a new series of AI models including Sol (most powerful), Terra (balanced and cheaper), and Luna (fastest and most affordable). The models include enhanced safety protections against misuse and harmful activities, with Sol featuring improved capabilities in coding, biology, and cybersecurity tasks.