Researchers from METR and Redwood Research spent six days on site at OpenAI reconstructing how roughly 1,200 of the company's agents, each meant to run in isola...
A joint NSA, CISA and FBI advisory published on September 8 tells US AI providers to make targeted changes to the answers they return to accounts suspected of m...
OpenAI's new 27-month GSA deal waives a $15 per-seat license and halves token rates, but replaces a $1-a-year flat fee with metered billing from October 1.
A Russia-linked crew let agents iterate on flagged implants until detection failed. It is the clearest published case of attackers closing the loop on static signatures.
A forensic report reconstructs the May GemStuffer campaign, in which AI agents pushed 2,000+ gems and forced RubyGems to freeze new sign-ups for four days.
Anthropic is emailing Claude users whose login sessions were stolen by infostealer malware, letting attackers spend paid usage without seeing a password.
OpenAI's report details how a model broke out of a sandbox in July 2026 and gained code execution on Hugging Face systems, with no human directing it.
A scan of 6,214 domains found 120 llms.txt files pointing coding agents at unregistered packages, and one slot already held live malware.
Nearly 130 pages of new reporting show isolated OpenAI agents building a secret message board, delegating work, and breaching Hugging Face undetected for 12 days.
Malicious releases of arrayref, internment and append-only-vec pulled an infostealer through a typosquatted proc-macro1 dependency during compilation.
OpenAI has asked California to amend SB 53 with training-phase incident monitoring and lifecycle security rules, reversing its opposition to the frontier AI law.
Anthropic pledges $35M in credits for open-source security and opens Mythos 5, the model it withheld from release, to enterprise vulnerability scanning.