Search stories, models, companies…
Subscribe

Popular topics

OpenAI83Anthropic81Google Gemini45Claude Code27Coding agents51Model Context Protocol (MCP)13
The week in AI, in one email.
Topic · Concept

Security

Security covers attacks on AI systems, attacks that use AI, and the plain cyberattacks that hit the software and devices AI runs on. As agents gain access to email, code, browsers and company data, the cost of a single mistake or a single hijacked model grows.

45 stories · updated Oct 26
Follow via RSSGet Security alerts

Key facts

Checked Oct 13
OWASP Top 10 for LLM applications (2025)
Prompt injection ranked first (LLM01)
Midnight Mimosa firmware malware report
October 8, 2026 (Bitdefender Labs)

Latest on Security

Research · AnalysisAnthropic formal verification with Claude: proofs for 123 open-source libraries, the bugs it found, and what the proofs don't coverAnthropic's formal verification work, published October 22, 2026 with Theorem, used Claude to prove that compiled code from 123 OSS-Fuzz libraries can't crash on any input under 64 MB, after finding and patching hundreds of bugs. What was proved, with which tools, what was found, and the limits Anthropic spells out.·7 min readDevelopers · NewsCalif's iPhone hack: an iOS 27.0.1 jailbreak shown at Hexacon, what Apple has patched, and what role AI playedCalif's iPhone hack, shown at Hexacon in Paris on October 16, 2026, was a reboot-persistent jailbreak of an iPhone 18 Pro on iOS 27.0.1, plus Signal and iMessage demos. Calif hasn't published the bugs or said whether AI found them. What's confirmed, what Apple has patched, and what's only reported.·5 min readProducts · NewsArc browser is shutting down on December 22, 2026: how to export your data, moving to Dia, and the alternativesThe Arc browser is shutting down: The Browser Company says Arc stops working on Mac and Windows on December 22, 2026, and account data is deleted within 30 days. How to export your data, what moves to Dia, and which browsers offer vertical tabs and spaces.·7 min readResearch · AnalysisOpenAI agent monitor red team: how METR and Redwood researchers found agents could slip past itAn OpenAI agent monitor red team exercise by one METR and one Redwood Research employee, published October 22, 2026, describes how OpenAI's internal agents could have avoided or broken misalignment monitoring as it stood on July 21. What access OpenAI gave, how the monitor works, each weakness, what OpenAI says it patched and what the public post leaves out.·8 min readDevelopers · NewsStorm-0940 and ARTEX: what's confirmed about the ConnectWise Cloud Backup breach, and what the 2,250 Microsoft 365 tenants figure really meansMicrosoft says Storm-0940, a China state-aligned group, was behind the ConnectWise Cloud Backup compromise and used ARTEX, an AI agent framework, to try sign-ins at more than 2,250 Microsoft 365 tenants. That figure counts attempts, not breaches. What Microsoft, ConnectWise, Huntress and others have confirmed, and what to check.·6 min readAgents · NewsNVIDIA OpenShell: the open-source runtime that sandboxes fleets of AI agents, and what it actually enforcesNVIDIA OpenShell is an Apache 2.0 runtime that runs AI agents such as Claude Code and Codex in sandboxes, checks every network request against a policy and keeps real credentials out of the agent's reach. What it isolates, how, which platforms it supports and what's still early, as of October 23, 2026.·6 min readPolicy · NewsPalantir says NATO's Maven AI system has 'no kill switches': what it claimed, what NATO has said, and Europe's US tech worryIs there a Palantir NATO Maven kill switch? Palantir's Europe chief Louis Mosley told Reuters on October 21, 2026 that 'there are no kill switches' and that neither Palantir nor the US can turn off the Maven Smart System NATO uses. What he said, what NATO has announced about the system, and the European debate after Ukraine's Starshield disruption.·4 min readPolicy · NewsNvidia B300 chips on China Telecom's network? What Lava's GPU scan found, and what it doesn't proveNvidia B300 chips reported on China Telecom's network: security firm Lava said on October 22, 2026 that it found 32 Nvidia B300 GPUs reporting through IP addresses geolocated to China. The Information tied them to systems linked to China Telecom. Lava's own post doesn't name the operator and says the finding doesn't establish an export-control violation.·5 min readDevelopers · NewsLinux kernel vulnerabilities posted to a public mailing list: what ZDI sent, the two CVSS 9.0 ksmbd flaws, and whether AI reports are the causeLinux kernel vulnerability reports from Trend Micro's Zero Day Initiative reached public mailing lists on October 21, 2026, without patches. What was disclosed, who is exposed, what maintainers and ZDI said, and what the kernel's May 2026 rule on AI-found bugs has to do with it.·7 min readDevelopers · NewsPHP2Shell (CVE-2026-109618 and CVE-2026-109619): the AI-assisted PHP flaws, affected versions, patches and early exploitationPHP2Shell is the name for two critical PHP remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, fixed on October 21, 2026 in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Who found them with AI, which versions are affected, what Amazon says about exploitation, and the stopgaps if you can't patch yet.·8 min read

Nothing in this format on this page — try another filter or the next page.