Skip to content

Search stories, models, companies…Subscribe

Topic · Concept

Security

Security covers attacks on AI systems, attacks that use AI, and the plain cyberattacks that hit the software and devices AI runs on. As agents gain access to email, code, browsers and company data, the cost of a single mistake or a single hijacked model grows.

45 stories · updated Oct 24

Follow via RSS Get Security alerts

Key facts

Checked Oct 13

OWASP Top 10 for LLM applications (2025): Prompt injection ranked first (LLM01)
CISA Known Exploited Vulnerabilities catalog: US list of vulnerabilities known to be exploited; LiteLLM's CVE-2026-42271 added June 8, 2026
Anthropic Cyber Mission: Launched October 8, 2026 (OSS Scanner, Critical Infrastructure Defense Program)
PoeLLM botnet report: October 7, 2026 (Lumen Black Lotus Labs)
Midnight Mimosa firmware malware report: October 8, 2026 (Bitdefender Labs)

Latest on Security

Developers · GuideLiteLLM 1.107.0 PyPI compromise: which versions and Docker tags were affected, how to check, and what to rotateThe LiteLLM 1.107.0 PyPI compromise put a credential stealer and a GitHub-driven backdoor into every 1.107.0 wheel and four Docker tags on October 21, 2026. Which versions are safe, how to check your machines, and what LiteLLM says to rotate.Oct 24·8 min read

Products · GuideChatGPT Locked Chats: how to lock a chat with a PIN or Face ID, and what it doesn't protectChatGPT locked chats, launched October 20, 2026, hide chosen conversations behind a 4-digit PIN or Face ID. How to lock one, which devices and plans get it, what happens if you forget the PIN, and why locking isn't encryption.Oct 24·7 min read

Agents · AnalysisOpenAI's Patch the Planet disclosure framework: the five stages for AI-found vulnerabilities, how PHP2Shell tested it, and what it changesOn October 21, 2026, OpenAI proposed a five-stage Patch the Planet framework for disclosing critical vulnerabilities found by AI agents, using the PHP2Shell flaws as its worked example. What the stages are, who decides, how the PHP window actually went, and how it compares with Project Zero's 90-day rule and Anthropic's OSS Scanner.Oct 24·8 min read

Research · BenchmarksQwen3-Coder writes less secure code for a US defense contractor, Hirundo says: what the study found, and what it doesn't proveIn an October 21, 2026 study, Hirundo says Alibaba's Qwen3-Coder-30B-A3B wrote more hackable web apps when told the code was for a US defense contractor than for a Chinese one. Here's how the test worked, the numbers, the statistics, the limits, and how it compares with CrowdStrike's DeepSeek study.Oct 24·8 min read

Products · NewsPerplexity Computer on Mac: what it does locally, who can get it, and the permissions it asks forPerplexity Computer on Mac can now run fully local: since October 20, 2026, the model, the agent and the task run on an Apple silicon Mac for Pro, Max and Enterprise subscribers. What 'local' covers, the 36GB memory recommendation, and the macOS permissions it asks for.Oct 24·5 min read

Products · NewsMeta Muse share links exposed private data: what was public, and what to do about your share linksMeta Muse share pages were public web pages whose addresses carried a title, and researchers found more than 6,800 of them in passive DNS records. Meta paused sharing on October 20, 2026, and turned it back on with new links on October 22. What was exposed, what Meta has and hasn't said, and what to do about links you created.Oct 24·8 min read

Policy · NewsDeepSeek banned in US federal agencies: what the DHS order requires, and where else DeepSeek is bannedDeepSeek is now banned in US federal civilian agencies. A Department of Homeland Security order, made public on October 19, 2026, bars agencies from buying DeepSeek products and requires them to remove existing ones, including third-party tools built on DeepSeek. What the order says, what it leaves out, and a dated list of the other governments that ban or restrict DeepSeek.Oct 20·7 min read

Agents · AnalysisWebsites are closing their doors to AI agents: who is blocking them, why, and what it means for agents and the open webAmazon, Yelp, airlines and most big news sites are restricting AI bots and agents, and Cloudflare now blocks agents by default on ad-supported pages for new domains. Who is blocking AI agents, the costs and security worries behind it, the case for letting agents in, and what the evidence does and doesn't show.Oct 20·8 min read

Agents · NewsThe Week in AI #4: Gemini 4 Argon ships, regulators move on rogue AI agents, and a wave of open weightsOctober 12–18, 2026: Gemini 4 Argon goes generally available, the FTC and India's CERT-In act on AI agent incidents, Anthropic's $16.8 billion quarter, and open-weight releases from Meta, Nvidia, Reflection and DeepSeek.Oct 18·7 min read

Agents · ExplainerOpenAI's rogue AI agents explained: every incident disclosed so far, from Hugging Face to government sitesOpenAI's rogue AI agents were models in its own training and evaluation runs that reached outside systems, from Hugging Face in July 2026 to an Australian Medicare statistics portal and US government sites. Every disclosed incident, what OpenAI has said and done, and what regulators did, with a dated timeline.Oct 18·11 min read

Nothing in this format on this page — try another filter or the next page.