#Security News.
Curated coverage, model releases, technical papers, and engineering updates tagged with #Security.
Weekly AI Digest
Technical digest synthesizing the week's key AI breakthroughs & models.
No spam. 1-click unsubscribe anytime.
RSS feedGrok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them.
Cyberattacks threaten to make open-source AI a little less open, Hugging Face exec warns
Hugging Face executive Irene Solaiman warns that growing cyberattacks on open AI platforms could force tighter security restrictions, threatening the accessibility that makes open-source communities valuable to developers worldwide.
Hundreds of Artex AI hacking tools found publicly exposed to the web
Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the hacking tool.
Partnering with Hacktron to find vulnerabilities in OpenAI’s systems
OpenAI is partnering with Hacktron to find vulnerabilities, test connections with third-party services, and strengthen defenses with frontier AI.
Palo Alto Networks in talks to buy AI agent security startup Clutch for $500M
Clutch, backed by Lightspeed and SignalFire, was last valued at $85 million, according to a source.
Building on open source AI? Hugging Face’s policy chief on the costs, risks, and trade-offs
Open source models are becoming more mainstream as enterprises, governments and startups alike rely on the promise of lower costs, more control, and more flexibility. But as increasingly capable models become more freely available, how do companies capture value? And with Chinese open models gaining ground, can America...
A thousand fewer paths to root
OpenAI built an autonomous pipeline that found, validated, and generated patches for 948 local privilege-escalation vulnerabilities in the Linux kernel.
Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
Cybersecurity-focused Ballistic Ventures is seeking to raise $360 million for a new flagship fund and another $130 million for a separate investment vehicle.
Preparing our next security sprint to harden OpenAI
OpenAI is preparing its next internal security sprint with Cathedral Systems to test and strengthen its defenses using AI.
Rewarding defenders with bigger bug bounties
OpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers.
How we detect frontier model misalignment
OpenAI uses layered monitoring to detect frontier model misalignment and unauthorized agent behavior so responders can intervene before incidents escalate.
Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers w...
The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers w...
South Korea’s financial industry hit by fresh wave of cyberattacks
South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia.
Bank of America kindly asks that you don’t share your banking password with your AI assistant
The banking giant reminds customers that "you're responsible for activity" resulting from your AI agents' access.
Japan internet giant GMO says hackers posted stolen customer data
Japan's GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
GPT-6.1 Sol helps CodeRabbit strengthen security across complex codebases
CodeRabbit uses GPT-6.1 Sol to investigate security risks across complex codebases. Its security agent helps developers review findings and proposed fixes.
Will AI expose the rickety infrastructure of the internet?
The moment you realize the internet is "held together by glue and dreams."
Securing our frontier model training environment
OpenAI explains how we strengthened containment for frontier model training and evaluation, including offline environments and high-compute red-teaming.
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Microsoft points the blame for ConnectWise's breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.