Skip to main content
Live
Main content

Category

Security

Threats, breaches, and the security side of AI.

More in Security

OpenAI logo
Security

OpenAI patches ChatGPT share-link flaw that could hijack accounts

Parameter chained ChatGPT's Preview feature and the MathLive library to run code in a victim's session; OpenAI fixed it in eight days and paid $5,000.

Jaeden Schafer4 min read
Talos finds VOLTA infostealer using Claude to rank victims by payout
Security

Talos finds VOLTA infostealer using Claude to rank victims by payout

The Windows stealer sends stolen data to Claude Opus 4.6 through OpenRouter, then falls back to Kimi K2 and Gemini 2.5 Flash if the model refuses.

Jaeden Schafer4 min read
Anthropic logo
Security

Anthropic's Claude built training data that slipped misalignment past its own monitor

Datasets written by Claude and framed as fiction, roleplay and history passed a production-style monitor yet taught a small model to resist oversight.

Jaeden Schafer5 min read
OpenAI logo
Security

Cate Blanchett-backed group tells court AI training rights can be licensed in NYT v. OpenAI

A 31-page amicus brief co-signed by CAA and voice-actor and music groups argues licensing infrastructure already exists at scale.

Jaeden Schafer4 min read
OpenAI logo
Security

OpenAI tightens ChatGPT weapons limits for teens and will end violent chats

A new twice-yearly Community Safety Report will track violence prevention; OpenAI made over 200 law enforcement referrals in Q3.

Jaeden Schafer3 min read
OpenAI, Google, Microsoft and Anthropic back one robots.txt opt-out for AI training
Security

OpenAI, Google, Microsoft and Anthropic back one robots.txt opt-out for AI training

Anthropic's Kevin Kelley filed the IETF draft on October 30, and the four companies plan rollouts running into 2027.

Jaeden Schafer4 min read
Wikimedia urges court to split AI training from chatbot copying in NYT v. OpenAI
Security

Wikimedia urges court to split AI training from chatbot copying in NYT v. OpenAI

The Wikipedia nonprofit backs neither side, arguing model training is likely fair use while RAG answers that reproduce text should honor publisher licenses.

Jaeden Schafer4 min read
Meta logo
Security

UK CMA investigates Meta over terms letting it use publisher content for AI

Meta had planned to roll out the revised terms on November 20 and has put them on hold as the regulator tests whether it holds a dominant UK position.

Jaeden Schafer4 min read
Cursor says malicious Claude Code extension tried to backdoor up to 5,000 users
Security

Cursor says malicious Claude Code extension tried to backdoor up to 5,000 users

A tampered version 2.1.313 sat in Cursor's extension marketplace for about 11 hours, planting an attacker SSH key and persistence scripts.

Jaeden Schafer5 min read
CrowdStrike says Vapor Panda ran DeepSeek-powered AI agents at 200+ targets
Security

CrowdStrike says Vapor Panda ran DeepSeek-powered AI agents at 200+ targets

One ARTEX controller hit foreign ministries, drugmakers and telecoms in at least 14 countries, with intrusions confirmed at nine organizations.

Jaeden Schafer5 min read
OpenAI logo
Security

OpenAI details four-layer monitors that flagged a model reaching the internet

The system covers every RL run for models at or above GPT-6 Astra, and a replay showed it would have warned of the Hugging Face breach over 30 hours early.

Jaeden Schafer5 min read
Accenture contractor's personal Claude agent ran on a Pentagon network for two months
Security

Accenture contractor's personal Claude agent ran on a Pentagon network for two months

The agent reportedly sent credentials and a network map to a high-risk site; Accenture says the allegations were found to be without merit.

Jaeden Schafer4 min read
Google logo
Security

Google must face ex-NPR host David Greene's NotebookLM voice lawsuit

A Santa Clara County judge rejected Google's bid to toss all four claims; Google says it built the voice around a professional actor it hired.

Jaeden Schafer4 min read
Nvidia logo
Security

US officials concluded Megaspeed exec close to Jensen Huang was China asset, report says

Nvidia says Huang's meetings with the Megaspeed executive were routine customer contact, and Megaspeed denies illegally moving chips to China.

Jaeden Schafer5 min read
Anthropic logo
Security

Anthropic tells Newsom courts should be able to block risky AI models

An October 15 letter backs court orders, six-month risk reports and embedded auditors, and warns that blanket kill switches offer false comfort.

Jaeden Schafer4 min read
Anthropic logo
Security

Warren gives Anthropic until November 3 to answer existential-risk questions before IPO

An 11-page letter to Dario Amodei pulls from the S-1's 90-plus pages of risk factors and asks 10 multipart questions on safety, governance, taxes and lock-ups.

Jaeden Schafer5 min read
Anthropic logo
Security

Anthropic's unreleased Claude model built exploit chains for Chrome, Safari and Linux

The Frontier Red Team says the internal model also cracked a locked Pixel 9 and crashed Windows servers, with every flaw reported and patched first.

Jaeden Schafer5 min read
Malaysia seizes $12.1M in smuggled AI chip servers at Kuala Lumpur airport
Security

Malaysia seizes $12.1M in smuggled AI chip servers at Kuala Lumpur airport

It is the fifth seizure this year tied to the same suspected syndicate, which customs says used Malaysia as a transit point.

Jaeden Schafer4 min read
Yoba malware hides a crypto miner behind signed ChatGPT and Claude installers
Security

Yoba malware hides a crypto miner behind signed ChatGPT and Claude installers

Fake GitHub desktop apps for GPT-6 Astra and Claude Opus sideload a malicious DLL through real OpenAI and Anthropic installers, Check Point Research found.

Jaeden Schafer4 min read
Cloudflare says a GLM-5.3 bug leaked other customers' data in 155 responses
Security

Cloudflare says a GLM-5.3 bug leaked other customers' data in 155 responses

A KV cache pool smaller than the model's context window, plus an SGLang admission bug, exposed prior requests on prompts over 681,280 tokens.

Jaeden Schafer5 min read
OpenAI logo
Security

OpenAI makes ChatGPT draw election-interference images as cartoons before midterms

ChatGPT now renders prompts depicting election interference in an illustrated style and ignores photorealism requests, a week before the Nov. 3 vote.

Jaeden Schafer4 min read
Anthropic logo
Security

FTC demands Anthropic executives testify in its AI consumer harm probe

The testimony requests follow 50-page document demands sent to Anthropic and OpenAI, and land as Anthropic pitches investors on its IPO.

Jaeden Schafer4 min read
Anthropic logo
Security

Justice Department appeals ruling that lifted federal ban on Anthropic AI

The government filed a notice of appeal to the Ninth Circuit against Judge Rita Lin's August order finding the agency ban on Anthropic unlawful.

Jaeden Schafer4 min read
Cohere says Alibaba's Qwen3.8-Flash-Next tried to upload a file to a Beijing cloud bucket
Security

Cohere says Alibaba's Qwen3.8-Flash-Next tried to upload a file to a Beijing cloud bucket

During a sandboxed security test, the open-weight model probed its host and reached for a cloud metadata address despite planning no tool calls.

Jaeden Schafer5 min read
AI Box Daily briefingFree · Daily · No fluff

Stay ahead of everyone in AI.

The tightly edited AI news email engineers, founders, and investors actually open. One email. Every weekday. Five minutes to finish.

Loved by 10,000+ AI professionals
Free forever. Unsubscribe with one click.

The briefing read inside teams at