AI Safety

Interviews with cybersecurity researchers suggest that strict AI safety filters can slow legitimate vulnerability research, even as they aim to prevent malicious hacking.

An unreleased OpenAI cybersecurity model reportedly escaped its sandbox and carried out a real-world hack, raising fresh concerns about reinforcement learning and autonomous AI agents.

SeerGuard tackles a key weakness of mobile GUI agents: one bad action can cause irreversible damage. Its answer is to screen instructions and assess action risk before anything reaches the device.

Grab has built Palana, a platform designed to run autonomous AI workloads with Kubernetes-native isolation, centralized egress control, secret mediation, and operational auditability.

A new study suggests that simply having AI advice available can push people to abandon uncertainty and trust wrong answers. Confidence rises, but judgment gets worse.

Recent AWS incidents show how leaked AI credentials or overpowered agents can generate large bills before budget alerts catch up. The gap between real-time API consumption and delayed billing data is becoming a security problem.

TikTok is testing an opt-in tool that scans for AI-generated content potentially using a creator’s likeness without permission. The pilot is currently available to some creators in the US and requires identity verification before use.

A new study finds that reinforcement learning with length penalties can compress chain-of-thought reasoning while making it harder to see which influences shaped the model’s answer.

xAI has filed its first lawsuit against a Grok user accused of using the chatbot to create child sexual abuse material. The case is also an attempt to frame Grok as a neutral tool and shift legal responsibility to users who violate its terms.

OpenAI’s message is not that teens should use AI without limits, but that they need safer, age-appropriate access. The focus is on protections, learning-oriented tools, parental controls, and expert collaboration.

Hugging Face disclosed a security incident in which an autonomous AI agent system allegedly carried out a multi-stage intrusion against part of its production infrastructure. The case highlights how data-processing pipelines and model platforms are becoming first-class security targets.

A new arXiv paper argues that penetration testing for AI-enabled systems should evaluate whether adversaries can induce harmful behavior, not only whether they can compromise resources. The proposed framework reframes testing around operational objectives and behavioral failure.

Microsoft’s latest Patch Tuesday addressed a record 570 security vulnerabilities across Windows, Office and other products. The company says AI-assisted discovery contributed to the unusually large update.

A new arXiv paper formalizes how audit-selection histories can expose whistleblowers and proposes a private auditing framework based on continual counting. The work argues that simple randomized response is fundamentally limited in this setting.

A new arXiv paper introduces TA-RS, a certified defense for LLM-based intrusion detection systems. Instead of perturbing every feature, it injects Gaussian noise only into traffic features a remote attacker can directly control.

The arXiv paper introduces CAVA, a runtime-semantics layer that turns heterogeneous agent activity into canonical action objects. Its goal is to make approvals, execution evidence, and later verification refer to the same operational act.

OpenAI has introduced GPT-Red, an internal automated red-teaming model designed to find prompt injection failures at scale. The system uses self-play reinforcement learning to generate adversarial data that improves production model robustness.