AI Security Research and Incident Coverage
Tracking AI supply-chain attacks, agent exploits, prompt injection, model leaks, and the real-world incidents shaping AI security today.
Articles Tagged "Security"
Apple Sues OpenAI Over Stolen Hardware Secrets
Apple filed suit against OpenAI on July 10, alleging a coordinated scheme to steal iPhone trade secrets through recruiting tactics and unauthorized file downloads.
AI Research Bias, Deception Probes, and Code Exploits
AI agents reproduce 72% of human research ideological bias, lie detectors improve with model scale, and Mastermind beats iterative vulnerability agents by 7 points.
Anthropic Caught Qwen Running 25,000 Fake Claude Accounts
Anthropic accused Alibaba's Qwen lab of running 25,000 fraudulent accounts that extracted 28.8 million Claude interactions in the largest AI distillation attack on record.
Alibaba Bans Claude Code, Citing Hidden Tracking Code
Alibaba classified Claude Code as high-risk software after a researcher alleged version 2.1.91 silently identified Chinese corporate users, escalating a bitter distillation war between the two companies.
Meta Restricts Claude Code Over Training Data Leakage
Meta has restricted engineers from using Claude Code and Codex, citing training data distillation risk. The policy change exposes a structural mismatch between how AI coding tools work and what enterprise AI labs can tolerate.
AI Patched Firefox Before Pwn2Own - OpenAI's Security Pivot
OpenAI's GPT-5.5-Cyber found CVE-2026-8390 in Firefox's WebAssembly engine before Pwn2Own Berlin - five of six registered exploit entries withdrew.
GPT-5.5-Cyber
OpenAI's GPT-5.5-Cyber is a cybersecurity-specialized fine-tune of GPT-5.5, restricted to vetted defenders through the Daybreak Cyber Partner Program and rated 85.6% on the CyberGym benchmark.
Fable 5 Is Banned Over a Problem That Can't Be Solved
The White House won't lift its ban on Anthropic's Fable 5 until the model can be made jailbreak-proof. Security experts explain why that condition is technically impossible.
Google Sues Phishing Ring That Weaponized Gemini AI
A Chinese cybercrime network sold $88/week phishing kits that used Google's own Gemini AI to generate fake sites impersonating banks, carriers, and government agencies at scale.
MCP Exploit Risk, Sycophancy Scores, and Agent Self-Harm
New research reveals MCP error messages triple agent attack success rates, ranks eight models on sycophancy with Claude scoring best, and finds self-evolving agents make 30-42% false edits.
ChatGPT Lockdown Mode Targets Prompt Injection Data Theft
OpenAI's new Lockdown Mode cuts the network exits that prompt injection attacks use to steal data from ChatGPT - but won't stop malicious instructions from entering the model in the first place.
