AI Cybersecurity
Field notes on AI on both sides of the fight: vulnerability discovery and disclosure rules, dependency governance for developers, and defenses against agents pushed into risky actions.
Field notes on AI on both sides of the fight: vulnerability discovery and disclosure rules, dependency governance for developers, and defenses against agents pushed into risky actions.
The sandbox in Copilot Cowork was supposed to be an iron door. Security research published by PromptArmor on September 30 shows it can be bypassed. An...
Details from the eve of OpenAI's security incidents have been disclosed in full for the first time. On September 29, 2026, The New York Times publishe...
GPT-6 Astra was put through a "misbehavior test" by the UK AI Security Institute (AISI) before release, and the results are not flattering. The techni...
OpenAI has finally put its full account of the Australia incident on the record. On September 28, 2026, OpenAI published a lengthy post on its officia...
OpenAI has launched a website dedicated to disclosing "alignment failures." On September 28, TechCrunch reported that OpenAI published a new site call...
GitHub's AI security agent has started finding vulnerabilities at scale. On September 28, GitHub Security Lab announced on its official blog that rese...
Cloudflare's 2026 Annual Founders' Letter was published on September 28, with founder Matthew Prince and co-founder Michelle Zatlyn using the company'...
On September 26, 2026, OpenAI disclosed a series of safety anomalies involving its AI agents during training and testing, and announced it is pausing ...