First reported openai.com
News · latest
First reported anthropic.com
More details on Fable 5’s cyber safeguards and our jailbreak framework
Anthropic's announcement details the cybersecurity safety classifiers shipped with its Claude Fable 5 model — which sort cyber uses into prohibited, high-risk dual-use, low-risk dual-use, and benign categories to block or monitor dangerous requests — and proposes an early-draft AI jailbreak severity framework developed with Glasswing partners, alongside a HackerOne program for researchers to submit cyber jailbreaks. It references related research on Boundary Point Jailbreaking, a black-box attack that evades industry-deployed classifier safeguards. Details →First reported ainowinstitute.org
Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks
Infosecurity Magazine reports on a research brief (attributed to the AI Now Institute) warning that AI security tools built by Anthropic and OpenAI could be repurposed to fuel cyber-attacks. The piece frames researcher concerns that defensive AI capabilities carry dual-use risk of being weaponized by attackers. Details →First reported helpnetsecurity.com
99.9% of fixable AI vulnerabilities remain unpatched
Orca Security's 2026 State of AI Security Report, summarized by Help Net Security, finds 81.2% of companies running AI packages have at least one known vulnerability and 99.9% of AI vulnerability alerts with an available fix remain unpatched. The report describes attackers moving across five layers of the AI stack — package registries, model hubs, developer tools, agent frameworks, and brand trust — while organizations deploy agents, RAG pipelines, and vector databases with weak security hygiene. Details →First reported darkreading.com
Google Bets 'Agentic Defense' Strategy Can Outpace Attackers
Google Cloud has launched an "agentic defense" platform that folds in capabilities from its $32B Wiz acquisition to automate threat detection, investigation, and remediation using AI security agents, positioning the shift from human-led to AI-led defense as a response to adversaries weaponizing AI to accelerate attacks. The piece situates the move alongside similar agentic-SOC offerings from CrowdStrike, Palo Alto Networks, and SentinelOne. Details →First reported thehackernews.com
E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The European Commission ordered Google under the Digital Markets Act to give rival AI assistants the same deep Android access that Gemini has — camera, microphone, on-screen content, an always-on wake word, and the ability to drive other apps in the background by imitating taps and typing — to be shipped in Android 18 by 1 August 2027. Google publicly argued that the DMA interoperability mandate should not undercut the security and privacy of European users. Details →First reported femtosec.io
MessiahGPT: Inside the Uncensored Cybercrime AI
An analysis published on femtosec.io describes MessiahGPT, an uncensored Mixture-of-Experts LLM operated by the cybercrime group Dabial Leaks (formerly narxissist Forums) and sold on underground forums in tiered offerings (JinnatGPT, ParaohaGPT, MessiahGPT 2.0). The platform reportedly automates malware generation, exploit writing, social engineering pretexting, and parsing of leaked database dumps with no safety guardrails, and defenders are advised to block egress to messiahgpt.de and monitor DNS queries to known dark-AI domains. Details →First reported proofpoint.com
Anthropic Leak & Mercor Attack | Enterprise AI Security Risks | Proofpoint US
Proofpoint reports two April 2026 AI security incidents: an Anthropic leak that exposed internal files and Claude Code source code via a release packaging error, and a Mercor supply-chain attack in which malicious code embedded in the open-source LiteLLM library (used to connect applications to AI services) stole API keys and customer data, attributed to Team PCP within the Lapsus$ group. The piece frames these as evidence that AI security failures are operational and governance failures involving human error, insecure integrations, and compromised dependencies. Details →First reported darkreading.com
State IDs for AI Agents: Will Estonia Set a Precedent?
Estonia plans to assign official government ID numbers to AI agents so that individuals and organizations can use AI to interact with state systems in a limited, auditable way, according to a plan approved by an advisory council to the prime minister. The Dark Reading article raises questions about how such an identity scheme would work in practice and whether it could expose the state to new cyber-risks. Details →First reported digicert.com
AI Deployment Outpaces AI Accountability
A commissioned DigiCert survey of 1,001 IT and security leaders reports that 78% of enterprises experienced AI-related security incidents or identified AI-related vulnerabilities, with incidents attributed largely to unauthorized or misconfigured AI agents rather than AI-generated code. The report frames the problem as a lack of AI governance and identity controls for non-human/agent actors, echoing a similar Spacelift finding. Details →First reported darkreading.com
Chinese LLMs Broaden the Gap Between Attackers & Defenders
Dark Reading reports that two new Chinese AI models—Zhipu AI's open-weight GLM 5.2 and 360 Security Technology's Tulongfeng ('Dragon Saber')—are performing strongly on vulnerability-discovery benchmarks, with GLM 5.2 said to outperform Anthropic Opus and GPT-5.5 on some bug-finding tests at low cost, and 360 claiming its tool has already found more than 3,400 vulnerabilities. Experts warn that commodity models now widen the gap between attackers and defenders. Details →First reported theregister.com
Infosec professionals sour on automated pentesting tools
A Register report on Cobalt's 2026 State of Pentesting survey (450 respondents) finds support for fully automated pentesting collapsing from 29% to 9%, largely because automated scanners miss AI-specific flaws like prompt injection and excessive agency that require creative, multi-turn adversarial testing. Cobalt also reports 32% of vulnerabilities in AI/LLM environments are high or critical severity, versus 12% in traditional environments. Details →First reported anthropic.com
Expanding Project Glasswing
Anthropic announces an expansion of Project Glasswing, extending access to its Claude Mythos Preview model to roughly 150 new organizations across critical infrastructure sectors to scan codebases for vulnerabilities; partners have reportedly found over 10,000 high/critical flaws. The post warns that cheap, powerful AI cyber capabilities are imminent and that competitors may release Mythos-class models without misuse safeguards. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector