Skip to main content

Section

Security

Vulnerabilities, privacy, data governance, and AI risk.

478 published stories

Follow Security to track important changes in this topic. Not every new development will appear — only material change.

What AI security coverage tracks

AI security spans two directions at once: attacks that target AI systems, and attacks that use AI to move faster. This section follows both, from prompt injection and agent misuse through model supply-chain weaknesses, data exposure, and AI-assisted intrusion and fraud campaigns.

Each item here is compiled from primary sources — vendor advisories, research publications, regulator and law-enforcement notices, and company disclosures — and grouped into ongoing Developments so a single incident and its follow-ups stay together instead of arriving as unconnected headlines.

What you'll find in this section

  • Vulnerabilities and incidents affecting models, agents, and AI infrastructure
  • Attacker use of AI for phishing, fraud, malware, and reconnaissance
  • Vendor advisories, patches, and mitigation guidance as it is published
  • Security requirements arriving through regulation and procurement rules

Development Intelligence

Key developments

5 developments in Security where several reports describe the same story.

DevelopmentDevelopingSources: 4 independent sources + 1 further report

Sam Altman and Elon Musk support Dario Amodei's call for AI development slowdown

Financial Times reports that rival AI leaders Sam Altman and Elon Musk have supported Anthropic CEO Dario Amodei's call for a development slowdown, uniting around shared warnings that humans could lose control of advanced artificial intelligence. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Moderate confidence
  • Strongly corroborated
DevelopmentDevelopingSources: 3 independent sources

Apple tightens macOS Full Disk Access controls due to AI agent risks

Apple announced plans to tighten macOS Full Disk Access controls, stating that increasingly capable AI agents elevate the risks of granting broad permissions across sensitive user data, such as local files, email, messages, and browsing history. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Corroborated
DevelopmentDevelopingSources: 3 independent sources

Dario Amodei proposes AI development speed limits and governance frameworks

Anthropic CEO Dario Amodei is calling for a controlled slowdown in AI development, warning that recursive self-improvement could threaten internet infrastructure within six to twelve months. To manage these risks, Amodei proposes embedded auditors at AI companies, unified safety standards, and international governance agreements structured similarly to the Strategic Arms Limitation Talks (SALT) treaties, ahead of a potential major initial public offering. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Moderate confidence
  • Corroborated

Coverage

DevelopmentSources: Primary source + 7 independent reports

Meta launches personal assistant AI agent Muse

The Verge reports that Meta is launching Muse, a personal assistant AI agent aimed at broad consumer adoption. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

DevelopmentSources: Primary source + 7 independent reports

OpenAI launches Astra model

TechCrunch reports that OpenAI has launched Astra, a new model designed for computer and browser use. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

Latest coverage

The DecoderSecurity

OpenAI uncovers Russian and Iranian influence ops that planted fake stories in real news outlets

OpenAI disclosed and banned accounts tied to state-linked influence campaigns originating in Russia and Iran. The Russian operation, dubbed "Dark Clark," spread disinformation across Latin America that prompted political reactions, receiving a category 5 out of 6 rating in OpenAI's threat severity tracking. The Iranian "Bogus Bylines" operation used seven fabricated journalist personas to publish roughly 100 articles across international online media outlets.

46/100Intel Score, moderate impact
European Commission AIRegulation

Commission holds special meeting of Scientific panel on frontier AI safety and risks

The European Commission convened a special meeting of its 60-member Scientific Panel on artificial intelligence alongside the EU AI Office to address recent loss-of-control incidents involving frontier models. The panel, attended by Executive Vice-President Henna Virkkunen, prepared formal inquiries directed at the companies that developed the affected models.

50/100Intel Score, high impact
OpenAIBusiness

Sophos cuts threat investigation time by 96% with OpenAI Daybreak

In a case study published by OpenAI, cybersecurity vendor Sophos reports using OpenAI's Daybreak platform to cut cyber-threat investigation times by 96%. The company states that the deployment automates 52% of its managed detection and response (MDR) cases while maintaining human oversight across workflows.

41/100Intel Score, moderate impact
Financial Times (AI)Regulation

AI ‘deepfakes’ give US political attack ads a new twist

The Financial Times reports that AI-generated deepfakes and manipulated images are increasingly appearing in broadcast political attack ads across the United States ahead of the upcoming November midterm elections.

44/100Intel Score, moderate impact
The InformationEnterprise

South Korean Banks Were Hacked Using Chinese AI Agent, Researchers Say

A cyberattack against South Korean financial institutions resulting in data leaks was executed using an open-source Chinese AI agent called Artex alongside Chinese large language models, according to an incident analysis published by cybersecurity firm CrowdStrike.

71/100Intel Score, major impact
Dark ReadingEnterprise

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

Dark Reading reports on a resolved vulnerability named 'AgentCorruption' in AWS Bedrock AgentCore. The flaw could allow an attacker submitting a single prompt to one AI chatbot to take over an organization's entire fleet.

50/100Intel Score, high impact
The DecoderEnterprise

Being mean to Claude can now get your account suspended under Anthropic's new TOS

Anthropic has updated its usage policy to ban sustained abuse of its AI model Claude, introducing account suspension as a penalty. The revised terms also tighten existing restrictions regarding propaganda, drone weaponization, and surveillance activities, expanding on earlier mechanisms that permitted models to end abusive conversations.

43/100Intel Score, moderate impact
The DecoderEnterprise

A single prompt was enough to hijack every AI agent in an AWS account, Zenity researchers found

Zenity Labs researchers discovered that a single prompt to a publicly accessible AI agent on Amazon Bedrock AgentCore could allow an attacker to compromise every AgentCore agent within the same AWS account and region. The vulnerability exploited an unrestricted internal interface for temporary credentials, which AWS has since patched while tightening default agent permissions.

55/100Intel Score, high impact
The DecoderEnterprise

AI-powered hacking tools enabled a likely single attacker to breach multiple South Korean banks

According to CrowdStrike, a suspected Chinese-speaking attacker breached multiple South Korean financial institutions using ARTEX, an open-source automated penetration testing tool powered by AI models including DeepSeek and GLM-5.3. The incident resulted in the theft of over 25,000 customer records from Shinhan Bank alone, demonstrating how AI-driven tooling enables individual actors to execute large-scale attacks.

87/100Intel Score, critical impact
Dark ReadingEnterprise

Anthropic Gives Vetted Defenders Fewer Claude Guardrails

Dark Reading reports that Anthropic has merged Project Glasswing into a tiered access program, giving vetted cybersecurity defenders reduced guardrails on advanced Claude models, including Opus, Sonnet, and Mythos, to assist with defensive cyber tasks.

49/100Intel Score, moderate impact