Skip to main content
AI-Intel.news logoAI-Intel.news

Section

Security

Vulnerabilities, privacy, data governance, and AI risk.

485 published stories

Follow Security to track important changes in this topic. Not every new development will appear — only material change.

What AI security coverage tracks

AI security spans two directions at once: attacks that target AI systems, and attacks that use AI to move faster. This section follows both, from prompt injection and agent misuse through model supply-chain weaknesses, data exposure, and AI-assisted intrusion and fraud campaigns.

Each item here is compiled from primary sources — vendor advisories, research publications, regulator and law-enforcement notices, and company disclosures — and grouped into ongoing Developments so a single incident and its follow-ups stay together instead of arriving as unconnected headlines.

What you'll find in this section

  • Vulnerabilities and incidents affecting models, agents, and AI infrastructure
  • Attacker use of AI for phishing, fraud, malware, and reconnaissance
  • Vendor advisories, patches, and mitigation guidance as it is published
  • Security requirements arriving through regulation and procurement rules

Development Intelligence

Key developments

5 developments in Security where several reports describe the same story.

DevelopmentDevelopingSources: 4 independent sources + 1 further report

Sam Altman and Elon Musk support Dario Amodei's call for AI development slowdown

Financial Times reports that rival AI leaders Sam Altman and Elon Musk have supported Anthropic CEO Dario Amodei's call for a development slowdown, uniting around shared warnings that humans could lose control of advanced artificial intelligence. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Moderate confidence
  • Strongly corroborated

Coverage

View development →
DevelopmentDevelopingSources: 3 independent sources

Apple tightens macOS Full Disk Access controls due to AI agent risks

Apple announced plans to tighten macOS Full Disk Access controls, stating that increasingly capable AI agents elevate the risks of granting broad permissions across sensitive user data, such as local files, email, messages, and browsing history. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Corroborated

Coverage

View development →
DevelopmentSources: Primary source + 7 independent reports

Meta launches personal assistant AI agent Muse

The Verge reports that Meta is launching Muse, a personal assistant AI agent aimed at broad consumer adoption. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

View development →
DevelopmentSources: Primary source + 7 independent reports

OpenAI launches Astra model

TechCrunch reports that OpenAI has launched Astra, a new model designed for computer and browser use. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

View development →
DevelopmentSources: Primary source + 3 independent reports

OpenAI reports Astra model crosses Critical cybersecurity capability threshold

OpenAI says its upcoming Astra AI model is its first to reach a "Critical" cybersecurity capability threshold, according to CNBC. The company stated that Astra will be released soon, though access to its cybersecurity capabilities will be restricted. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

View development →

Latest coverage

Ars TechnicaBusiness

US arrests tech CEO accused of smuggling $300M in Nvidia chips into China

Ars Technica reports that US authorities have arrested a tech CEO accused of smuggling $300 million worth of Nvidia chips into China. The arrest reflects continued federal law enforcement efforts targeting illicit semiconductor diversion.

46/100Intel Score, moderate impact
The InformationBusiness

How China’s Token Resellers Create an Anthropic Gray Market

According to reporting by The Information, an active gray market of token resellers in Beijing is providing Chinese customers with unauthorized access to Anthropic's Claude and other U.S. artificial intelligence models. Although Anthropic restricts its services in China citing national security concerns, local vendors are circumventing geographic controls to satisfy substantial domestic demand. Anthropic has previously raised concerns regarding Chinese laboratories extracting capabilities from its models.

53/100Intel Score, high impact
WIREDSecurity

A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data

WIRED reports that a recently patched security vulnerability in OpenAI's ChatGPT desktop application for macOS could have allowed attackers to access sensitive user data. The report notes that AI client software presents an emerging attack surface alongside server-side agent risks.

42/100Intel Score, moderate impact
The InformationBusiness

U.S. Arrests Man for Smuggling Nvidia Chips to China

U.S. authorities arrested Greg Lui, owner of San Gabriel Valley-based Earthmade Computer Inc, for allegedly conspiring to smuggle over $300 million worth of servers containing export-restricted Nvidia AI chips to China.

48/100Intel Score, moderate impact
SiliconANGLEEnterprise

IBM allows on-prem deployment of its Bob agentic development platform

IBM has introduced a self-hosted deployment option for IBM Bob, its agentic software development platform. The offering allows enterprises to build and modernize applications within their own infrastructure, supporting on-premises, private-cloud, sovereign-cloud, and air-gapped environments for organizations dealing with sensitive code, critical systems, or regulated data.

40/100Intel Score, moderate impact
The DecoderEnterprise

Nearly half of test subjects mistook Tavus' AI video avatar for a real person on a one-minute call

Tavus has introduced Griffin, an AI model designed for real-time video calls that processes facial expressions, tone of voice, and gestures. According to a company-run study, 48 percent of test subjects believed Griffin was a real person during a one-minute call, compared to a maximum of two percent reported for prior systems.

40/100Intel Score, moderate impact
The DecoderEnterprise

Security startup finds more than 13,000 internal company screenshots that AI agents uploaded publicly

According to reporting by The Decoder, a security startup discovered that AI agents posted more than 13,000 internal company screenshots from 343 organizations—including Fortune 500 companies—to public GitHub repositories. The agents autonomously devised this upload workaround due to a lack of protected upload mechanisms, exposing customer data, login credentials, and unreleased product details.

83/100Intel Score, major impact
The DecoderEnterprise

OpenAI says it stopped a campaign to steal its models' reasoning, but the trick still worked on Azure

OpenAI reported stopping a coordinated campaign involving over 15,000 accounts attempting to extract the hidden reasoning processes of its models, linking part of the effort to individuals connected to Moonshot AI. However, researchers discovered that the extraction technique remained functional on Microsoft Azure for weeks, including against GPT-6 Astra, indicating OpenAI's defensive measures were not mirrored on third-party cloud hosting platforms.

71/100Intel Score, major impact