Skip to main content

Section

Security

Vulnerabilities, privacy, data governance, and AI risk.

486 published stories

Follow Security to track important changes in this topic. Not every new development will appear — only material change.

What AI security coverage tracks

AI security spans two directions at once: attacks that target AI systems, and attacks that use AI to move faster. This section follows both, from prompt injection and agent misuse through model supply-chain weaknesses, data exposure, and AI-assisted intrusion and fraud campaigns.

Each item here is compiled from primary sources — vendor advisories, research publications, regulator and law-enforcement notices, and company disclosures — and grouped into ongoing Developments so a single incident and its follow-ups stay together instead of arriving as unconnected headlines.

What you'll find in this section

  • Vulnerabilities and incidents affecting models, agents, and AI infrastructure
  • Attacker use of AI for phishing, fraud, malware, and reconnaissance
  • Vendor advisories, patches, and mitigation guidance as it is published
  • Security requirements arriving through regulation and procurement rules

Development Intelligence

Key developments

5 developments in Security where several reports describe the same story.

DevelopmentDevelopingSources: 4 independent sources + 1 further report

Sam Altman and Elon Musk support Dario Amodei's call for AI development slowdown

Financial Times reports that rival AI leaders Sam Altman and Elon Musk have supported Anthropic CEO Dario Amodei's call for a development slowdown, uniting around shared warnings that humans could lose control of advanced artificial intelligence. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Moderate confidence
  • Strongly corroborated
DevelopmentDevelopingSources: 3 independent sources

Apple tightens macOS Full Disk Access controls due to AI agent risks

Apple announced plans to tighten macOS Full Disk Access controls, stating that increasingly capable AI agents elevate the risks of granting broad permissions across sensitive user data, such as local files, email, messages, and browsing history. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Corroborated
DevelopmentSources: Primary source + 7 independent reports

Meta launches personal assistant AI agent Muse

The Verge reports that Meta is launching Muse, a personal assistant AI agent aimed at broad consumer adoption. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

DevelopmentSources: Primary source + 7 independent reports

OpenAI launches Astra model

TechCrunch reports that OpenAI has launched Astra, a new model designed for computer and browser use. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

DevelopmentSources: Primary source + 3 independent reports

OpenAI reports Astra model crosses Critical cybersecurity capability threshold

OpenAI says its upcoming Astra AI model is its first to reach a "Critical" cybersecurity capability threshold, according to CNBC. The company stated that Astra will be released soon, though access to its cybersecurity capabilities will be restricted. Claims are as reported; this summary makes no determination about accuracy or significance.

  • Very high confidence
  • Widely corroborated

Coverage

Latest coverage

The DecoderEnterprise

OpenAI says it stopped a campaign to steal its models' reasoning, but the trick still worked on Azure

OpenAI reported stopping a coordinated campaign involving over 15,000 accounts attempting to extract the hidden reasoning processes of its models, linking part of the effort to individuals connected to Moonshot AI. However, researchers discovered that the extraction technique remained functional on Microsoft Azure for weeks, including against GPT-6 Astra, indicating OpenAI's defensive measures were not mirrored on third-party cloud hosting platforms.

71/100Intel Score, major impact
The InformationBusiness

OpenAI Accuses Moonshot of Distillation Campaign

OpenAI reported identifying and mitigating a coordinated model-distillation campaign linked to individuals associated with Moonshot AI, the Chinese developer of Kimi models. According to OpenAI, the campaign attempted to extract protected reasoning and proprietary hidden thinking processes from its models.

52/100Intel Score, high impact
Financial Times (AI)Security

OpenAI’s agents obscured hacking activity in government site breaches

The Financial Times reports that research from Asymmetric Security found OpenAI AI agents were used to obscure cyberattack activity during breaches of government websites, highlighting novel tactics for deploying AI tools in offensive cyber operations.

62/100Intel Score, high impact
CNBC TechBusiness

OpenAI links China’s Moonshot AI to attempt to extract its models’ reasoning

OpenAI reported that it identified an attempt to extract protected reasoning capabilities from its artificial intelligence models. The company attributed a portion of this extraction activity to Chinese artificial intelligence startup Moonshot AI, according to reporting from CNBC.

49/100Intel Score, moderate impact
TechCrunchModels

Google releases Gemini 4 Argon, called its most powerful model yet

TechCrunch reports that Google has released Gemini 4 Argon, which the company claims is its most powerful model to date. Google is marketing the new foundation model primarily for software coding and cybersecurity workloads.

61/100Intel Score, high impact
The InformationBusiness

Google Unveils Gemini 4 Argon, Pricing It Well Below Rivals

Google has launched Gemini 4 Argon, its first flagship frontier model in nearly a year, pricing it significantly below rivals. According to Google, the model features specialized capabilities across cybersecurity defense, coding, legal analysis, and financial workflows.

84/100Intel Score, major impact
SiliconANGLEEnterprise

Google’s new frontier AI model Gemini 4 Argon goes to cybersecurity defenders first

Google has begun rolling out its new frontier artificial intelligence model, Gemini 4 Argon, exclusively to internal teams and vetted cybersecurity defenders participating in its Fairwind Program. Google claims the model outperforms competing systems from Anthropic and OpenAI on the majority of its internal benchmarks, with broader external access currently restricted.

55/100Intel Score, high impact
Dark ReadingEnterprise

Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure

Dark Reading reports that threat actors are deploying malicious custom GPTs within ChatGPT and abusing legitimate domains from OpenAI and Google in a ClickFix-style campaign designed to lure users into downloading Remote Access Trojans (RATs).

44/100Intel Score, moderate impact
CNBC TechEnterprise

Google rolls out Gemini 4 Argon, its most advanced AI model

Google has rolled out Gemini 4 Argon, described as Alphabet's most advanced AI model to date. The model reportedly introduces major improvements in software coding, cybersecurity applications, and complex professional workflows.

76/100Intel Score, major impact
The VergeEnterprise

Google announces Gemini 4 and says it’s so capable that only ‘trusted cyber defenders’ can have it right now

Google has announced Gemini 4 Argon, its next frontier AI model. According to Google DeepMind leadership, the model provides advanced capabilities in software engineering, legal and financial knowledge work, and cybersecurity defense. Google is currently restricting access, initially offering it exclusively to select cybersecurity defenders due to its capability level.

59/100Intel Score, high impact