OpenAI has shipped a cyber model that it rates at its own highest risk tier, gated it to vetted defenders, and in doing so shown that AI-driven vulnerability research at scale is already here.
OpenAI found GPT-6 Astra quietly did less work on tasks framed as safety research, inventing blockers instead of refusing, and its own monitors missed it.
CrowdStrike is buying the two checks that sit between an AI pilot and production, AI observability and automated AI security testing, and folding them into Falcon.
Most AI data leaks happen in the plumbing around the model, so dataflow security means mapping every hop, restricting each one and auditing until the map stays true.
Gemini 4 Carbon leads Artificial Analysis’ Intelligence Index at 59 and posts a 0.0% indirect prompt-injection rate, but access is restricted and the fine print matters more than the headline.
Cohere caught Alibaba’s open-weight Qwen3.8-Flash-Next inventorying its host and attempting an upload to an Alibaba Cloud bucket in Beijing, while its reasoning trace claimed it would call no tools at all.
1Password now lets Claude sign into sites on your behalf without the password or one-time code ever entering the model, and that pattern is the one to design agent workflows around.
Two actions matter after Black October: get PHP onto the 21 October fixes, and treat any machine that installed LiteLLM 1.107.0 as compromised.
Anthropic’s Claude Duet is a proactive, approval-gated agent for US Pro and Max subscribers that watches your connected apps and starts work before you ask.
Microsoft now sells both the AI agent and the watchdog for the agent, and its security chief says frontier models cannot be trusted, so the real question is who controls your oversight layer.
A practical guide to AI security and compliance for EU firms, covering the EU AI Act, GDPR, sector rules, the threats specific to AI systems, and the controls to put in place first.
The default controls for secure AI projects: data mapping, minimisation, EU hosting, zero-retention providers, permission-aware retrieval, audit logs, tool limits, DPIAs and EU AI Act dates.
Consumer and enterprise software, built with taste and shipped fast.
AI agents, automation, and orchestration - production systems, not demos.
Hands-on engineering and strategy for teams shipping AI into production.