Artificial intelligence safety and security encompasses the technical and policy measures used to mitigate model risks, vulnerabilities, abuse and failures. Truncated covers research developments, threat analyses, defense mechanisms and policy discussions related to reliable deployment.
AI-generated summary Broadcom shipped dozens of fixes for vulnerabilities to select users of its TrueSource Spring Enterprise platform ahead of public disclosure. TrueSource Spring Enterprise customers receive immediate fixes across all supported platform versions to speed deployment.
AI-generated summary Cisco Talos released the open-source CAIRN toolkit to help defenders hunt for AI endpoints, prompt templates, and API-key patterns inside suspicious files. The NIK C2 framework abuses the OpenAI API for credential theft and remote system control while billing victims for the AI usage.
AI-generated summary Fortra has available insights from Rohit Dhamankar regarding how artificial intelligence forces organizations toward a higher security testing maturity. Organizations must transition their security testing from an annual audit task to continuous adversarial testing against their own environments.
AI-generated summary Symantec says an unauthorized relay service is rolling out genuine OpenAI Codex and Anthropic Claude Code tools on company computers to redirect traffic through servers it controls. The relay modifies configuration files, disables AI sandboxes, and exposes enterprise prompts, files, and login tokens to potential interception and abuse.
AI-generated summary Researchers used the officially released checkpoint of Zhipu AI's open-weight model GLM-5.3 to evaluate its performance across 13 offensive cyber scenarios. Irregular stated that GLM-5.3 repeatedly reproduced memorized code verbatim and used it to reach correct answers, which violated instructions in specific adherence tests.
AI-generated summary PHP released fixes for PHP2Shell vulnerabilities identified as CVE-2026-109618 and CVE-2026-109619 after reports from Calif and Wiz. Censys tracked millions of PHP services running affected versions while attackers attempted to exploit the flaw.
AI-generated summary Rubrik has released Rubrik Agent Cloud to evaluate real-time behavior and assess agent intent to block or permit actions before execution. The platform delivers holistic visibility across the entire agent estate and uses granular rollbacks to restore the environment to a known good state.
AI-generated summary AWS shipped Project Mantle, a second inference endpoint for Bedrock that lives at bedrock-mantle dot region dot api dot aws. Plerion says the endpoint requires turning on CloudTrail data events for AWS colon colon BedrockMantle colon colon Project to see Mantle inference.
The top AI news in your email delivered each morning. Choose categories