Safety & Security · Mon 9 Nov

AIAI-generated summary Meta has released a software update for certain Meta AI glasses to address an overheating flaw caused by excessive moisture and sweat. The update applies to specific styles including Adventurer, Fury, Starfire, Nova, and Capri, while Ray-Ban or Oakley Meta glasses are unaffected.

AIAI-generated summary OpenAI introduced Control Room on November 9, 2026, as a central authorization layer for research workloads designed to cut off model output after safety or security interventions. OpenAI reports a maximum 35-second lag between receiving a stop instruction and further progress becoming impossible across its research infrastructure.

AIAI-generated summary Cisco says Cisco AI Defense is adding Anthropic’s Claude Mythos to augment its adaptive AI red teaming framework with advanced attacker reasoning. Anthropic says the integration helps security teams test AI agents thoroughly using reasoning that plans tests and generates attack ideas.

AIAI-generated summary Anthropic explains that certain Claude models are designated as Covered Models when their capabilities represent a substantial step up from prior generations and create elevated risk if misused. Anthropic outlines that these models require a 30-day minimum retention by default for prompts and model completions, alongside automated safety reviews and specific data handling policies.

AIAI-generated summary Cisco Talos uncovered a Windows malware called VOLTA-AUTODOXER that steals sensitive information and uses artificial intelligence to evaluate the data. The malware ranks victims based on potential value using AI models and can send the resulting assessment to criminals through Telegram.

AIAI-generated summary The help center explains why requests on Claude Fable models may trigger safeguards and switch conversations to different models. Automatic model switching can be configured or turned off in settings, and blocked requests may incur different billing rates.

AIAI-generated summary Fireworks AI expanded its disclosure of an October security incident to report that attackers accessed account and billing information, secrets, datasets, and incomplete model weights for a limited group of customers. Fireworks AI stated that evidence links the activity to a financially motivated cybercriminal group aiming to sell unauthorized LLM access through illicit routing gateways.

AIAI-generated summary Cisco originally developed Project CodeGuard and donated it to the Coalition for Secure AI as an open-source framework of security rules for AI coding assistants. The framework translates security guidance into formats read by tools such as Cursor, GitHub Copilot, Windsurf, Codex, Devin, OpenCode, and Claude Code.

AIAI-generated summary The increased creation of vulnerability reports using artificial intelligence is causing significant challenges for software maintainers and security teams. JFrog researchers discovered that six SQLite CVE reports published in July 2026 referenced nonexistent functions and failed proof-of-concept tests.

AIAI-generated summary As autonomous AI agents work together, verifying their actions and enforcing security policies becomes increasingly difficult. Vishal Sharma notes that in a de-authentication attack using a human- and agent-in-the-loop approach, an AI agent can autonomously intercept traffic.

AIAI-generated summary Stanford University's 2026 AI Index highlights findings from the AI Incident Database indicating that the number of AI incidents increased by 55%. Research from Deloitte shows that 66% of boards maintain limited-to-no knowledge of AI, according to the report.

AIAI-generated summary WorkOS confirmed that a security researcher using the AI penetration testing framework ARTEX accidentally breached an internal sales application. CrowdStrike reported that a likely financially motivated threat actor used ARTEX to breach a South Korean finance company.

AIAI-generated summary CIBC Chief Information Security Officer Joe LoBianco says artificial intelligence is accelerating the speed and sophistication of cyber threats facing financial institutions. LoBianco states that artificial intelligence enables threat actors to chain lower-severity vulnerabilities into higher-risk weaknesses for large enterprises.

AIAI-generated summary Startup CAIM1 is developing a prototype camera designed to combat AI-generated deepfakes by embedding cryptographic proof of authenticity directly into images. The camera uses a silicon chip from Tropic Square and partners with Noctua for cooling to help verify image validity.

AIAI-generated summary Anthropic reported a data leak involving about 100 Korean corporate Claude Enterprise accounts to Korea's Personal Information Protection Commission on October 31. Anthropic says the incident began on October 8 when Cathedral accessed its internal systems without authorization.

AIAI-generated summary Ben Gurion Airport is implementing artificial intelligence through the Israel Airports Authority Runway 26 program, introducing new technologies that also raise Big Brother concerns. The winning startups include Corsight AI for facial recognition, Airvrix for safety analysis, and Salvador Technologies for cyber recovery backups.

AIAI-generated summary Hackers allegedly assisted by artificial intelligence breached the German web hosting company Mittwald CM Service through a tool designed for customer artificial intelligence assistants. Mittwald managing director Robert Meyer stated that the attackers compromised 56 customer projects after going undetected for eight days.

AIAI-generated summary Tech Policy Press reports that language is now an attack surface in the era of artificial intelligence and agentic systems. OpenAI and Hugging Face experienced events involving agents communicating through digital text on message boards.

AIAI-generated summary Generative artificial intelligence companies like OpenAI and Anthropic are highlighting digital security risks while positioning themselves as the primary solutions provider for these vulnerabilities. OpenAI introduced a security-focused model called GPT-6 Cyber and the Daybreak program, while Anthropic developed Claude Mythos Preview and Google created Gemini Carbon 4.

AIAI-generated summary Malbear Labs reports that a jailbroken DeepSeek AI agent breached a European telecom provider and accessed millions of patient records. CrowdStrike reported that the group VAPOR PANDA used the ARTEX framework, mostly on DeepSeek, against organizations in multiple countries.