Exclusive: Election ‘war rooms’ enter the AI age
semafor.com — Both OpenAI and Anthropic will have “war rooms” dedicated to ensuring their platforms provide accurate information about the midterm elections.
Safety & Security
Artificial intelligence safety and security encompasses the technical and policy measures used to mitigate model risks, vulnerabilities, abuse and failures. Truncated covers research developments, threat analyses, defense mechanisms and policy discussions related to reliable deployment.
Reddit Plans Mandatory Logins to Block AI Bots From Scraping User Data
Cyber Security News — Reddit plans to make login mandatory for most users to curb AI data scraping and protect public discussions.
Ransomware gang talked AI agents into doing much of its dirty work
Help Net Security — The group behind Aur0ra ransomware gave AI agents stolen credentials and let them move through victim networks toward domain admin access.
About 80 pct of Korean judges encounter AI-generated fake legal precedents: survey
Yonhap News Agency — SEOUL, Nov. 2 (Yonhap) -- Eight in 10 South Korean judges have experienced court cases in ...
Researchers Trick AI Agents Into Transferring User Funds
PYMNTS.com — Nine out of 10 frontier models tested by researchers at Cornell Tech and Yale University bypassed user-set policies to lift spending caps when they had
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
socket.dev — An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
AI agents bypassed crypto spending limits without human approval, researchers find in a new test
5 safety practices to know before vibe coding
Engadget — Here’s what beginners need to know to vibe code securely.
OpenAI adds stricter limits for teens asking about firearms
Engadget — The company said these tighter restrictions apply even if the question asked “appears harmless.”
How We Took Over ChatGPT Accounts
Simon Willison’s Weblog — Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML …
OpenAI plans to train models on Daybreak Blue cybersecurity session data that was previously off-limits
The Decoder — Starting November 29, OpenAI will use data from Daybreak Blue sessions to train its models, even when users have turned off training. After backlash, a follow-up email promised a separate opt-out. The move revives concerns from the dispute with mathematicians who suspected OpenAI used their unpublished research for training without consent.
What happens when AI starts self-replicating?
Engadget — Anthropic warns that future is soon, but the threat is less novel than it seems.
EqualAI CEO: Your AI assistant is acting in your name. Who signed off?
Fortune — AI agents need permission rules before they act.
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
WIRED — Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.
OpenAI sets new behavioral guidelines for AI models that have already proven hard to control
The Decoder — OpenAI has updated its Model Spec, restructuring its AI behavior guidelines around five core values, including faithfulness to human intent and correctability. GPT models should now draw on conversation history to figure out what users actually want and disclose their own assumptions. Whether the models follow these rules is another matter.
AI agent security in Kubernetes
aikido.dev — Abdel Sghiouar, Google engineer and senior cloud developer advocate, thinks prompt injection should be called prompt poisoning
Broadcom bashes bounty of ‘novel vulnerabilities’
sdxcentral.com — Its TrueSource Spring Enterprise users gained early fix access
Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control
Cyber Security News — NIK C2 abuses OpenAI's API to power Windows malware that steals passwords, logs keystrokes, and enables remote access.
AI Forces Organizations To A Higher Security Testing Maturity
Forbes — The skill that once separated a script kiddie from a serious threat actor is thinning out, but many organizations are still operating on an older cadence.
Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data
Cyber Security News — A grey market service hijacks Codex and Claude Code settings, routing company data and credentials through its servers across 12 orgs.
Dismiss email signup
Subscribe to 
The top AI news in your email delivered each morning. Choose categories