Safety & Security

AIAI-generated summary The Government of Canada has co-signed the Paris call for AI safety and security alongside leaders from five other countries and ten AI companies. Signatories to the declaration have committed to permitting independent testing of models, providing early warnings, and disclosing frontier model capabilities.

AIAI-generated summary Enterprise customers are increasingly demanding more guardrails on artificial intelligence models already in use rather than focusing on frontier developments. F5 Chief Technology Operations Officer Michael Montoya notes that security obligations and liability for deployed models fall directly on enterprises.

AIAI-generated summary New York Governor Kathy Hochul launched a statewide artificial intelligence science and safety effort on November 10, 2026. The initiative puts the New York Center for AI Responsibility and Research at Binghamton University in charge of independent frontier-model testing.

AIAI-generated summary Meta is introducing artificial intelligence tools on Instagram to estimate user ages and restrict accounts belonging to children. The company stated that the global rollout follows initial testing and addresses the industry challenge of users misrepresenting their birthdays.

AIAI-generated summary Arkose Labs published its State of Agentic AI Trust Report for Q3 2026, finding that 97.7% of legitimate AI agent sessions lacked verified disclosure. Hydden CEO and Co-Founder Dargan stated that enterprises often fail to establish what identity an agent has, who owns it, and what it can reach.

AIAI-generated summary Rein Security is building a platform to provide visibility into what AI agents access and when to intervene. Rein says its controls can block harmful actions while allowing agents to continue or stop them using a kill switch.

AIAI-generated summary ANY.RUN reports that AI-assisted malware analysis combines automated attack execution, interactive investigation, threat intelligence, and AI-generated reporting to help security teams reach malicious activity faster. ANY.RUN says that its new Related Threat Context capability surfaces related sandbox analyses alongside suspicious indicators, connecting suspicious infrastructure to campaigns like SkyW4lker.

AIAI-generated summary Stanford University’s 2026 AI Index documents 362 reported AI incidents in 2025, compared with 233 in 2024. Deloitte’s State of AI in the Enterprise 2026 finds that only 1 in 5 surveyed companies has a mature governance model for autonomous AI agents.

AIAI-generated summary Persistent Systems Ltd executive Mukul Arora discusses model poisoning as a major risk in enterprise AI. Mukul Arora advises that corporate boards must govern AI model integrity by asking questions about training data provenance and adversarial testing.

AIAI-generated summary Railway reports that its October 21st security incident involved a large-scale malicious attack where a threat actor probed routes using agent speed and abliterated models against defenses similar to ARTEX, according to Wiz. Railway states that the forensic investigation indicates the attacker was targeting AI provider credentials to sell to distributed transfer stations for use in distillation.

AIAI-generated summary Users of Anthropic’s Claude and OpenAI’s Codex have reported hitting safety guardrails and account restrictions while attempting AI-powered reverse engineering. OpenAI engineer Tarun Gogineni stated that account restrictions for reverse engineering are largely accidental and that the issue is being fixed.

AIAI-generated summary The CISO Forum Virtual Summit 2026 runs on November 10 and November 11 to address enterprise security executives navigating the complexities of the artificial intelligence threat landscape. Event sessions deliver practical frameworks for artificial intelligence governance, third-party risk management, and team resilience.

AIAI-generated summary CodeRabbit added multi-repository analysis to Deep Scan in CodeRabbit Secure so security agents can examine related repositories during investigations. CodeRabbit says the feature uses architecture summaries and auto-linking to focus context on closely related repositories.

AIAI-generated summary DeepMind co-founder Demis Hassabis warns that the race to build artificial intelligence that improves itself is outpacing safeguards. He describes recursive self-improvement as a very dangerous method when human reviewers are completely removed from the process.

AIAI-generated summary People using Anthropic’s Claude and OpenAI’s Codex for AI-powered reverse engineering are encountering guardrails and account restrictions. Tarun Gogineni, an OpenAI engineer, tweeted that accounts are not supposed to be restricted for reverse engineering and that the blocks are being fixed.

AIAI-generated summary The Frontier Model Forum proposes a new Jailbreak Rating Framework to track how artificial intelligence models bypass safeguards. The proposed system grades artificial intelligence jailbreaks across capability gains, scope, and ease of deployment.

AIAI-generated summary Eight countries and top artificial intelligence labs signed a political self-commitment in Paris that includes provisions for shutdown mechanisms on powerful models. French President Emmanuel Macron brought together representatives including Sam Altman and Dario Amodei for the agreement, which lacks binding sanctions or deadlines.

AIAI-generated summary Microsoft researchers used the AI-powered vulnerability-scanning system Hyenas to uncover memory-safety issues and other flaws in Rust's standard library. Microsoft said that practical exploitation of the nearly 11-year-old flaw involving the process::exit function is unlikely.

AIAI-generated summary Hugging Face chief policy officer Irene Solaiman warns that cyberattacks could make open-source artificial intelligence less open. OpenAI and Fireworks have also faced recent security incidents involving their artificial intelligence platforms and infrastructure.

AIAI-generated summary Bots currently generate over 57% of all web traffic while enterprise security systems struggle to handle the dynamic behavior of agentic AI. Microsoft features Entra Agent ID to treat agents as unique user identities with distinct machine identities that can be logged and analyzed.