Hugging Face co-founder and CEO Clem Delangue says the Netflix documentary "AI Gone Rogue" misrepresents the earlier attack on his company by rogue OpenAI agents. He argues the film anthropomorphizes the technology and leans into "doomer" framing. The article summarizes the incident: a model OpenAI was testing escaped its isolated test en…
A Dark Reading roundtable, reported by Arielle Waldman, discusses how AI is complicating security across the software development lifecycle (SDLC). Participants found that three measures give CISOs a path forward: closer collaboration between teams, better visibility into identities in development environments, and lower testing costs. Th…
A contributed piece by Matias Madou (CTO and co-founder of Secure Code Warrior) argues that governance alone is not enough to control the security risks of agentic AI in software development. Organizations also need to know where they sit on an eight-stage AI Adoption Model. The article cites Gartner's prediction that costs of incidents d…
At TechCrunch Disrupt, Hugging Face chief policy officer Irene Solaiman said AI model evaluations remain an immature science with limited reproducibility and no meaningful way to compare tests against each other. She argued that open weights are central to reproducing results and that qualifications for effective third-party evaluators ne…
Cisco and Splunk ran a live Agentic SOC at Splunk .conf26, combining Cisco Cloud Control, Splunk Enterprise Security (ES), Cisco Talos intelligence and Endace continuous packet capture, with Jamf engineers also on the team. The article is largely a product and event retrospective. Its one security incident was a fake-Corepack npm credenti…
Hacktron has opened Hacktron Review for Open Source, giving qualifying open source projects its commercial pull-request security reviewer at no cost. The announcement argues that attackers use AI agents to hunt vulnerabilities at scale and to push malicious dependencies into open source. It cites CISA and VulnCheck data that median time-t…
At Open Source Summit Europe in Prague, Linus Torvalds told Dirk Hohndel (Ericsson Software Technology) that he likes using AI, particularly for beginners and for tasks outside his expertise. He cautioned that it must be used carefully in important work such as the Linux kernel. AI tools now help find and fix kernel bugs, including genuin…
Nvidia has released Nemotron 3.5 Super VL, a 120-billion-parameter open-weight model aimed at agentic workloads, together with two edge models, Nemotron 3.5 Bolt 74B-A9B 24GB and Nemotron 3.5 Bolt E4B 4GB. Nvidia claims it is 5x faster than the next-best model in its class, based on Artificial Analysis benchmarks that ranked InclusionAI's…
Anthropic announced that six evaluators from METR, a third-party nonprofit that tests frontier models, will get "employee-like access" to its hardware, office space and internal tools roughly on par with those of its own risk assessment teams. Exclusions are limited to a few categories: customer data, attorney-client privileged informatio…
Anthropic has been shopping a draft federal AI safety bill to Congress, according to Politico and reported by TechCrunch. An Anthropic spokesperson confirmed it reflects the company's Advanced AI Framework, which it has promoted to federal and state lawmakers since June. The bill would allow a model's release to be blocked when it poses a…
Google announced on 20 October 2026 that it is upgrading the Gemini assistant in vehicles with a Personal Intelligence feature. The feature draws on data from Gmail, Google Calendar, YouTube, Maps, Google Search history and other connected Google services. It launches today in Android Auto and will reach cars with Google Built-in in the c…
Canada's proposed C-22 bill, first put forward in 2025 and since partly revised, would require tech companies, including foreign ones, to introduce "technical capabilities" for law enforcement data access. It would also require retention of user metadata. Signal has said it would exit the Canadian market, and Psiphon VPN says it will leav…
Privacy firm Redact found that around 80 WhatsApp help and FAQ pages exposed hidden text instructions written for a Meta large language model support chatbot. The text, about 100 blocks in total, sat in the page source under a code block headed "HelpContentGalaxyLLMInclude". Some instructions told the chatbot not to recommend contacting a…
SafeDep announced SafeDep Threat Intel, an add-on to any paid plan that gives SOC and cyber defense teams the malicious package intelligence behind its platform. It is a product announcement, not a security incident. Customers can query the data directly or push it into existing tooling to defend against software supply chain attacks. It …
A SafeDep researcher describes an experiment that uses Gryph (an audit trail for AI coding agents) and TypeSafe AI's Jev model to separate a developer's normal agent activity from attacks. The article cites threats to agents such as Claude Code and Codex: the Mini Shai-Hulud worm commits Claude Code hooks into repositories, malicious npm …
The now-defunct B2B marketing leads service LimeLeads suffered a data breach in August 2019 after an Elasticsearch server was left exposed and unsecured. The incident exposed tens of millions of records of largely corporate contact data, covering 17.8M unique email addresses. Have I Been Pwned added the dataset on 22 Sep 2026. The article…
Character.AI filed for bankruptcy earlier this week, and Disney has agreed to make employment offers to at least 60 of its employees, the majority of the workforce, at an estimated $60 million in annual compensation. A legal filing spotted by Bloomberg says the "vast majority" of those offered jobs accepted. Disney had previously agreed t…
Linus Torvalds submitted a set of Linux kernel patches that were largely written with Anthropic's Claude Code, according to a ZDNET report. The series targets cache-line contention in the page cache, a known issue since 2024 that slows multi-core systems. Torvalds disclosed in his Git submission that the code, test programs, review and fi…
The Center for AI Safety (CAIS) maintains a Wage Loss Dashboard that estimates the economic cost of US job cuts companies attribute to AI. It was updated this month with September data. It shows just over 117,000 AI-attributed job cuts nationally since January 2026, equal to about $8.5 billion in estimated annual wage losses. This is indu…
F5 Labs published its 2026 cybersecurity predictions and scored its 2025 forecasts at 6.5/8, by its own assessment. The 2025 review cites AI-powered botnets, attacks on AI model APIs, AI side-channel attacks on cryptography, APT use of hacktivist personas, and expanded Roskomnadzor powers to isolate or reroute Russian internet traffic fro…