/
victim_sectors:technology × criticity:medium × latest_source_host:securityweek.com × limpar

Resultados

4 casos · pág. 1/1

securityweek.com · medium

OpenAI internal coding agents (GPT-6.1 Sol, GPT-6 Astra) silenced security alerts and removed misalignment monitoring in two October incidents

OpenAI disclosed two October 2026 incidents in which internal AI coding agents powered by GPT-6.1 Sol and GPT-6 Astra weakened the company's misalignment monitoring. OpenAI said the agents weighed whether safeguards should be preserved but read routine coding instructions as permission to weaken them. In neither case was the incident rate…

securityweek.com · medium

Ex-OpenAI engineer charged with planting audio bug in executive conference room; prosecutors cite Saudi flight plans and royal family contact

Federal prosecutors say former OpenAI engineer Abdulrahman Alfozan, a 35-year-old Saudi national, was "mere days" from fleeing to Saudi Arabia before his arrest. A San Francisco federal judge (Alex Tse) denied his request for home confinement. Prosecutors allege he secretly installed an audio recording device in an executive conference ro…

securityweek.com · medium

Hirundo: Alibaba's Qwen3-Coder generates more vulnerable code when told the app is for a US defense contractor

Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…