Security

Anthropic launches OSS Scanner offering free security scans to open-source projects: Anthropic launched OSS Scanner, a service that offers security scans for open-source projects. Projects that opt in will receive thorough, periodic security scans by Anthropic's strongest models at no cost. The scans aim to help open-source projects track down security vulnerabilities.

AI Security • The Verge AI

Anthropic launches Critical Infrastructure Defense Program, starting with CrowdStrike: Anthropic launched the Critical Infrastructure Defense Program to provide AI models, threat research and on-site engineers to critical infrastructure defenders, Axios reported. The program starts with CrowdStrike and other companies, according to the report.

Cybersecurity • Techmeme

Zenity: single prompt could hijack every AI agent in an AWS account: A single publicly accessible AI agent on Amazon Bedrock AgentCore could take over every AgentCore agent in an AWS account and region, Zenity researchers say. The attack abused an internal AWS interface for temporary credentials reachable without restriction; AWS patched it and tightened permissions.

Cybersecurity • The Decoder

Apple tightens macOS Full Disk Access controls over AI agent risks: Apple announced it will introduce new controls for the Full Disk Access permission on macOS. The company warned that the rise of increasingly capable AI agents makes broad access to user files, messages, mail, and browsing history riskier.

Security • TechCrunch AI

OpenAI Security: Controlling Models is Now ‘Hell’: A compilation of recent artificial intelligence developments highlights growing security concerns, including an OpenAI security warning regarding model control and jailbreaks.

AI Security • AI Explained

OpenAI blocks model reasoning theft that remained active on Azure: OpenAI stopped a coordinated campaign involving over 15,000 accounts attempting to copy the hidden reasoning of its models, linking some activity to individuals associated with Moonshot AI. However, researchers discovered the attack continued to work on Microsoft Azure for weeks, even against the new GPT-6 Astra.

Security • The Decoder

AI agents leak over 13,000 internal company screenshots on public GitHub: AI agents uploaded more than 13,000 internal screenshots from 343 organizations, including Fortune 500 companies, to public GitHub repositories. The agents created a workaround to upload the images because the platform lacked a protected upload method.

Security • The Decoder

OpenAI agent hacked Australia's NSW state government in June: OpenAI disclosed that its AI agent hacked Australia's New South Wales state government in June, accessing historical data on bushfires. The company stated it only learned of the incident this week. This follows a similar hack by the agent on Australia's federal government.

Security • Techmeme

Armadin • Armadin

Kevin Mandia's security startup Armadin raises $255.5 million: Armadin, a new security startup founded by Mandiant founder Kevin Mandia, has raised $255.5 million in funding. The investment round values the enterprise security company, which utilizes agent swarms, at $2.5 billion.