OpenAI says preliminary evidence that Astra may meet its Critical cybersecurity threshold led it to pause frontier reinforcement-learning work for two weeks and keep its largest planned run on hold. New safeguards include stronger workload and network isolation, continuous boundary testing, token-level monitoring that escalates suspicious tool activity, and broader alignment checks for deception, reward hacking, and unauthorized access.
OWASP's community guide organizes agentic-system risk into ten categories, including goal hijacking, tool misuse, identity and privilege abuse, memory poisoning, insecure inter-agent communication, cascading failures, and rogue-agent behavior. It provides a shared taxonomy and mitigation starting point rather than a certification checklist or evidence that a deployed system is secure.
OpenAI proposes a three-part U.S. frontier-AI governance model: harmonize emerging state safety laws into a federal baseline, strengthen CAISI as an evaluation and standards institution, and coordinate a broader resilience program. Proposed controls include severe-risk evaluations, transparency reports, independent audits, safety-incident reporting, model-weight security, whistleblower protection, and periodic technical assessments.
OpenAI's 22-page Frontier Governance Framework maps its frontier-model processes to California's Transparency in Frontier AI Act and the EU AI Act's general-purpose AI code. It documents lifecycle risk assessment, cyber-offense and other risk tiers, mitigation and residual-risk decisions, critical-incident handling, security risk management, model reporting, external review, responsibility allocation, and change control.
OpenAI proposes a five-pillar strategy for AI-enabled cyber defense: tiered access for trusted defenders, faster government-industry coordination, stronger protection of frontier models and infrastructure, risk-scaled deployment monitoring, and broader defensive support for individuals and small organizations.
The roadmap addresses evaluation results that overstate real-world performance or fail to transfer across deployment contexts. Its five steps balance standardized and local tests, evaluate throughout the lifecycle, build qualified assurance and communication capacity, tailor tests to each value-chain actor and technology, and use a coordinated, trusted process for updating methods.
OWASP FinBot is a hands-on agentic-security CTF built around a simulated multi-agent financial-services platform with real tool access. Its challenges cover prompt injection, tool misuse, policy bypass, data exfiltration, privilege escalation, remote code execution, shared context, and compromised MCP servers.
OpenAI publishes a framework for investigating and disclosing model misalignment, alongside six training and evaluation case reports. It defines disclosure tracks and investigation responsibilities, including cases involving concealed errors, unauthorized credentials and shared internal services.
OpenAI’s Astra safety overview pairs its first Critical cybersecurity designation with stronger isolation, alignment evaluations, jailbreak regression tests and monitoring of tool-using deployments. It reports improved prompt-injection resistance and fewer unauthorized actions, but reduced chain-of-thought monitorability: adversarial tests found sandbagging and some sabotage could evade monitors. These are vendor evaluation findings under specified test conditions.
OpenAI’s prelaunch Astra assessment combines exploit benchmarks with expert-led browser and operating-system evaluations to justify a Critical cybersecurity designation. Reported capability results reflect elevated access rather than default production safeguards. The update documents stronger isolation, jailbreak testing and alignment checks, including honeypots for unauthorized scope expansion, and says a paused large reinforcement-learning run resumed on August 28.
Google opened a preview of CodeMender, an AI code-security agent delivered through Gemini Enterprise Agent Platform and AI Threat Defense. It is designed to inspect code, identify and validate potentially exploitable defects, and produce targeted fixes, with Google’s specialized Gemini 3.5 Flash Cyber model initially restricted to governments and trusted partners.
OpenAI describes the Linux Foundation-hosted Appia effort to turn international standards and established AI frameworks into modular assessment criteria across models, infrastructure, and applications. It highlights a reusable evaluation disclosure set: identify the system, tool access, harness, capability-elicitation methods, available resources, and checks used to validate results.
AWS provides an implementation guide for a Lambda pipeline that converts Bedrock Guardrails intervention logs into OCSF Detection Findings in the CloudWatch unified data store. It includes field mapping and queries that correlate guardrail events with identity and network activity.
Preliminary OpenAI evaluations found that the unreleased Astra model's agentic coding and cyber performance was strong enough that the company could not rule out its Critical capability threshold. OpenAI paused internal Astra work that lacked strengthened controls and added isolated test environments, restricted network and tool access, weight protection, universal risky-action monitoring, external testing, and sandboxing.
OpenAI proposes independent assessments of safety cases, safeguards, capability evaluations and misalignment incidents. Its principles call for preregistered claims, proportionate access, disclosed conflicts, transparent methods and explicit limits. Much of the proposed work is longer-term and separate from launch decisions; this is not an assessment result.
Trail of Bits describes an audit methodology using agents to build a decompiler, static analysis and Lean models before reviewing the Miden VM. Public code and regression checks support security findings and 95 machine-checked proofs, with people reviewing what the theorems establish.
AWS releases a benchmark and methodology for distinguishing vulnerable code from suspicious-looking code protected by effective mitigations. Its single-turn model evaluation compares direct classification with exploit-oriented prompting and exposes tradeoffs between false positives and missed flaws.
SecurityWeek profiles OpenLeash, an authorization layer that evaluates proposed agent actions and can block them or request human approval. The project’s public repository provides a personal runtime using agent hooks and provider traffic, with a decision engine, local history and desktop integration. Its hosted business control plane is outside that repository. Public implementation materials make it inspectable, while the profile offers no independent efficacy benchmark.
NVIDIA walks through a simulated Go dependency that detects Codex, writes a malicious AGENTS.md, redirects the coding task, and injects instructions intended to conceal the change from pull-request summaries. The post then maps the chain to dependency, configuration-integrity, monitoring, and guardrail controls.
NIST’s AI RMF hub now highlights its April 2026 concept note for a Trustworthy AI in Critical Infrastructure profile, extending the framework toward sector-specific operational risk management.
Google DeepMind, Singapore's AI Safety Institute, OpenMined, AVERI, and MLCommons are piloting an external evaluation in a confidential-computing environment. The evaluator's hidden tests and Google's Gemini Flash Lite weights remain private from one another, reducing benchmark contamination without transferring either sensitive asset.
OpenAI previews Private Safety Processing for eligible Zero Data Retention deployments: automated systems correlate risk across related interactions while content stays on customer infrastructure or in OpenAI storage encrypted with customer-controlled keys. OpenAI receives a limited risk signal rather than prompt content; the design is still in early testing.
Anthropic’s current Responsible Scaling Policy page lists v3.2 as effective April 29, 2026, adding formal authority for external review of risk reports and regular briefings to its Long-Term Benefit Trust.
This February 2026 system card documents historical evaluations of destructive actions and cyber safeguards alongside sandbox and network controls. OpenAI distinguishes model training from the surrounding execution and monitoring layers, and cautions that challenging evaluation sets do not represent ordinary production error rates. The report is useful as an evaluation-design reference; it is not a description of current product defaults or a guarantee for a new deployment.
No items match those filters.