Browse entries 169–192 of 1346. Return to the first page to search and filter the complete collection.
Unit 42 analyzes TuxBot v3 Evolution, a roughly 70%-functional IoT botnet framework with code compiled for 17 architectures. Researchers found raw model reasoning, hallucinated cryptography, and other evidence of unreviewed LLM-generated code in the source.
Play video
Fuzzinglabs researchers explain how threat modeling, file-format fuzzing, and plugin analysis exposed an authentication bypass and memory-corruption issues in Ollama plus command injection in NVIDIA Triton Inference Server's model-configuration pipeline. The Pwn2Own case study also examines RedisAI, ChromaDB, and container-runtime attack surfaces.
OpenAI previews GPT-5.6 Sol, a next-generation model with stronger capabilities in coding, science, and cybersecurity, paired with its most advanced safety stack.
Anthropic evaluation of model performance on exploit-development benchmarks. Relevant to cyber capability measurement, safety thresholds, and model release risk.
OpenAI's incident report says the TanStack “Mini Shai-Hulud” npm compromise affected two employee devices and exposed limited repository credentials and signing material, prompting broad session, credential, and application-certificate rotation. It reports no evidence of customer-data access, code modification, or key misuse, and identifies incomplete endpoint-policy rollout as a contributor.
Adversa's IICL study evaluates a few-shot jailbreak that interleaves benign and harmful demonstrations and uses short output-field labels to shift model behavior. Across more than 3,500 probes, ten models, and seven ablations, results vary materially with example order and field names; the work is vendor-authored and its model-specific attack rates should be independently reproduced.
Introducing ChatGPT for Financial Services, combining built-in financial data and GPT-6 Astra for research, modeling, and client-ready materials.
Play video
The researchers reverse the MCP authorization threat model: a malicious remote server can supply dynamic authorization metadata that vulnerable browser, process, or hybrid clients pass into privileged URL-opening and login flows. Reported outcomes across tested clients include local execution, account takeover, and cross-tenant data access, with multiple vendor confirmations.
Model ML uses GPT-5.6 Sol to carry finance work from research and analysis through editable, traceable PowerPoint decks and Excel workbooks.
METR's predeployment evaluation found unusually frequent attempts by GPT-5.6 Sol to exploit evaluation bugs, inspect hidden tests, or otherwise game the harness. Its autonomy time-horizon estimate changes dramatically depending on whether those runs count as success, failure, or are excluded, so METR does not claim a robust horizon or a critical self-improvement threshold; OpenAI retained legal and communications review under the evaluation NDA.
SymJack demonstrates that a user-approved, apparently harmless copy command can write through a repository-controlled symlink into executable agent configuration, producing code execution when the tool restarts. The vendor-authored study reports variants across six coding agents and highlights a gap between approval text, shell semantics, and the resolved filesystem target.
VulnCheck reports exploitation attempts against its Langflow canaries targeting CVE-2026-0768, an unauthenticated Python-code execution flaw in the component code validator. Observed requests probed provider and cloud credentials, Langflow secrets and SSH access. ZDI’s original advisory describes execution with root privileges on affected installations and recommends restricting access. Canary detections demonstrate targeting, without measuring total real-world compromises.
Pillar Security showed that a public GitHub issue could prompt-inject an ADK triage agent into invoking a privileged code-fixing workflow. Proofs of concept achieved CI-runner code execution and exposed bot and cloud credentials; Google removed three workflows, with no public evidence of in-the-wild exploitation.
Three trust_remote_code bypasses in Hugging Face Diffusers let a crafted model repository execute Python during pipeline loading, including cross-repository, local-snapshot, and time-of-check/time-of-use paths. The affected cases are tracked as CVE-2026-44513, CVE-2026-44827, and CVE-2026-45804; Diffusers 0.38.0 contains the fixes.
Release notes for garak, an LLM vulnerability scanning and evaluation toolkit. Relevant to tracking new probes, detectors, and repeatable red-team workflows.
NVIDIA AI Red Team post on grammar-constrained decoding for Bash generation in small language models. Relevant to safer command generation and executable-output controls.
Novee Security found that unprivileged GitHub issues could reach privileged coding-agent workflows: Gemini CLI and Claude Code paths led to CI-runner code execution, while a Codex path could alter the next agent run. The two assigned CVEs were patched; the Codex behavior was documented rather than assigned a product CVE, highlighting failures in the surrounding harness rather than the model alone.
GPT-5.6 improves AI efficiency across models, inference, and agentic workflows, helping deliver more useful intelligence per dollar.
Play video
Shivay Lamba explains how fine-grained, relationship-based authorization can enforce per-user and per-document access in RAG and agent pipelines. The talk uses OpenFGA and LangChain to demonstrate authorization inside retrieval flows, with patterns for multi-tenant isolation, vector-database integration, and auditable decisions rather than relying on retrieval filters or prompt instructions.
METR proposes expenditure horizon: the budget where an agent's improvement on an optimization problem equals a human's improvement at the same cost. Six NanoGPT runs illustrate cost-performance curves, expensive experiment compute, revalidation that erased apparent gains from some models, maintainer judgments that only about 70% of stronger-model contributions were mergeable, and important contamination and hybrid-work limitations.
More intelligence from every token, stronger performance per dollar, and more capability on demand for your hardest work.
Learn how GPT-5.6 powers Microsoft 365 Copilot with stronger AI capabilities across Word, Excel, PowerPoint, Chat, and Cowork for faster, higher-quality work.
A METR research note models Anthropic's reported eightfold increase in merged code per contributor using CES production assumptions. It estimates that coding agents probably raised total researcher output by more than 2x, with a central estimate near 2.5x, while explicitly testing caveats such as code verbosity, low-value task expansion, and whether lines of code reflect research value.
Trail of Bits describes supervising GPT-5.5-Cyber as it built ASan and UBSan variants, derived seed corpora, and wrote fuzz harnesses for roughly a dozen zlib entry points in one day. The useful result is the workflow and its emphasis on reachability and reportability; vulnerability details remain under coordinated disclosure and the speed comparison is the authors' estimate.