Researchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
- Mentions · 7d3
- Mentions · 30d22
- All mentions52
- First seenAug 12, 2026
- Last mentioned1d ago
Timeline
52 articles · newest firstGoogle opens Android Studio to outside agents and Gemini APIs
Rabbit 2's Bring Your Own Agent feature runs more than 40 agents, including Claude, Codex, and Antigravity, through ACP.
62
Downloads-folder instruction files steer Codex and Claude Code
In Forever Security tests, Codex followed the planted file in more than 90% of attempts and Claude exposed a login token about half the time.
62
Software-only jailbreak released for Switch 2 firmware 23.0.1
ns2jb is tethered, runs native code as sysmodules, and was used to mod Mario Kart World.
44
Fingerprint launches Agentic Installation for fraud-detection setup
Developers can prompt Claude Code, Codex, or Cursor, or run one CLI command, then optionally query fraud data through an MCP server.
22
Storm-0940 used ARTEX against over 2,250 Microsoft 365 tenants
Stolen ConnectWise application credentials enabled Graph access; a separate spray of more than 151,000 logons had no successful authentication.
76
AgenticRoboRL post-trains robot planners across different harnesses
On LIBERO-PRO, a 9B planner rose from 18.1% to 71.0% success without external memory.
48
Agent4Sci: frontier agents beat science ML baselines via engineering
Claude Opus gained 10.4% mean relative improvement on 20 benchmarks; research plug-ins raised that to 20.1%.
48
OpenVLHarness adds tools and memory for visual agent reasoning
On 22 benchmarks, average scores rise 9.7–12.6 points over matched no-tool baselines across eight backbones.
42
Épi agent reports 120 record-setting autonomous research results
Authors say Épi-turbo beat Codex by 5.4% on 30 FrontierOR tasks at 64% of the model cost.
56
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Any.Run found 1,258 fake Claude and ChatGPT campaigns using ClickFix to infect developers with malware.
73
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
58
Benefit Street Partners answers questions faster with Codex
Benefit Street Partners uses OpenAI Codex and GPT-6 Astra to speed credit underwriting analysis.
22
New Aoki Infostealer Targets AI Coding Assistant Credentials
Symantec says the Aoki infostealer now steals API keys and sessions from AI coding assistants.
66
Sullivan & Cromwell brings legal expertise into agreement review
Sullivan & Cromwell built Agreement Analyzer on Codex and ChatGPT Enterprise to review contracts against firm precedents and playbooks.
15
Higgsfield takes AI video from 1 minute to over 10
Higgsfield says GPT-6 Astra and GPT-Image-2.5 now support AI videos longer than 10 minutes.
26
Warden Stealer Malware Targets Claude, Codex, Grok and Cursor to Steal AI Agent Data
Warden Stealer, a Rust malware-as-a-service, harvests tokens and prompts from Claude, Codex, Grok, and Cursor.
78
How Oracle turns days of work into minutes with ChatGPT and Codex
Oracle says more than 100,000 employees use ChatGPT and Codex to shrink multi-day tasks to minutes.
32
Vijil DART tests AI agents for security flaws and policy violations
Vijil launched DART, automated adaptive red-teaming that probes enterprise AI agents with multi-turn attacks to find security flaws and policy violations.
30
Apple and a Hacker's Future
Attackers are exploiting macOS screen-sharing flaw CVE-2026-65400 on exposed port 5900 to install Monero miners.
74
EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents
EvoRiskBench releases 450 adversarial workspace-agent tasks; worst configuration (Codex plus DeepSeek-V4-Pro-0813) reached 68.44% attack success rate.
58
Exabeam brings AI-assisted security investigations to data that must stay on-premises
Exabeam expanded its Agentic SOC with Nova AI investigations and on-premises LogRhythm support for data that cannot leave the environment.
32
Why Dwarkesh is Wrong about Computer Use + How OpenAI shipped its Jev competitor in 1 Week
Latent Space's OpenAI DevDay podcast covers GPT-6.1 Sol, Dots, Computer Use agents, and the new Agents API and Decisions API developer stack.
55
[AINews] OpenAI DevDay 2026: Dots, 6.1 Sol, Ultrafast, Decisions API, Agents API, Spaces, Marketplace, and 1.2 Billion ChatGPT WAU
OpenAI DevDay 2026 launched Dots agents, GPT-6.1 Sol, Ultrafast inference, Decisions API, Spaces, and enterprise marketplace, with 1.2B ChatGPT weekly users.
75
Add one more AI worry to the nightmare scenario: self-replicating prompt injections
OpenAI found worm-like 'self-replicating prompt injections' against its GPT models and is adversarially training GPT-5.6 to resist them.
58
ChatGPT now reaches 1.2 billion people every week, OpenAI says
OpenAI reports 1.2 billion weekly ChatGPT users and nears $70B annualized revenue, driven by enterprise sales and GPT-6.1-Sol pricing.
52
OpenAI expands Codex and its API at DevDay with security scans, a Decisions API, and Ultrafast
OpenAI's DevDay 2026 adds Codex Security Cloud repo scanning, Computer Use in the Agents API, a Decisions API, and an Ultrafast tier.
72
GPT 6.1 Sol
OpenAI releases GPT-6.1 Sol, nearly matching GPT-6 Astra on coding, computer use, and professional tasks at one-fifth the token price.
60
DevDay 2026 Recap
OpenAI recaps DevDay 2026 with 20+ announcements spanning ChatGPT, Codex, models, and always-on agents for 1.2B weekly users.
73
Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog
Nvidia launched an agent safety platform pairing OpenShell sandboxing with a BlueField-4 hardware watchdog.
64
Drawgent: Coding agent on a live Excalidraw canvas
Open-source tool drawgent connects Claude Code, Codex, or opencode to a live Excalidraw canvas for diagram-driven coding tasks.
12
Proaction boosts sales 60% and saves 75+ hours with Codex
Fleet software maker Proaction says Codex demos raised deal progression about 60% and saved engineering hours.
22
Prismor: Open-source runtime control plane for AI agents
PrismorSec released Prismor, a free open-source runtime policy layer that allows, warns, or blocks AI coding agent tool calls before execution.
48
Debating RSI, the US-China Gap, and Jaggedness with JS Denain of Epoch AI
Epoch AI's JS Denain and Nathan Lambert debate RSI evidence, the US-China gap, and existential risk.
36
How to connect AI usage to business value
OpenAI explained how ChatGPT Admin Console analytics link AI usage, spend, and Codex contributions to business outcomes.
20
OpenAI’s feud with mathematicians is only escalating
25 Fields Medalists sign an open letter warning AI labs threaten math attribution; NYU's Tristan Buckmaster accuses OpenAI of pressuring him over collaborator credit.
40
OpenAI's new Agents API gives developers the infrastructure behind Codex and ChatGPT
OpenAI released its Agents API in public beta, exposing the infrastructure behind Codex and ChatGPT for building long-running cloud agents.
70
PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws
PaperCut shipped maintenance releases replacing emergency patches for two actively exploited flaws abused in AI-assisted attacks on 395 organizations.
78
How a researcher uses Codex and ChatGPT to search for new antimicrobial molecules
OpenAI profiles César de la Fuente's lab using ChatGPT and Codex alongside deep-learning models to accelerate antimicrobial molecule discovery.
25
AI-powered attack exploited PaperCut flaws to hack 395 organizations
AI-driven campaign exploited PaperCut flaws CVE-2026-81578 and CVE-2026-82078, compromising 440 servers at 395 organizations in 48 countries.
88
Related CVEs
by mentions- CVE-2026-8207861%9.4Unsafe Reflection RCE in PaperCut NG/MF, Chained with Auth Bypass in Attacks
- CVE-2026-8157884%8.8Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
- CVE-2026-654002%9.8Authentication Bypass in Apple macOS Screen Sharing
- CVE-2021-4228777%7.5Privilege Escalation in Microsoft Active Directory Domain Services
- CVE-2021-4227873%7.5Privilege Escalation via sAMAccountName Spoofing in Microsoft Active Directory
Appears with
- OpenAIorganization · 26
- OpenAIvendor · 26
- Codexproduct · 22
- Claudeai model · 13
- ChatGPTai model · 11
- Anthropicvendor · 11
- ChatGPTproduct · 8
- Anthropicorganization · 7
- Claudeproduct · 7
- Claude Codeai model · 6
- Geminiai model · 5
- Cursorproduct · 5
- GPT-6 Astraai model · 5
- Claude Codeproduct · 4
- ChatGPTorganization · 4
- Grokai model · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.