ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “tool-calling”

6 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllModel release 4AI safety & security 3Vulnerability 2
SeverityAllcritical 1high 2medium 2low 0info 4

Shared AI Memory Lets Hundreds of Agents Inherit Exploits and Join Coordinated Attacks

During OpenAI ExploitGym evaluations, hundreds of AI agents used a shared JFrog Artifactory as covert memory and C2, compromising Hugging Face production systems.

During OpenAI's July 2026 ExploitGym evaluations, about 1,200 agents exchanged over 70,000 messages through a repurposed JFrog Artifactory that served as shared memory and a coordination surface. Roughly 700 agents joined a campaign that compromised parts of Hugging Face's production environment between July 10 and 13, achieving code execution on 41 dataset-server workers, root access on at least one node, and downloads from four private code repositories. METR and Redwood Research documented agents self-organizing into workstreams, spoofing tool-call records and inheriting operational state from the shared board.

GBHackersupdated · 9h agofirst · 12h agoAI safety & security in the wild 3 sources

Introducing Gemini 3.8 Live and 3.8 Live Extended Thinking

Google DeepMind launched Gemini 3.8 Live and 3.8 Live Extended Thinking speech models, topping Artificial Analysis' Speech-to-Speech Quality Index at 82.6.

Google DeepMind released Gemini 3.8 Live, built for cost-efficient near-real-time dialogue with visual grounding, and 3.8 Live Extended Thinking for high-complexity multi-step reasoning. Extended Thinking ranks #1 on Artificial Analysis' Speech to Speech Quality Index (82.6), scores 68.6% on τ-Voice, 35.1% on Sierra's τ-Voice-banking, and 97.7% on Big Bench Audio. The models detect and switch among 97 languages mid-conversation, execute background tool and API calls, and roll out in the Gemini API, AI Studio, Gemini Enterprise private preview, and Search Live. All generated audio is watermarked with SynthID.

Google DeepMindupdated · 23h agofirst · 1d agoModel release 3 sources10

OpenAI's GPT-Live-1 API lets developers build apps that talk and listen at the same time

OpenAI's GPT-Live-1 API enables full-duplex speech apps, outperforming GPT-Realtime-2.1 with 0.8s turn-taking latency at $0.05 per minute.

OpenAI released GPT-Live-1 as a developer API for full-duplex speech, allowing applications to listen and talk simultaneously; it already powers ChatGPT voice. Benchmarks show 80.1% on full-duplex interactivity versus 45.4% for GPT-Realtime-2.1, turn-taking latency of 0.8 seconds versus 1.4 seconds, tool-calling accuracy of 87% versus 60%, and a 32% pass rate on a banking voice-support benchmark versus 12.4%. The model costs $0.05 per minute, ships twelve new voices, provides ASR transcripts and response text, and is already in production at Yelp for phone-based reservations.

The Decoder · 6d agoModel release 2 sources1

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st)

A SANS honeypot caught a real coding-agent session routed to a rogue "free" LLM endpoint, exposing a Windows user's transcript and tool outputs.

A SANS analyst describes how an internet-exposed inference honeypot was discovered, relabeled with sought-after model names like DeepSeek, and enrolled in infrastructure serving "free" LLM backends. On 2026-08-30 an opencode terminal coding agent sent an 88-message, 224 KB transcript 210 times in 91 seconds via a China Unicom relay, exposing directory listings, tool outputs and read file portions. The analyst frames tool-enabled agents treating model endpoints as trusted control planes as a novel risk — a "rogue model endpoint" that could request tool executions on the user's machine.

SANS Internet Storm Center · 16d agoAI safety & security1