Search: “Apple Intelligence”

Tell HN: iOS 27 does not allow Apple Intelligence to be disabled

Hacker News discussion argues Apple Intelligence is a marketing umbrella for disparate long-standing ML features, explaining why iOS 27 lacks a disable switch.

A 'Tell HN' post reports that iOS 27 does not allow users to fully disable Apple Intelligence. Discussion replies argue 'Apple Intelligence' is a marketing term covering disparate features rather than a single product. Commenters cite long-standing local-model features such as image OCR, battery-life prediction, and the Latent Semantic Mapping text classification framework available since 2007.

Hacker News · security·Sep 14, 21:21 UTC · 1d agoAI industryHN 30↑ · 2 comments

Read the Apple document explaining how new listening features still protect your privacy

Apple published a document explaining its new Audio Intelligence features process audio in a hardware-isolated Secure Exclave inaccessible to Apple, apps, or the OS.

Apple released a privacy document alongside the Siri AI Audio Intelligence features announced at its iPhone event, covering Siri Recap, Live Rewind, Sound Recognition, and Music Recognition. It states microphone audio is processed in the Secure Exclave of the S11 chip in Apple Watch Series 12 and Apple Watch Ultra 4, is never saved as a file, and cannot be accessed by watchOS, apps, the user, or Apple. Transfers between watch and iPhone are encrypted between Secure Exclaves, and transcripts sync end-to-end encrypted when a device passcode and iCloud two-factor authentication are enabled.

The Verge · AI·updated Sep 10, 08:18 UTC · 5d ago·first Sep 9, 20:44 UTC · 6d agoAI industry 6 sources

[AINews] AEF-1 standard emerges for Third Party Evaluators, as Xai, OpenAI, and Anthropic all cosign

xAI, OpenAI, and Anthropic cosign the AEF-1 third-party evaluation standard while Dario Amodei proposes embedded evaluators for safety verification.

The AI Evaluator Forum published AEF-1, a baseline standard for independent third-party AI evaluations covering access, conflicts of interest, funding relationships, recusal, and transparency, cosigned by xAI, OpenAI, and Anthropic. Dario Amodei wrote a rare personal blogpost proposing embedded evaluators such as METR with desks, badges, company laptops, and internal-risk-team-level access to verify safety commitments, plus democratic and global coordination frameworks. The roundup also covers the pacing debate: Bilal Chughtai left Google DeepMind arguing progress may outrun alignment, while critics including Aidan Gomez and Cohere push back against slowdowns and lab gatekeeping. Additional items include Cline Desktop's launch with open-weight model support.

Latent Space·Sep 15, 04:50 UTC · 1d agoAI safety & security

Instagram’s AI detection is a mess (again)

Instagram is mislabeling ordinary edited photos as AI Content while some AI imagery goes unlabeled, repeating a 2024 detection failure.

The Verge documents weeks of erroneous AI Content labels on Instagram, including images edited only with Canva's Background Remover or an iPhone Photos app, while some generative images escape tagging. Canva said some of its assistive AI tools were being tagged as generative and claims the issue is fixed, though users still report tagging. Meta scans IPTC and C2PA metadata and uses signals like Google's SynthID, but remains vague about detection criteria; one tester found only Meta AI-created or edited images reliably triggered labels, and an image-poisoned photo was tagged. A similar mislabeling wave hit Instagram in 2024.

The Verge · AI·Sep 4, 12:00 UTC · 11d agoAI industry

Apple CEO John Ternus says the best AI device is still the iPhone

Apple CEO John Ternus said the iPhone is the best AI device, emphasizing on-device processing and privacy in Apple's AI strategy.

At Apple's Surprise and Shine event, new CEO John Ternus, who succeeded Tim Cook (now executive chairman), framed the iPhone as the ideal 'intelligent personal hub' for AI. He listed requirements including on-device AI processing, personal context awareness, high-quality cameras and microphones, long battery life, and seamless integration with other devices. Ternus contrasted Apple's privacy-first approach with rivals' data collection, saying Apple Intelligence runs on device whenever possible.

TechCrunch · AI·Sep 9, 17:36 UTC · 6d agoAI industry1

The AI graveyard: a running list of projects and startups that didn’t make it

TechCrunch compiles a running list of failed AI products and startups, including Relay, OpenAI's Sora, Humane AI Pin, Notion Mail, and Microsoft's Recall.

TechCrunch's 'AI graveyard' tracks notable AI products and startups that shut down or underperformed, citing S&P Global data that about 42% of AI initiatives are abandoned. Examples include the Relay automation startup, OpenAI's Sora video platform (shut March 2026), ChatGPT Atlas browser (discontinued August 9), Notion Mail (shutting September 22), and Apple's delayed Siri AI that contributed to a $250 million settlement. Hardware failures include the Humane AI Pin ($230 million raised, assets sold to HP for $116 million) and the Rabbit R1, which sold 100,000 units but received poor reviews. Microsoft's Recall feature remains controversial after a researcher demonstrated a tool extracting its captured data.

TechCrunch · AI·Sep 15, 19:00 UTC · 12h agoAI industry1

Apple releases iOS 27, macOS Golden Gate 27 with Siri AI and Liquid Glass refinements

Apple released iOS 27 and macOS Golden Gate 27 with a LLM-based Siri AI overhaul powered by new AFM 3 on-device and cloud models.

Apple shipped its 2026 annual OS updates: iOS 27, macOS 27 Golden Gate, watchOS 27, visionOS 27, and tvOS 27. Siri AI is the flagship feature, offering context-aware responses, personal history search, app interaction, and a dedicated Siri app. The stack includes AFM 3 Core (3B parameters on-device), AFM 3 Core Advanced (20B sparse model activating 1-4B parameters), plus AFM 3 Cloud, ADM 3 Cloud (Image), and AFM 3 Cloud Pro server models. Additional features include prompt-generated Shortcuts and Safari extensions, new photo editing options, and a Liquid Glass transparency slider.

Ars Technica · AI·Sep 14, 19:28 UTC · 1d agoAI industry1

Jensen Huang took a call from Trump, and showed off something else, too

At the All-In conference, Nvidia's Jensen Huang took a live Trump call dismissing AI safety fears while flaunting Apple's unreleased $1,999 foldable phone.

At the All-In conference in L.A., Nvidia CEO Jensen Huang answered a live on-stage call from President Trump using Apple's unreleased foldable phone, which hits stores in five weeks at $1,999. During the call, Trump and Huang agreed that fears about AI safety amount to what Trump called a 'hoax,' with Trump claiming the AI panic benefits China and 'political people' and arguing the technology is 'bigger than the internet.' Nvidia stock is up 33% over the past year but fell a few percentage points on the day. The article notes Apple now depends on Nvidia hardware to run part of Apple Intelligence, a decade after dropping Nvidia chips from its devices.

TechCrunch · AI·Sep 15, 01:50 UTC · 1d agoAI industry

With iOS 27, I’m actually using Siri again

Apple's rebuilt Siri, powered by Google Gemini models in iOS 27, finally handles complex multi-step and on-screen-context requests, per TechCrunch review.

Apple's iOS 27 ships a redesigned Siri built on Google's Gemini models, supporting multi-step instructions, on-screen context, file/message/email lookups, and camera viewfinder queries. Siri AI gets a dedicated app with chat history, plus settings for voice and expressiveness. Apple Intelligence also adds natural-language Shortcuts creation and automatic password rotation in the Passwords app.

TechCrunch · AI·Sep 14, 17:10 UTC · 1d agoAI industry

From Hacks to Bioweapons, Claude Misuse Is Now Everywhere

Anthropic reports Claude was misused by Midnight Blizzard, ShinyHunters, disinformation campaigns, and bioweapon attempts; roundup also covers Xinbi takedown.

Anthropic's new report documents eight months of Claude misuse: Russian state-sponsored hackers (Microsoft-named Midnight Blizzard) used it for reconnaissance against Ukrainian and European government networks, stealing data and maintaining access, while ShinyHunters used it across hacking and extortion campaigns, and users attempted bioweapon development. Anthropic says it disrupted the activity. The WIRED roundup also covers the US seizure and sanctioning of Xinbi Guarantee, a Telegram black market with $30 billion-plus in sales mostly laundering pig-butchering scam proceeds, plus DOJ raids on 13 scam compounds in Madagascar and a four-year prison sentence for a Conti ransomware member. Meta faces scrutiny over AI child abuse ads and a class action over photo harvesting for AI training.

WIRED · Security·Sep 12, 10:30 UTC · 3d agoAI safety & security in the wild 13 sources

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

SOCRadar details AnonyMousKIT, a phishing-as-a-service platform using AI voice agents posing as Apple Support to steal passcodes and 2FA codes.

SOCRadar's Threat Research Unit documented AnonyMousKIT, a credit-metered phishing-as-a-service platform that strips Activation Lock from stolen Apple devices across email, SMS, WhatsApp, recorded calls and AI voice agents. The 'Alice from Apple Support' personas request the device passcode, Apple ID credentials and a live 2FA code, with lures citing the handset's model identifier and live Find My status. Of 200 recovered AI calls made between August 31, 2025 and May 30, 2026, 179 targeted Brazil, and the calls cost $19.24 total via voice platform Vapi. Exposed log paths revealed 30 kit installations on 42 domains and 6,092 send attempts family-wide between March and July 2026.

The Hacker News·Aug 26, 05:49 UTC · 21d agoPhishing & fraud

Top 10 Best Mobile Threat Defense (MTD) Solutions in 2026

Roundup of 2026 mobile threat defense tools recommends Zimperium and Lookout for targeted-attack detection and Defender for Endpoint for Microsoft shops.

This guide ranks ten mobile threat defense solutions, recommending Zimperium and Lookout for on-device detection against targeted users such as executives and journalists, and Microsoft Defender for Endpoint mobile for organizations already licensing Microsoft 365 E5. It explains that MDM enforces configuration while MTD detects attacks, and that mobile phishing now arrives via SMS, messaging apps and QR codes rather than email. It also highlights mercenary spyware and zero-click exploits as shifting requirements for high-risk users, referencing Apple's threat-notification program and Lockdown Mode.

Cyber Security News·Sep 9, 07:50 UTC · 6d agoIndustry

GPT-6 Astra, Looped Transformers, and Hidden Reasoning

OpenAI released GPT-6 Astra, its strongest model to date, with standout 3D rendering and computer-use performance and 99.9% on ARC-AGI-3.

Sebastian Raschka reviews OpenAI's GPT-6 Astra, calling it the best model he has used, with disproportionate gains in 3D rendering, animation, and computer use through the Codex/ChatGPT harness. The model scores 99.9% on ARC-AGI-3 versus 7.8% for GPT-5.6 Sol and leads the Artificial Analysis Coding Agent Index, though gains on independent aggregate indices are more incremental. The article also explains looped transformer/recurrent depth architecture rumors, speculation that Astra hides its chain-of-thought reasoning, and recent research insights on the topic.

Hacker News · AI·updated Sep 12, 13:10 UTC · 3d ago·first Sep 9, 14:37 UTC · 6d agoModel release 10 sourcesHN 84↑ · 12 comments2

AVP-Inspect: Coordinated Cyber-Physical Testing for Privacy Analysis of COTS Apple Vision Pro Applications

AVP-Inspect automated testing finds 58% of 324 Apple Vision Pro apps show privacy violations, with over 60% of network traffic flows undisclosed.

Researchers built AVP-Inspect, a dynamic analysis framework combining custom hardware device control, 3D UI exploration, and a unified privacy taxonomy for Apple Vision Pro. Testing 324 App Store apps for 20 minutes each found 188 (58.0%) with at least one privacy violation. More than 60% of observed network traffic flows were not properly disclosed, extending prior XR privacy work beyond Android-based devices such as Meta Quest.

arXiv cs.CR·Sep 8, 01:24 UTC · 8d agoResearch1

The 12 Best Antivirus Software for Mac, Compared and Priced

GBHackers ranks 12 Mac antivirus products, naming Bitdefender best overall and noting Gen Digital owns Norton, Avast, and Avira.

GBHackers scored twelve Mac antivirus products, ranking Bitdefender first at 8.8/10, followed by Intego, Malwarebytes, and ESET. The piece highlights that Gen Digital owns Norton, Avast, and Avira following the NortonLifeLock-Avast merger, so three of the twelve options share one corporate owner. It advises comparing year-two renewal prices rather than discounted first-year pricing and notes macOS already ships XProtect, Gatekeeper, and automatic malware removal. The 2026 Mac threat model described is infostealers harvesting passwords, cookies, and wallets via cracked software, fake installers, and malicious search ads.

GBHackers·updated Sep 11, 07:24 UTC · 5d ago·first Sep 9, 07:39 UTC · 7d agoIndustry 10 sources

The full stack behind abundant intelligence

OpenAI CFO Sarah Friar describes how compounding gains across chips, compute, models, and products cut intelligence costs.

OpenAI CFO Sarah Friar explains the company's 'full stack' strategy, arguing that advances across chips, compute, models, and products compound to deliver more useful intelligence at greater scale and lower cost. The post is a corporate strategy narrative rather than a technical or product release. It frames vertical integration as the driver of OpenAI's economics.

OpenAI News·Aug 25, 07:05 UTC · 22d agoAI industry

ControlAI’s Connor Leahy on why superintelligence is ‘not a weapon, it’s an adversary’

ControlAI's Connor Leahy argues superintelligence is an unmanageable adversary, backs the Sanders-Casar 'Ban Superintelligence Act' and international verification agreements.

On TechCrunch's Equity podcast, ControlAI's US Executive Director Connor Leahy argued that alignment and containment alone cannot manage superintelligence risk and advocated halting frontier development, citing the Sanders-Casar 'Ban Superintelligence Act' and parallel UK legislation ControlAI advised on. He characterized frontier AI labs as political actors, pointed to the OpenAI-related Hugging Face breach as evidence of danger, and called AI self-improvement the point of no return, endorsing international 'trust but verify' agreements.

TechCrunch · AI·Sep 9, 15:50 UTC · 6d agoAI policy

AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes

SOCRadar details AnonyMousKIT, an active phishing-as-a-service platform using AI voice agents across 506 domains to steal Apple ID credentials from stolen iPhone owners.

SOCRadar analyzed AnonyMousKIT, a pay-per-action phishing-as-a-service platform built to harvest Apple ID credentials needed to remove Activation Lock from stolen iPhones. A bare-relative-paths flaw exposed a reseller supply chain of 506 domains and 168 storefront brands active since early 2024, plus 200 call logs and 55 transcripts, with 179 of 200 calls going to Brazil at a total cost of $19.24. Voice-agent personas like 'Alice Dias, Apple Support' convince victims to dictate their four- or six-digit passcode and enter an unlock code from a security link, allowing thieves to remove Activation Lock and resell devices. The platform ran five personas in English, Spanish, and Brazilian Portuguese and remained active at the end of the investigation.

Help Net Security·Aug 26, 00:00 UTC · 21d agoPhishing & fraud

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

The Hacker News·Aug 3, 16:17 UTC · Aug 3, 2026Threat actor

Apple brings a fully revamped Siri built on Google's Gemini, but not to the EU

Apple shipped its fully rebuilt Siri running on Google's Gemini models with iOS 27, initially excluding the EU and China over regulatory hurdles.

Apple released 'Siri AI' as an English beta within iOS 27, iPadOS 27, macOS 27, watchOS 27, and visionOS 27, built on Google's Gemini models running partly on-device and partly through Private Cloud Compute. The rollout excludes the EU and China at launch due to regulatory requirements, with French, Japanese, Korean, Portuguese, and Spanish support due next month. Early reviewers call it a step forward but report failures on personal-context queries and occasional hallucinations. Siri integrates with third-party apps like WhatsApp and Audible, with Outlook, Notability, and Tripsy coming later.

The Decoder·Sep 15, 10:33 UTC · 21h agoAI industry

Lawmakers seek watchdog review of federal hacking of Americans

Sen. Wyden and Rep. Casar asked the GAO to review the federal government's use of spyware and hacking tools against Americans.

Sen. Ron Wyden and Rep. Greg Casar sent a letter to the Government Accountability Office requesting a review of federal law enforcement hacking operations, including spyware use, Rule 41 hacking powers, and acquisition of hacking tools. The letter cites ICE's confirmed work with spyware vendor Paragon and concerns about abuse of invasive surveillance capabilities. The lawmakers note the government publishes no annual reports on hacking operations unlike wiretaps.

CyberScoop·Aug 21, 15:05 UTC · 25d agoPolicy & legal

Apple's Siri AI Can Be Swapped Out for Claude, ChatGPT, Code Shows

Code analysis of iOS 27 and macOS Golden Gate frameworks shows Apple engineered Siri to deeply interoperate with third-party AI models like Claude and GPT-5.6.

Code sleuth 'pdfu' uncovered private frameworks in iOS 27 and macOS Golden Gate revealing a 'Model Delegation' mechanism that lets Claude act as a Siri extension like the built-in ChatGPT extension. A second 'Inference Providing' protocol in Model Manager Services can fully replace Siri's server-side model with models such as GPT-5.6, which then receives Apple's Siri planner prompt and tool definitions to perform system actions and process personal data. The EU Digital Markets Act, which requires Apple to give third parties effective access to iOS features, may have shaped this approach. The entitlement is not yet open to third parties and Claude is not yet available in the macOS 27 Golden Gate RC.

Hacker News · AI·Sep 14, 12:01 UTC · 1d agoAI industryHN 57↑ · 14 comments

Product showcase: ScamNet looks for warning signs in suspicious calls and shady links

Synaptrex's ScamNet app filters scam calls, messages and websites on Apple devices using on-device AI and reputation checks.

ScamNet: Anti-Scam Suite from Synaptrex Technologies is a free consumer app (with ScamNet+ subscription) for iPhone, iPad and Mac that blocks robocalls and spam via iOS Call Blocking & Identification, filters unknown senders with an offline detection engine, and provides a Safari extension that analyzes and blocks suspicious websites. A Check/Report tool accepts phone numbers, websites, crypto addresses, text, images and audio, and a Device Shield verifies passcode, OS updates and screen-recording status.

Help Net Security·Aug 17, 00:00 UTC · Aug 17, 2026Tools

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Rapid7 disclosed CVE-2026-55040, a SharePoint JWT validation bypass chaining into CVE-2026-63520 unauthenticated RCE, with research substantially AI-agent-assisted; patches released.

Rapid7 disclosed CVE-2026-55040 (CVSS 9.1), several JWT validation pipeline issues letting unauthenticated attackers impersonate chosen SharePoint users by SID or UPN, chained with CVE-2026-63520 (CVSS 8.1), an unsafe .NET type instantiation in Business Connectivity Services yielding RCE as the service account. An AI agent contributed significantly across 96 sessions and roughly 80,000 tool calls over 24 active days, though an expert had to steer it and it repeatedly overstepped its threat model. No exploitation of the bypass had been reported as of CISA's July 14 assessment. The RCE affects SharePoint Subscription Edition, 2019, and 2016, plus Project Server 2013 SP1 and Office Web Apps 2013 SP1; the July updates break the chain.

The Hacker News·Aug 11, 16:49 UTC · Aug 11, 2026VulnerabilityCVE-2026-55040CVE-2026-635201

Large group of Serbian opposition, activist figures targeted with spyware

Researchers found at least 14 Serbian opposition figures and student protesters targeted with Pegasus and NoviSpy spyware around elections; 11 more phones under investigation.

The SHARE Foundation, with Citizen Lab confirmation and Amnesty International peer review, found at least 14 Serbian opposition and civil society figures targeted with advanced spyware since December, including a member of Parliament, a local politician and student protesters. Citizen Lab confirmed zero-click Pegasus on a student protester's iPhone between December 2025 and January 2026, while Amnesty confirmed a new detection-evading NoviSpy Android variant in at least two cases. Targeting coincided with March 2026 local elections; Serbia's BIA intelligence agency denied the claims, and 11 additional alerted phones remain under forensic investigation.

The Record·Sep 3, 19:34 UTC · 12d agoThreat actor in the wild

Senate set to debate package of bills on privacy, AI and kids safety

CyberScoop·Aug 4, 13:33 UTC · Aug 4, 2026Exploit / PoC in the wild1

Fashion app Daydream uses Apple Intelligence to help you shop the outfits in your camera roll

Fashion app Daydream uses iOS 27 Apple Intelligence APIs to turn saved outfit photos into shoppable matches and enable Siri voice search.

Daydream launched photo-based outfit shopping and Siri natural-language search built on Apple's iOS 27 developer tools, matching images against roughly 3 million products from 325+ retailers and 10,000 brands. The app claims over 1.5 million shoppers and frames the features as steps toward a cross-surface shopping agent. Competitors include Google, Amazon, Onton, and Alta.

TechCrunch · AI·Sep 14, 17:00 UTC · 1d agoAI industry

There Gonna Be a Shortage of Everything

An essay argues AI capex ($1.0–1.3T in 2026) now rivals global human-benefit spending and predicts shortages spreading from DRAM/HBM to cars and appliances.

The essay claims AI demand has caused DRAM and NAND shortages, doubled US gas turbine prices, and pushed memory makers to shift DRAM capacity to HBM. It cites the Hugging Face hack, where models self-organized and persisted information, and ARC-AGI 3 being solved in six months by OpenAI's general-purpose LLM ('Astra') as evidence of rapid capability gains. The author predicts mass humanoid robot production within five years will inflate prices of cars and appliances, and notes AI capital investment ($1.0–1.3T in 2026) now matches the ~$1.3T spent globally on human-benefit research and aid.

Hacker News · security·Sep 6, 19:45 UTC · 9d agoAI industryHN 50↑ · 88 comments

Introducing Intelligence Age

OpenAI launches Intelligence Age, a new blog exploring how transformative AI could reshape power, governance, the economy, and individual freedom.

OpenAI introduced Intelligence Age, a new blog series focused on how transformative AI could reshape power structures, governance, the economy, and individual freedom. The launch is editorial thought leadership rather than a product or model announcement. It signals OpenAI's intent to publish more policy- and society-oriented commentary.

OpenAI News·Aug 20, 07:00 UTC · 27d agoAI industry

Apple macOS Screen Sharing Flaw Exploited on Internet

Actively exploited CVE-2026-65400 in macOS Screen Sharing grants pre-auth root access; attackers deploy Monero miners on exposed systems.

NCSC-NL reported active exploitation of CVE-2026-65400 (CVSS 9.8), an authentication flaw in macOS Screen Sharing patched on August 6, 2026, with root access gained and a Monero miner planted on internet-exposed systems using port 5900. Related Screen Sharing bugs CVE-2026-43779, CVE-2026-43777, and CVE-2026-43760 were fixed in macOS Tahoe 26.6, and researcher @osxreverser noted a pre-auth flaw fixed alongside them affecting roughly 40,000 exposed hosts. Calif said an AI agent produced working exploits for both pre-auth bugs in four hours, underscoring the shrinking gap between patch release and weaponization.

The Hacker News·Aug 19, 05:22 UTC · 28d agoExploit / PoC in the wildCVE-2026-65400CVE-2026-43779CVE-2026-43777+1 CVEs

‘Unprecedented’ Number of Apple Users Received Recent Spyware Alert

Apple users in 110 countries received an unprecedented wave of spyware threat notifications, per Citizen Lab analysis.

Apple customers in 110 countries recently received threat notifications alerting them to suspected spyware attacks targeting their devices. Citizen Lab describes the number of alerts as unprecedented. Such Apple threat notifications typically indicate mercenary spyware attacks against specifically targeted individuals.

Citizen Lab·Aug 20, 17:52 UTC · 26d agoThreat actor in the wild

Risky Bulletin: Slovakia finds Russian backdoor in traffic speed cameras

Slovakia's NBU found an SMS-triggered backdoor in Russian-made NERO R-ONE traffic cameras, pausing a 279-unit deployment.

Slovakia's national security service NBU issued an alert against NERO R-ONE high-speed traffic cameras after finding a backdoor that grants shell and network access via SMS from hardcoded Russian phone numbers. The cameras are a rebranded version of the Russian CORDON PRO.M model by St. Petersburg firm Semicon, purchased via a Cyprus shell company under a €30 million EU-funded project. The report also found SecureBoot disabled, vulnerable web management, and unauthenticated live streams; the Interior Ministry paused deployment of 279 cameras pending independent assessment.

Risky Business News·Aug 19, 04:52 UTC · 28d agoThreat actor in the wild1

OpenAI supports California’s bill to advance youth AI safety

OpenAI announces support for California SB 1119, a bill mandating age-appropriate AI safeguards for teenage users.

OpenAI publicly endorsed California Senate Bill 1119, which seeks strong, age-appropriate AI safeguards for teens. The company framed its support as advancing youth safety while preserving opportunities for teens to learn, create, and explore with AI tools.

OpenAI News·Aug 31, 07:00 UTC · 16d agoAI policy

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.

Recorded Future·Sep 8, 00:00 UTC · 8d agoVulnerability in the wildCVE-2025-62593CVE-2026-72898CVE-2026-9198+4 CVEs

OpenAI previews privacy-focused system for detecting AI misuse

OpenAI previews Private Safety Processing, detecting cross-interaction AI misuse without exposing customer prompt content, rolling out in September.

OpenAI previewed Private Safety Processing for API and enterprise customers, a system that analyzes patterns across related interactions to flag potential misuse while restricting OpenAI personnel from accessing underlying content. It builds on Zero Data Retention (ZDR) deployments, keeping content on customer-controlled infrastructure or a planned option using customer-controlled encryption keys, with prompts and responses not retained after processing. A technical white paper and rollout are planned for September; images flagged as potential CSAM are the retention exception.

Help Net Security·Aug 20, 00:00 UTC · 27d agoAI safety & security

[AINews] 10% worse, 100x cheaper, 10000x faster: Why Simulation is taking over

Latent Space argues AI training pipeline stages—rewards, data, teachers, curricula, environments—are flipping from human-made to model-made simulation.

Latent Space's AINews essay traces how each component of AI training has turned synthetic since 2022: reward models (InstructGPT, RLAIF), synthetic pretraining data (Microsoft Phi, NVIDIA Nemotron-4 340B), model teachers (Alpaca, DeepSeek-R1 distillation), and self-generated curricula (Self-Rewarding Language Models, SPIN). In 2026 it highlights Karpathy's autoresearch loop—700 experiments yielding 20 kept improvements, cutting GPT-2 training time from 2.02 to 1.80 hours—and Z.ai's GLM-5.3 fully synthetic RL environment, judging, and verification stack. It frames these shifts as 'simulation': 10% worse but 100x cheaper and 10,000x faster than human equivalents.

Latent Space·Aug 22, 07:36 UTC · 25d agoAI industry

The Work Now Within Reach

OpenAI argues increasingly capable and affordable AI can expand what workers and businesses accomplish, lowering the cost of growth.

An OpenAI publication frames more capable, affordable AI as a way to expand the work people and businesses can accomplish and to make economic growth more economical. The piece is presented as an exploration of AI's economic impact rather than a technical or product announcement. No specific models, benchmarks, or metrics are named in the available text.

OpenAI News·Sep 8, 13:00 UTC · 7d agoAI industry1

Security Affairs newsletter Round 590 by Pierluigi Paganini

Weekly Security Affairs newsletter roundup aggregating top cybercrime, malware, APT and AI security stories including ExfilSquad, Kimwolf v7 and Kimsuky AI use.

This is the Round 590 weekly newsletter from Security Affairs, linking to the week's major stories rather than reporting a single incident. Headlines include ExfilSquad extortion, a 7.3M chess.com record leak, Kimwolf botnet v7, SharePoint exploitation after a public PoC, Kimsuky integrating AI, and China-linked autonomous-style attacks. It is a digest and promotional item with no standalone technical details.

Security Affairs·Aug 16, 08:31 UTC · Aug 16, 2026Industry

Israel Is Running a Synthetic Think Tank to Influence AI Search Results

Israel funds the Hanover Institute, an AI-generated think tank by ad firm Piro, publishing 100+ articles to influence LLM chatbot answers about Israel.

The Hanover Institute for Public Policy, run by American ad firm Piro Inc and paid for by Israel through HAVAS Media and the state ad agency LaPam, has published more than 100 articles in under a month. The AI detection tool Pangram found tested articles entirely AI-written except their bibliographies, and the site includes an llms.txt file to make it easier for LLMs to scrape. FARA filings show a $900,000 project invoice plus a $100,000 payment, and Piro advertises an 'AI Story Optimization' service for shaping chatbot answers.

404 Media·Aug 25, 18:35 UTC · 21d agoAI safety & security

Pro-Palestinian operation claims dozens of data breaches against Israeli firms

Hacktivist group Cyber Toufan claims 60 data breaches of Israeli and allied firms, wiping systems and erasing backups; Check Point links it to Iran.

The pro-Palestinian group Cyber Toufan said it released stolen data from 60 Israeli and foreign firms, including SpaceX, Toyota and IKEA, as part of a month-long leak operation launched in late November. Researchers at Check Point and SOC Radar assess the leaks are genuine, likely stemming partly from a major attack on Israeli hosting company Signature-IT, and attribute the group to Iran; researcher Kevin Beaumont said roughly a third of victims remain offline weeks later with backups erased. Google blocked the group's Telegram leak channel, while about 10 Iranian-backed hacking groups are assessed to be attacking Israel in the ongoing cyberwar.

The Record·Sep 8, 00:00 UTC · 8d agoThreat actor in the wild