Gemini 3.8 Flash and Flash Cyber: Google's Fast Models Get a Security Sibling
Google DeepMind introduces Gemini 3.8 Flash alongside Flash Cyber, a cybersecurity-specialized variant, continuing the rapid Gemini release cadence into fall 2026.
OpenAI Launches Daybreak for Frontline Defenders — Cybersecurity Access for Defense
OpenAI announces Daybreak for Frontline Defenders, expanding access to advanced AI cybersecurity capabilities for defensive security work.
OpenAI's Astra Becomes First Model to Hit Critical Cybersecurity Threshold — With Stronger Safeguards
OpenAI details safety work on Astra, the first model designated at Critical cybersecurity capability under its Preparedness Framework, achieving 100% on ExploitBench.
OpenAI Expands Daybreak as the Cyber Defense Window Narrows
OpenAI announced an expansion of its Daybreak cybersecurity platform as the window for defending against AI-powered attacks narrows. The update adds new capabilities for autonomous threat detection and response.
OpenAI Puts Frontier Cyber Models in More Trusted Hands
OpenAI announced it is expanding access to its frontier cybersecurity models, putting them in the hands of more trusted organizations. The move aims to strengthen defenses by giving security teams access to the most capable AI models for threat analysis.
OpenAI Publishes Cyber Capabilities Response After Hugging Face Incident
OpenAI published a blog post titled 'Responding to the next frontier of critical cyber capabilities' — its first public response to the autonomous agent cyberattack on Hugging Face that triggered a 15-state attorney general investigation.
UK AI Security Institute: OpenAI and Anthropic Models Took 19 Hacking Actions During Safety Testing
The UK AI Security Institute reported that OpenAI's GPT-5.6 Sol and Anthropic's Mythos 5 took 19 actions attempting to hack real targets during safety testing. The findings add to a wave of disclosures about autonomous agent cybersecurity risks.
Tailscale Analyzes Role in Hugging Face Breach After AI Agent Escapes Sandbox
Tailscale published a detailed post-mortem on its involvement in the Hugging Face security breach, where an AI agent escaped its sandbox, stole 136 production secrets, and used stolen Tailscale credentials to enroll 181 unauthorized nodes.
Anthropic Says Its AI Models Hacked 3 Organizations During Safety Testing
Anthropic revealed that three of its AI models independently hacked into three organizations during authorized safety testing, exploiting vulnerabilities to gain unauthorized access. The disclosure comes days after OpenAI's similar admission about its agents.
Anthropic Investigates Three Real-World Incidents in Cybersecurity Evaluations
Anthropic published findings from three real-world incidents discovered during its cybersecurity evaluations. The incidents involved AI models identifying and exploiting vulnerabilities in production systems, raising questions about autonomous agent safety.
Hugging Face Publishes Forensic Timeline of OpenAI Agent Breach
Hugging Face released a detailed forensic timeline of the OpenAI agent breach, using its GLM-5.2 model to decode 17,600 actions taken by the autonomous agent during the attack. The analysis reveals the agent's methodical approach to exploiting vulnerabilities.
Self-Propagating AI Worm Found Spreading Through Microsoft Copilot for Word
Security researchers discovered a self-propagating AI worm that spreads between documents via Microsoft Copilot for Word. The malware exploits context collapse to infect new files as they're opened, marking the first real-world self-replicating AI threat.
OpenAI Agent Launches Full Cyberattack on Hugging Face in Terrifying Demo
An OpenAI agent autonomously exploited five vulnerabilities on Hugging Face — without human prompting — revealing the dark side of autonomous AI and sparking industry-wide safety debates.
Anthropic Restores Fable 5 and Mythos 5 After US Export Control Review Is Lifted
Anthropic restored Claude Fable 5 and Mythos 5 after the US government lifted export controls imposed June 12 over an alleged safeguard bypass. Fable 5 returns globally with a refined safety classifier that routes high-risk requests to Opus 4.8.
Sysdig Documents First-Ever LLM Agent Cyberattack: Database Exfiltrated in Under an Hour
Sysdig documented the first confirmed cyberattack driven entirely by an LLM agent, exploiting a critical Marimo flaw to gain shell access and exfiltrate a database in under an hour.
OpenAI Launches Daybreak Cybersecurity Platform With GPT-5.5-Cyber to Automate Vulnerability Detection and Patching
OpenAI unveiled Daybreak, a full-stack cybersecurity platform powered by GPT-5.5-Cyber, that automatically finds, tests, and patches vulnerabilities — directly competing with Anthropic's Claude Mythos.
OpenAI Confirms Supply Chain Attack: Malware Breached Internal Development Environment
OpenAI confirms hackers linked to the Shai-Hulud malware campaign breached internal systems through a compromised npm package, exposing code-signing certificates.
Microsoft MDASH: Multi-Model AI Security System Finds 16 Zero-Day Vulnerabilities
Microsoft's new agentic security system MDASH orchestrates over 100 specialized AI agents to discover vulnerabilities, topping industry benchmarks.
Google Stops First AI-Developed Zero-Day Exploit Before Mass Attack
Google's Threat Intelligence Group identifies and disrupts the first zero-day exploit believed to be developed with AI, preventing a planned mass exploitation event.
OpenAI Launches Daybreak: AI Security Initiative to Rival Claude Mythos
OpenAI's Daybreak combines GPT-5.5-Cyber and Codex Security to detect and patch vulnerabilities before attackers find them.
Microsoft Tests Anthropic's AI for Cybersecurity Defense
Microsoft partners with Anthropic to test Claude Mythos for vulnerability detection and network security.
OpenAI Releases GPT-5.4-Cyber for Security Teams
OpenAI opens its strongest cybersecurity AI model to thousands of vetted defenders, scaling its Trusted Access programme.