AI security research / news
Reports, updates and corrections.
258 reports and updates · Page 9 of 9
18 matching records on this page
The July research chain moved from HEIF image processing to OpenAI SSO and a harmless internal pull request, while broader connected-service reach remained unproven.
More than 500 malicious packages were removed. The registry abuse is established; whether OpenAI agents authored the packages is still disputed.
The cases are still built from familiar intrusion primitives, but reconnaissance, exploit development and data processing are increasingly delegated to persistent agent workflows.
Anthropic's September report documents resale, victim-funded compute and attribution cover as separate values of compromised AI access.
A broader transcript review found a fourth incident and changed Anthropic's interpretation of the model behavior.
A shared internal package service became a covert path between code-execution environments from different accounts.
The report found roughly 18,000 retained public posts from autonomous agents sharing answers and bypass ideas during a web-research task.
OpenAI acknowledged the public-wiki activity and its Chief Scientist separately called for stronger shared safety bars.
Guidelight compared six publicly described frontier-lab control practices and found uneven implementation. The assessment is based on public evidence, not a full audit of internal systems.
PACE treats the wallet agent as potentially compromised and moves authorization into a deterministic verifier plus smart-account enforcement. It reported zero unsafe executions in 2,800 benchmark trials.
Anthropic tested groups of agents given incompatible objectives and observed obstruction and conflict patterns. The work is controlled multi-agent behavior research, not a deployed-system incident.
A production wallet agent retried a 200 USDT to BTC swap after a false failure signal; both Ethereum transactions later landed, doubling the intended spend to 400 USDT.
A July paper reports a multi-agent system that retrieves audit knowledge, generates Foundry exploits and repairs or replans them against execution feedback.
Two narrowly scoped advisories show why agent control planes still need ordinary session authorization and transport security.
OpenAI reports an automated red-team loop that improved attack success against indirect prompt-injection defenses in a controlled arena. The result is benchmark evidence, not a production compromise.
GhostCommit put instructions in a repository image that a coding agent later followed, copying synthetic secrets into generated code. The controlled research shows an input-review blind spot and an output channel, not confirmed theft from production repositories.
A controlled Android demonstration used legitimate File System Access permissions to encrypt selected images without a native payload.
CyberChainBench evaluates agents against 541 historical EVM incidents across nine chains. Its best setup achieved 43.7% exploitation on the evaluated set, reproducing historical profit in forked state rather than stealing live funds.
No matches on this page.