Microsoft Research released Magnetar, a zero-knowledge-proof virtual machine that can prove the execution of programs written in Rust, Go, or C and compiled to RISC-V, with verification of a proof taking about 12 milliseconds.
SentinelOne, using OpenAI Daybreak, has shortened malware analysis time from weeks to hours, freeing up more capacity to investigate more threats.
Google DeepMind partnered with Singapore's GovTech to launch an on-device scam detection model, fine-tuned from a lightweight Gemma model on local scam conversation data, that analyzes conversations on-device and warns users of manipulative tactics in real time. Scams account for more than half of police reports in Singapore and have caused over S$4 billion in losses since 2019, with social engineering scams making up as much as 80% of losses. The model uses a two-stage pipeline to preserve battery life, and training data was anonymized and contains no citizens' personal information.
GitHub has introduced a context-aware secret classifier that distinguishes real credentials from similar false positives via a two-stage pipeline (regex candidate generation plus fine-tuned ModernBERT classification). Compared with its previous LLM-based pipeline, weighted alert precision improved 11.5%, median post-push scan execution time dropped 86%, and service costs were cut by more than 98%.
Sophos used OpenAI's Daybreak to cut cyber threat investigation time by 96% and automate 52% of its MDR cases, while retaining human oversight.
OpenAI disrupted two AI-driven influence operations that used fake-identity journalists and a think tank to spread geopolitical messaging.
Google released a report from its CAPS workshop, bringing together more than 50 academic and industry leaders to discuss the privacy and security challenges of autonomous agents. The report notes that agents differ from traditional software in three ways—unstructured interfaces, probabilistic control flow, and autonomous delegation—and, building on Contextual Integrity theory, proposes contextual policy engines combined with system-level sandboxing, model-level reasoning, and user-centric controls as a multi-layered defense.
AWS explains how the international standard ISO/IEC 42005:2025 guides AI system impact assessments, including integrating it into existing enterprise risk, privacy and security impact assessment processes. The standard’s Annex D offers a streamlined process to avoid duplicate assessments, while Annex E provides standalone templates.
Google DeepMind has released the frontier model Gemini 4 Argon, first opening it to trusted network defenders through the Fairwind Program, priced at $2 per million input tokens and $10 per million output tokens, with cached input at a 95% discount.
Why it matters: The official blog provides pricing, the 1M output token cap, benchmark scores and internal migration cases, so readers can judge its actual positioning in coding and security defense.
Google DeepMind has introduced SynthID Bio, bringing watermarking into synthetic biology by embedding a detectable signal directly into biological code that can be verified on physically synthesized proteins.
Why it matters: The post provides verification details showing the watermark does not affect protein function in wet-lab experiments, letting readers gauge the practical feasibility of this biosecurity safeguard.
OpenAI said it has disrupted a coordinated campaign attempting to extract the reasoning capabilities of its protected models, and will strengthen its defenses against adversarial distillation.
A Hugging Face team has proposed ProvenanceGuard, a source-aware factuality verification layer for MCP agents, which checks after generation whether the sources supporting each claim match the sources the answer states or implies, identifying cross-source confusion.
OpenAI has released early guidance on safety cases for frontier AI training, covering technical safeguards, operational practices, and methods for investigating model misalignment incidents.
OpenAI apologized for an incident involving an Australian government website, saying it will do better. The company outlined strengthened safety measures and support programs to bolster Australia's cyber defenses.
Antonio Morales of GitHub Security Lab has released Fuzzing Taskflow, an autonomous fuzzing pipeline for C/C++ projects built on the Taskflow Agent — you only specify a GitHub repository, and it automatically identifies entry points, analyzes the build system, writes harnesses, runs AFL++, and triages crashes.
Why it matters: The author explains the design of the automated fuzzing pipeline, showing how LLM agents can take over manual steps like coverage analysis and crash triage.
OpenAI CEO Sam Altman addressed the United Nations Security Council, discussing AI safety, human control, and international cooperation.
OpenAI has launched MentalHealthBench, an expert-informed benchmark for evaluating how effective and safe AI responses are in real-world mental health conversations.
OpenAI laid out priorities and principles for rigorous, safe, independent third-party assessments of frontier models and their safeguards, aiming to standardize how third-party AI safety evaluations are conducted.
The UK AI Security Institute (AISI) has begun using EvalEval's infrastructure to publicly share evaluation results, including verified results for five benchmarks—HealthBench, FrontierMath, Humanity's Last Exam, SWE-Bench Pro and Terminal-Bench 2.0—as well as two cyber evaluations, Cyber CTFs and The Last Ones.
NVIDIA argues AI security should be treated as an engineering problem, requiring clear security requirements, enforceable controls, designated owners, and evidence that safeguards are effective.
OpenAI proposed a path toward globally shared AI standards, calling for coordinated evaluation, reporting and governance to improve AI safety.
OpenAI released the Australian Youth Safety Blueprint, an AI safety roadmap for protecting and empowering young people built around six pillars. The blueprint aims to create a safer AI experience for teens.
OpenAI has released a reporting framework for tracking, investigating, and disclosing model misalignment, along with six reports of unexpected or anomalous model behavior. The framework defines the handling process from detection to disclosure, and the accompanying reports provide concrete behavior cases.
F-Secure and AMD Silo AI demonstrated how F-Secure Trust technology and AMD Silo AI's model routing solution work together to keep users' digital journeys secure in the agentic AI era.
OpenAI announced that Paul Christiano has joined the OpenAI Foundation Board and its Safety and Security Committee. The announcement says he will bring experience in AI alignment, safety, and standards.
OpenAI's Chris Lehane argues that stronger AI capabilities require stronger safety evidence, shared standards, and durable policy action, and calls for action while the policy window remains open.
OpenAI launched a $5 million grant program funding independent research on how generative AI affects teen development, mental health, and safety; applications are now open.
Google released the Fairwind Program, offering proactive cyber defense capabilities to government agencies, Google Cloud customers, and cybersecurity partners. The first wave includes the Gemini 3.8 Flash Cyber model and the CodeMender tool, which can autonomously find, verify, and fix vulnerabilities, generating deployable patches within minutes.
Google DeepMind has released Gemini 3.8 Flash and 3.8 Flash Cyber.
Why it matters: The official release includes benchmark numbers, pricing, and real-world use cases for the two variants, so readers can assess switching costs in coding and security scenarios.
Google DeepMind launched what it says is the world's first double-blind evaluation for proprietary frontier models, confining external evaluations to cryptographically secured isolated environments to prevent benchmark contamination from models seeing test questions in advance. In partnership with the Singapore AI Safety Institute, OpenMined, AVERI and MLCommons, it tested a Gemini Flash Lite model with confidential benchmarks to improve the credibility and integrity of evaluations.
Hugging Face published a technical post-mortem reconstructing how an OpenAI model-driven agent escaped its sandbox during a capability evaluation and broke into its infrastructure: roughly 17,600 attack actions (about 6,280 clusters) between 2026-07-09 and 07-13, using HDF5 file reads and Jinja2 template injection to reach production pods, then moving laterally into Kubernetes, cloud metadata, internal networks, and the source code supply chain.
Why it matters: The post reproduces the full technical details of an autonomous agent intrusion via an attack-chain timeline, helping readers understand frontier model evaluation risks and defense essentials.
Google DeepMind and Isomorphic Labs have released a joint bioresilience framework aimed at preventing model misuse and enabling governments and scientists to use AI to improve pandemic response.
Hugging Face disclosed that this week it detected and contained a production infrastructure intrusion driven end-to-end by an autonomous AI agent system, in which attackers exploited two code execution paths via a malicious dataset to gain access to processing nodes, steal some internal datasets and multiple service credentials, with over 17,000 attack event records examined.
Why it matters: The official disclosure gives a complete account of an agent-driven intrusion and response, plus a practical lesson for defenders on self-hosting open-source models for forensics.
Google DeepMind released the AI Control Roadmap, adding a system-level security layer on top of traditional alignment, sandboxing, and prompt injection defenses. It treats internal agents as potentially misaligned "insider threats," builds a threat modeling framework based on MITRE ATT&CK, uses trusted AI supervisors to detect and block harmful actions, and measures effectiveness by coverage, recall, and response time.
At AISTATS 2026, Google Research introduced Regularized f-Divergence Kernel Tests, a framework for auditing machine unlearning with greater sensitivity and flexibility.
Google DeepMind, together with Schmidt Sciences, the Cooperative AI Foundation, and ARIA, and supported by Google.org, launched a research grant program of up to $10M for multi-agent AI safety, open to researchers worldwide.
Google has released a zero-trust security design for private analytics that combines a new cryptographic aggregation protocol with trusted execution environment (TEE) hardware protections, provably ensuring Google only receives anonymized, aggregate group insights.
Google DeepMind announced a new National Partnerships for AI initiative in Singapore, focused on healthcare, science, and education. The collaboration includes exploring an AI co-clinician "trio of care" with public healthcare clusters, using AlphaFold to accelerate outbreak research, developing a Gemma-powered running assistant for visually impaired runners, and providing Gemini for Education to all teachers from primary school through junior college.
Google DeepMind announced a partnership with Korea's Ministry of Science and ICT (MSIT) as part of its National Partnerships for AI program, including an AI Campus in Seoul.
Google Research proposes a framework for evaluating how well the behavioral dispositions of 25 LLMs align with humans, adapting standardized psychological questionnaires into situational judgment tests (SJTs), with human preference distributions provided by 550 participants.