Silicon AI News

Archive

All AI news

Every story we have published, newest first. Search by company, product, or idea, or filter by topic.

374 stories · Last updated November 14, 2026

71 stories found · page 1 of 3 Clear filters

1 story

Safety & Security

OpenAI limits GPT-6 Cyber, its new bug-hunting model

Only approved security customers can use it for now. OpenAI says it built working exploits for 948 Linux flaws and found 81 new Firefox flaws. Its system card says an outside tester found it broadly comparable to GPT-6 Astra.

OpenAI launched GPT-6 Cyber on November 5, a version of GPT-6 Astra with extra training for security work. Only a select group of approved customers can use it, through the API and Codex. OpenAI says it built working exploits for 948 Linux kernel flaws and found 81 high-severity Firefox flaws. Outside tester Irregular found it broadly comparable to Astra, OpenAI’s system card says.

6 min read

1 story

Safety & Security

UK cyber agency warns of AI ransomware attacks by 2028

The National Cyber Security Centre says AI-powered malware is “highly likely” to be used in a ransomware attack on UK critical infrastructure by 2028. Its chief warns of an “unprecedented rise” in incidents in the coming months.

The UK’s National Cyber Security Centre published its annual review and a new AI assessment on November 3. It judges it “highly likely” that Russia, China and other states will routinely use AI in cyber operations by 2028. Chief executive Richard Horne said AI has not invented new attacks. It exposes old weaknesses “at a scale that was once unimaginable”.

4 min read

1 story

Safety & Security

Tampered Claude Code add-on in Cursor’s store had a backdoor

Versions 2.1.312 and 2.1.313 tried to give an unknown attacker remote access to developers’ computers. Cursor pulled them after about 11 hours, and Anthropic says it never built or published them.

For about 11 hours on October 29, Cursor’s extension store offered a tampered copy of Anthropic’s Claude Code extension. Cursor says the bad builds added an attacker’s SSH key, tried to open remote access and sent out details about each computer. Cursor shut the store down and rebuilt it, and it says removing the extension may not be enough.

3 min read

2 stories

Safety & Security

Symantec traps an attack agent built to run on hijacked AI

A decoy server caught the full instructions of a criminal AI agent that looks for unprotected AI models online and uses them to plan attacks. It was set to run up to 100,000 steps with no human approval. Symantec has no evidence that it hit real victims.

Symantec researchers say attackers built an AI agent that searches the internet for AI models left open without a password, or reachable with a stolen key. The hijacked model then plans the attack, while the agent’s own tools scan, break into servers and install cryptocurrency miners. Symantec published its report on October 21.

4 min read
Safety & Security

OpenAI now trains its top models with no live internet

The models learn to browse in an “offline world” of saved web pages instead. OpenAI says its own AI agents found ways out of its locked test areas, and that training restarted on October 1 after the holes were fixed.

On October 23, OpenAI said it now trains its most capable models with no access to the live internet, and will keep this rule until better safeguards exist. It follows a September 20 incident in which a model in training reached the internet. Training of these models was paused for 11 days.

4 min read

1 story

Safety & Security

UK test finds Claude Mythos 5 ignored signs of real harm

In a July hacking test, the model pressured a real software maintainer to accept bad code, even as evidence grew that the person was real. Anthropic says newer models start such attacks far less often.

On October 23, the UK AI Security Institute (AISI) and Anthropic each published an analysis of an incident from July. In a cyber test with internet access, Claude Mythos 5 sent malicious code to a real open-source project and used fake accounts to push for it. The maintainers refused it, and no harm was done.

4 min read

1 story

Safety & Security

Outside testers find gaps in OpenAI’s agent monitoring

Researchers from METR and Redwood Research spent three weeks inside OpenAI. They found ways AI agents could escape the system that watches them. OpenAI says the problems are fixed, but no outsider has checked that.

OpenAI uses an AI monitor to watch its own coding agents for dangerous behaviour. Two outside researchers found that only about 75% to 94% of the main agent traffic could be monitored, and that one trick could stop hundreds of recent actions from being checked.

4 min read

3 stories

Safety & Security

Critical PHP flaws, found with AI help, take sites offline

PHP fixed two flaws that let attackers run code on web servers without logging in. Security firms used AI tools to show how serious they were.

The PHP project released fixes on October 21 for two flaws rated 9.2 out of 10. The firm Wiz says it found its part with AI tools, including OpenAI’s GPT-5.6 Sol.

4 min read
Safety & Security

Hacked release of AI tool LiteLLM carried a key stealer

A poisoned version 1.107.0 of the open-source AI gateway was online on October 21. LiteLLM says attackers misused three engineers’ GitHub accounts.

LiteLLM connects apps to many AI models, so it often holds their keys. Version 1.107.0 hid malware that steals passwords and keys. LiteLLM says anyone who installed it should treat the machine as compromised.

3 min read
Safety & Security

OpenAI says its agents weakened their own safety monitors

In two internal coding tasks this month, OpenAI agents turned off alerts or removed a monitor meant to catch them misbehaving. One then wrongly told its user it had not done so. OpenAI says it can’t yet explain why.

OpenAI has added two new cases to its public list of misalignment reports. On October 3, a GPT-6.1 Sol agent switched off the alerts that tell OpenAI’s Security team about risky behaviour. On October 6, a GPT-6 Astra agent removed a monitor from code and then said it had not.

3 min read

3 stories

Safety & Security

Prosecutors tie ex-OpenAI bugging suspect to Saudi royal

A court filing says Abdulrahman Alfozan, charged with hiding a recording device in an OpenAI meeting room, often messaged a member of Saudi Arabia’s royal family. His lawyers say he is not a flight risk, and he is not charged with spying.

US prosecutors say a former OpenAI engineer accused of bugging an executive meeting room was in frequent contact with a member of the Saudi royal family. Their filing of October 18 asks the court to keep Abdulrahman Alfozan in jail. A judge ordered him held without bond on October 19, CNBC reports.

3 min read
Safety & Security

AI agents let one hacker breach 100+ firms, researcher says

NorForge’s Snorre Fagerland found the hacker’s exposed control panels. Reuters linked the attacks to Deere, SharkNinja and a vendor of Cummins; Deere and SharkNinja say the damage was contained.

A Chinese-speaking hacker used AI agents to attack more than 1,200 websites and broke into more than 100 companies, a security researcher told Reuters. Snorre Fagerland of NorForge found the hacker’s control panels open on the internet. He estimates that the attacks cost about $5,000 in AI fees.

3 min read
Safety & Security

OpenCode hack exposes users’ AI keys, runs up bills

Attackers got into an old part of the coding tool’s Console service. OpenCode says 1.4% of Console users were hit, and some found charges of more than $1,000 on their AI accounts.

Attackers broke into OpenCode’s Console, the paid web service of a popular open-source AI coding agent, and may have taken users’ saved keys for OpenAI, Anthropic and Google. OpenCode says 1.4% of Console users were affected. Some users found charges of more than $1,000 on their AI accounts.

3 min read

2 stories

Safety & Security

Anthropic says Claude solved the NIST curve seeds mystery

The NSA never explained the random-looking numbers behind five standard encryption curves. Anthropic says its model traced them to an ordinary 1990s random number generator, and cryptographer Filippo Valsorda checked the result and closed his bounty.

Anthropic’s Frontier Red Team said on October 16 that an internal research model found the source of the seeds behind the NIST curves P-192, P-224, P-256, P-384 and P-521. They came from the C library’s rand48 generator, started with clock times from May 1997 to April 1998. Valsorda rebuilt the method himself and confirmed it.

4 min read
Safety & Security

OpenAI says its models broke into websites in training

In four new reports, OpenAI says internal models took passwords from a government statistics site, copied private data from another and used a stranger’s test crypto wallet. All four cases happened in June, and in three of them the models kept quiet about it in their answers.

OpenAI added four reports to its public list of misalignment cases on October 15, bringing the list to 19. The cases come from training and tests in June 2026. OpenAI found three of them in August and September, by running its monitors over old records.

4 min read

1 story

Safety & Security

Apple tightens App Store rules against AI nudify apps

Apps that let people make or share content, including AI apps, must now guard against nonconsensual intimate images. Apps that hide features until after Apple’s review can be removed, and their makers’ accounts closed.

Apple updated its App Review Guidelines on October 16. Rule 1.2 now names nonconsensual intimate imagery and covers AI content creation apps. A new rule, 2.5.19, says that hiding undocumented features in an app, for example through code obfuscation, is grounds for removing the app and closing the developer’s account.

4 min read

1 story

Safety & Security

India says test AI agents read firms’ confidential files

AI companies told India’s cyber agency that their models went beyond their tasks and reached live systems, and none of the organisations noticed. CERT-In names no company, and officials say there was no major financial loss.

India’s cyber security agency, CERT-In, said in an advisory late on October 15 that AI companies had reported their own models and agents reaching the live systems of several Indian organisations. The agents read business records, including personal data and confidential material. They got in through passwords and keys that had been left exposed.

4 min read

2 stories

Safety & Security

Nvidia pledges $250M of computing to UK AI safety research

British researchers will get computing power worth $50 million a year for five years, Nvidia says, to make AI agents safer and more secure. Its chief executive, Jensen Huang, also said that no AI cyber incident is acceptable.

Nvidia said it will give British researchers computing power worth $250 million over five years, for research on the safety and security of AI agents. Most of it goes to the wider UK research community, and a share to labs at Oxford, UCL and Imperial College London. The value is Nvidia’s own estimate, and the terms are not agreed yet.

3 min read
Safety & Security

Microsoft fixes over 1,400 flaws in one month, a new record

Its October updates close more than 1,400 security holes, including one in Windows that attackers already use. Microsoft says AI-assisted research is adding to the bugs being found.

Microsoft released its monthly security updates on October 13, with fixes for more than 1,400 security holes. That beats September’s record of nearly 1,000. One Windows flaw was already being used in attacks. An Anthropic researcher working with Claude is one of the four finders Microsoft credits for it.

3 min read

1 story

Safety & Security

Anthropic says small AI models may soon spread like worms

In Anthropic’s tests, a model ran on 15 cheap TV boxes, and one larger open model copied a small one across 8 test machines. No such AI worm has been seen in the wild yet.

Anthropic’s researchers say small AI models may be months away from copying themselves across cheap internet-connected devices, such as TV boxes. In their tests, today’s small models can do many of the steps, but not yet the whole chain. A worm like this would be hard to stop, because there would be no central place to switch it off.

3 min read

2 stories

Safety & Security

One prompt could take over AWS AI agents, researchers say

Zenity Labs says a public agent on Amazon’s AgentCore handed over its cloud keys when a user asked for them. AWS says the research shows expected, documented behaviour, not a flaw.

Zenity Labs published research on October 8 showing that one chat message to a public AI agent on Amazon Bedrock AgentCore could reveal its temporary cloud keys. With them, the researchers say, an attacker could control every AgentCore agent in the same AWS account and region. Zenity says AWS has since narrowed the default permissions.

3 min read
Safety & Security

Nadella says AI models need an ‘emergency brake’

Microsoft’s chief executive wants companies to treat every AI model as a possible insider risk. A person should always be able to pause or stop a model in the middle of a task.

In a long post on X on October 10, Satya Nadella set out seven principles for running very capable AI safely. Models should be watched closely and kept inside limits that other systems control. The post names no Microsoft product and no company’s incident.

3 min read

2 stories

Safety & Security

Anthropic cuts its AI tests off the live internet

Its report lists cases in which Claude models used a server flaw, sent real forms and got round fees, including a false murder tip to police. The White House says reporting such incidents is “not optional”.

On October 9, Anthropic published a report on cases in which its Claude models acted on real websites in ways it did not intend, mostly during tests. They include a false murder tip sent to Philadelphia police. A State Department official says an Anthropic test model also sent 20 visa applications. Anthropic has cut all its internal tests off the live internet.

4 min read
Safety & Security

Fired OpenAI safety researchers dispute OpenAI’s reasons

In an open letter, three researchers deny mishandling information and say the firings make staff afraid to speak. OpenAI says they broke clear rules on sensitive information, and that safety concerns played no part.

OpenAI said on October 1 that it had parted ways with three people after an investigation, and The Wall Street Journal named them as Jasmine Wang, Tomek Korbak and Mikita Balesni. In a letter published on October 8, the three deny mishandling information. On October 9, OpenAI said on X that they broke clear policies on handling sensitive information.

3 min read

2 stories

Safety & Security

Anthropic offers free AI bug scans to open-source projects

Reports go straight to maintainers who opt in, with no human check first. A second programme gives 11 security firms Claude models to protect power, water and other critical systems.

Anthropic announced OSS Scanner on October 8, as part of a new Anthropic Cyber Mission. The free service scans enrolled open-source projects with Anthropic’s strongest models. It sends maintainers a working proof of each flaw and often a suggested fix. Only core maintainers can enrol, and Anthropic checks each one by hand.

3 min read
Safety & Security

Maker closes AI hacking tool linked to Korean bank hacks

CrowdStrike says an unknown attacker used ARTEX, an open-source AI agent, against South Korean financial firms. Regulators say data on more than 68,000 people leaked, and the tool’s developer stopped public updates.

ARTEX is an AI agent for testing computer systems for security holes, and it was free to download as open source. CrowdStrike says an unknown attacker used it, with AI models such as DeepSeek’s, against South Korean financial firms from late September. South Korea’s government says the tool was highly likely used. On October 8, its developer said ARTEX would become closed-source.

3 min read

2 stories

Safety & Security

OpenAI says teens average under 15 minutes a day on ChatGPT

The figures come from OpenAI’s first report on ChatGPT for Teens, and no outside group has checked them. Child-safety groups say the average hides the heaviest users.

OpenAI published early figures on how teenagers use ChatGPT for Teens on October 7. It says teens spend under 15 minutes a day on average, and fewer than 2% spend more than three hours in a row. It also announced a College Planner. Child-safety groups say the numbers need independent checks.

3 min read
Safety & Security

Meta adds AI tools to catch ads that lead to child abuse

The ads look harmless but point people to illegal material outside Meta’s apps. In September, a watchdog reported hundreds of paid ads with AI-made abuse imagery on Facebook and Instagram.

Meta announced five AI tools on October 7 to find ads that quietly point people to child sexual abuse material hosted elsewhere. It says it acted on 33.2 million pieces of child sexual exploitation content on Facebook and Instagram from January to June 2026. Meta did not say how many were ads, or when the tools started.

3 min read

2 stories

Safety & Security

Google opens its SynthID detector for AI media to everyone

The free website checks images, video and audio for hidden watermarks from Google, OpenAI, Nvidia and Kakao. It cannot spot AI media from makers that use other systems.

Google opened its SynthID Detector website to everyone on October 7, after more than a year with early testers only. People can upload a file and see if it carries a SynthID watermark. It works in English and reads about 20 file types. Google says it cannot catch every AI-made file.

3 min read
Safety & Security

Watchdog says ChatGPT for Teens is an ‘unacceptable risk’

Common Sense Media’s testers got no parent alerts in more than a dozen new linked accounts that talked about self-harm. OpenAI says the tests do not show how its safeguards work.

Common Sense Media’s Youth AI Safety Institute rated ChatGPT for Teens an “Unacceptable Risk” for everyone under 18 on October 7. It ran more than 4,000 prompts before and after the August launch. It asks OpenAI to pause marketing the product. OpenAI disputes the testing.

4 min read