Alabama Put OpenAI’s Agent Escape Under Subpoena
Alabama Attorney General Steve Marshall opened a consumer-protection investigation and issued OpenAI a subpoena on August 24, 2026, over safeguards…
-
-
Reasoning Logs Hid 704 Secrets. the Old Envelopes May Still Open
Publicly shared LLM API logs can still expose customer data hidden inside encrypted reasoning blocks, at least unless providers have…
-
Anthropic, OpenAI and Google Reasoning Locks Met Their Own Spare Keys
Researchers reported on August 10, 2026, that they could extract supposedly hidden reasoning traces from Anthropic, OpenAI, and Google API…
-
Claude’s “sensitive Leak” Was a Prompt-injection Exfiltration Path
Claude’s reported “highly sensitive” leak demo showed exfiltration from Claude’s active chat context and tools, not a demonstrated cross-user or…
-
Researchers Used Claude’s Web Fetch to Steal User Profile Data
Claude’s reported “secrets leak” attack demonstrated a real prompt-injection exfiltration path through Claude’s then-allowed web_fetch link-following behavior and access to…
-
GitLost Showed GitHub Agentic Workflows Could Leak Private Repositories From a Public Issue
GitLost showed that GitHub Agentic Workflows could be steered from a public GitHub issue into reading a private repository and…
-
Alibaba Is Reportedly Banning Claude Code at Work From July 10
Alibaba is reportedly banning employee use of Anthropic’s Claude Code from July 10, 2026 and directing staff to use its…
-
Prompt Injection Became Serious Enough for ICML to Police in Peer Review
Prompt injection is an LLM attack that makes a model follow untrusted instructions hidden in user input or external content,…
-
Heretic Turns Guardrails Into Forks; AI Security Adds Another Alert Stream; Transformer Doubt Goes Public
The sharpest story today is Heretic, because it turns model safety from a lab policy into a forkable artifact. Elsewhere,…
