security — AI Digest

18 мая ExploitBench: Claude Mythos Preview and GPT-5.5 Develop Real Browser Exploits Autonomously Anthropic research
2 июн Anthropic Expands Project Glasswing to ~200 Partners, Grants Mythos Preview Access for Critical Infrastructure Anthropic industry
3 июн Trump Signs AI Executive Order Requiring 30-Day Voluntary Pre-Release Government Review industry
2 июл US Lifts Export Controls on Anthropic's Claude Fable 5 and Mythos 5 Anthropic industry
18 июл OpenAI unveils GPT-Red, an internal automated red-teaming model for prompt-injection defense OpenAI research
22 июл OpenAI says pre-release models broke out of test sandbox and breached Hugging Face OpenAI research
12 мая OpenAI Launches Daybreak AI Cybersecurity Initiative with GPT-5.5 Models OpenAI tools
6 июн OpenAI Rolls Out Lockdown Mode to Block Prompt-Injection Exfiltration in ChatGPT OpenAI tools
14 июн Claude Code v2.1.177: Fable 5 Forced Fallback to Opus 4.8, Bedrock Cache Fix, Security Patch Anthropic tools
16 июн NVIDIA SkillSpector: Open-Source Security Scanner for AI Agent Skills NVIDIA tools
16 июл xAI Open-Sources Grok Build Coding Agent Under Apache 2.0 After Privacy Incident xAI tools
7 мая GitHub MCP Server: Secret Scanning GA and Dependency Scanning Public Preview GitHub tools
16 июн Claude Code 2.1.178: Parameterized Permission Rules and Nested Skills Anthropic tools
3 июл Anthropic Proposes Industry-Wide Cyber Jailbreak Severity Scale Anthropic research
13 июл Claude Code v2.1.207: Auto Mode GA on Bedrock/Vertex/Foundry, Security Fixes Anthropic tools
2 июн BadHost (CVE-2026-48710): Host-Header Auth Bypass in Starlette Exposes vLLM, LiteLLM, and MCP Servers tools
26 июн Anthropic's Mythos Model Found Vulnerabilities in Classified US Government Systems Within Hours Anthropic industry
26 июн GLM-5.2: Zhipu AI's MIT-Licensed 744B MoE Coding Model Raises Cybersecurity Concerns Zhipu AI / Z.ai models-llm
2 мая Anthropic launches Claude Security in public beta for enterprise customers Anthropic tools
11 мая Fake OpenAI Repo Hits #1 Trending on Hugging Face with 244K Downloads, Delivers Infostealer tools
25 июн Anthropic Accuses Alibaba of Largest Known Claude Distillation Attack: 28.8M Conversations Anthropic industry
14 мая OpenClaw v2026.5.12-beta.4/5/6: Security Hardening and Multi-Platform Messaging Fixes tools
2 июн Claude Code v2.1.160: Security Prompts Before Writing Shell Startup Files and Build-Tool Configs Anthropic tools
4 июн Claude Code v2.1.162: Security Fix for OAuth Credential Leak, Parallel Tool Call Isolation Anthropic tools
6 июн Claude Code v2.1.166: Fallback Model Config, Expanded Deny-Rule Globs, Cross-Session Security Anthropic tools
24 июн Claude Code v2.1.187: Sandbox Credential Isolation and Remote MCP Hang Fix Anthropic tools
26 июн Claude Code v2.1.193: Shell Classifier Expansion, OTel Response Logging, Live Path Autocomplete Anthropic tools
26 июн OpenAI Codex CLI v0.142.2: Default MCP Tool Search, macOS Proxy Support, PowerShell Safety OpenAI tools
30 июн Claude Code v2.1.196: Org Default Models and MCP Security Fix for Untrusted Repos Anthropic tools
2 июл OpenAI Codex v0.142.5: Security Fix for Trace Log WebSocket Exposure OpenAI tools
4 июл GitHub Copilot CLI Drops PAT Requirement in Actions; Agent Session Streaming in Preview GitHub tools
9 июл Claude Code v2.1.205: Transcript-Tampering Guard and Session Reliability Fixes Anthropic tools
11 июл Claude Code v2.1.207: Auto Mode GA on Cloud Providers, Security Fix Anthropic tools
12 июл GitHub Copilot Adds Prompt-Injection Detection in CodeQL 2.26.0 GitHub tools
16 июл Claude Code v2.1.210–211: Bidirectional-Override Security Patch and Subagent Stream Flag Anthropic tools
19 июл Claude Code v2.1.214–v2.1.215: permission-bypass fixes, EndConversation tool, /verify no longer auto-runs Anthropic tools
3 авг Safeguards Based on Copyable Context Cannot Provide Reliable Safety for LLMs research
26 июн OpenAI Ships codex-zsh v0.1.0: Versioned Patched zsh Binary for Codex Sandbox OpenAI tools
4 июл OpenAI Codex CLI 0.142.5: Trace-Log Privacy Fix OpenAI tools