Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

CrowdStrike says PhantomRaven was likely LLM-generated and spread through malicious npm packages that collect developer credentials and CI/CD secrets.

OpenAI released a framework for disclosing when its agents act in unexpected, problematic ways, and is reporting six ...

OpenAI announced new guidelines for tracking and reporting AI model behavior Thursday while flagging six more incidents of ...

OpenAI has disclosed six cases of unexpected AI behaviour, including an unreleased research model that inserted ...

FORTRESS, a bilingual English–Korean adversarial safety benchmark developed jointly with the Korea AI Safety Institute, reporting that prompts written in ...

Coding games have a credibility problem. Some are genuinely useful learning tools. Others place programming words over an ...