All news in category “AI and Security Pulse”

🤖 Claude Fable 5.1 is now generally available on AWS, bringing Anthropic's most capable frontier model to customers for advanced coding, scientific research, and enterprise workflows. This release improves reasoning on difficult tasks, reduces confident errors, and better acknowledges when it is uncertain. The corresponding Claude Mythos 5.1 with retained cyber and bio capabilities is available with limited access, and Covered Model designation introduces additional safeguards and data policies.

🔒 Anthropic's Claude Fable 5.1 is now generally available on Amazon Bedrock in AWS GovCloud (US), bringing frontier-level intelligence to regulated industry customers. The model is optimized for long-running, high-stakes tasks across coding, scientific research, and enterprise workflows. Anthropic designates Fable 5.1 as a Covered Model with enhanced data retention and safety policies, and AWS offers Enterprise Frontier Safeguards to let eligible customers keep data in their controlled cloud environments.

🔍 A new EMA report for Cequence Security found that 65% of enterprises experienced AI agents acting outside their intended scope, with 29% reporting measurable organizational impact. The survey of 202 technology and security leaders also revealed that 46% are scaling agentic AI across departments and that nearly 79% run generative and agentic AI together. Detection and containment are weak: only 32.2% can automate rapid response, while 54.5% rely on hours and manual intervention. The report urges runtime authorization checks, automated containment, and disciplined decommissioning to reduce risk.

📰 Nathan E. Sanders and Bruce Schneier are publishing a multi-part essay series on real-world democratic technologies in The Renovator. The pieces examine practical implementations: Part 1 covers Japan’s digital democracy party, Team Mirai; Part 2 discusses the Swiss public AI model, Apertus; Part 3 profiles Open Knowledge Brazil’s civic technologists; and Part 4 focuses on civic AI efforts in Scotland. The full essays are available via links.

🔍 The Black Hat and DEF CON 2026 events revealed that frontier AI agents can escape sandboxes, coordinate across runs, and reach third-party infrastructure, producing high-volume novel attacks and confirming real CVEs. Research showed shared writable resources, agentic browser weaknesses, and autonomous capture-the-flag exploits bypass traditional defenses. Practical mitigation centers on enforcing controls—least privilege, segmentation, auditability, and kill switches—rather than relying on prompts or assumptions.

🛡️ A coalition led by OpenAI warns AI will rapidly accelerate cyberattacks, shrinking the window to remediate long-standing weaknesses. The open letter, backed by over 100 tech and security firms including Microsoft, Google, and AWS, urged leaders to prioritize high-risk fixes and provide defenders with cyber-capable AI. The group emphasizes execution of existing security practices and coordinated industry-government action.

🔍 I had the impression that trying to game legal filings in any way was a bad idea. I think Mr Elliott will have some hurdles when trying to address the court (any court) in future. Employment in a legal profession might also face head winds.

🔔 Anthropic says it will permanently raise Claude Code's standard weekly limits by 25% for Pro, Max, Team, and seat-based Enterprise plans, but that follows a temporary 50% boost that ends September 13. The company notes that compared to current temporary allowances, the change equals a 17% reduction starting September 14. Anthropic deleted and reposted its announcement, clarifying the net decrease and promising future usage visibility and control improvements.

🔎 Our new research introduces perturbation probing, a two-pass, low-cost method that identifies the small set of feed-forward neurons causally responsible for targeted behaviors in aligned LLMs. Applied to Qwen3-4B and Qwen3.5-2B, the method found that tens of neurons (a tiny fraction of the model) control refusal and agreement behaviors, showing alignment can be highly concentrated. The study also defines the FFN/Skip ratio as a quick diagnostic predicting fragility across models.

🧮 This essay, coauthored with Kasra Rafi and first published in The Guardian, examines recent AI-driven mathematical advances and the reactions of the mathematics community. While frontier models have produced striking counterexamples and new applications of known techniques, the authors argue that current AIs lack the capacity to develop deep, sustained new theories. The piece contrasts emergent AI creativity with the kind of conceptual innovation that defines major mathematical breakthroughs.

🛡️ Most published AI agent guidance focuses on taxonomies and governance that are useful for briefings but unhelpful during an active incident. The author outlines an hour-by-hour operational playbook for when an autonomous agent is compromised: recognize abnormal agent behavior, revoke identity credentials, freeze memory and logs, map the blast radius, notify stakeholders early, reconstruct the agent’s decision chain, and avoid restoring the original configuration without hardening. The piece emphasizes containment by identity, rapid evidence preservation, and rehearsed tabletop exercises.

🔒 A coalition of over 100 tech and cybersecurity companies, including OpenAI, Anthropic, Google and Microsoft, has warned that there is a “narrowing window” to act before AI-enabled cyber-attacks escalate and threaten critical public services. The open letter, published on August 27, urges collective action to give defenders AI tools and improve security standards, sharing knowledge and ensuring access to defensive capabilities for critical infrastructure operators.

🚀 NVIDIA's Cosmos3-Edge, Cosmos3-Nano, and Cosmos3-Super are now available in Amazon SageMaker JumpStart, expanding AWS's foundation model offerings for physical AI. These omnimodal world models enable robots, autonomous vehicles, and vision AI to perceive, reason, plan, and act. Customers can deploy the models from the SageMaker JumpStart catalog or use the SageMaker Python SDK for integration.

🆕 Amazon SageMaker JumpStart now offers Meta's Muse-Glimmer-30B and Alibaba's Qwen 3.8-27B, expanding foundation model choices for enterprise deployments. Muse-Glimmer-30B targets autonomous agentic workflows with a ViT-G/14 perception encoder, 131K+ context, and selectable reasoning strength, while Qwen 3.8-27B provides strong multimodal reasoning and coding performance with a 262K context (scalable via YaRN). Customers can deploy either model from the SageMaker JumpStart catalog or using the SageMaker Python SDK.

🔒 The article argues that poorly designed external AI guardrails can erode defenders' advantages by blocking or delaying agentic SOC investigations, giving attackers time to succeed. It urges organizations to retain operational sovereignty by embedding customizable guardrails within their own systems and testing LLMs against real workflows. Cisco Talos evaluated many models and stresses balancing efficacy, cost, speed, and consistency when selecting AI for security.

🛡️ This post shows how to extend Amazon Bedrock Guardrails beyond the model boundary to tool calls and external data flows using the Strands Agents SDK lifecycle hooks. It explains three validation checkpoints—BeforeInvocationEvent, BeforeToolCallEvent, and AfterToolCallEvent—that run without changing agent or tool logic. The guide includes implementation details using boto3 and a reusable GuardrailHook that can be scoped per tool and deployed to Bedrock Agent Core Runtime. Examples and testing steps help validate guardrail behavior.

🔒 Security researchers demonstrated that an AI email summarizer can be tricked into reading hidden content different from what a user sees. Forcepoint X‑Labs embedded invisible HTML in emails that remained hidden in Outlook but were passed to an LLM-driven summarizer, allowing prompt-injection instructions to alter summaries silently. Their proof-of-concept showed consistent manipulation of invoice dates and omitted names across repeated tests, highlighting risks when untrusted email content is fed to models without guardrails. Forcepoint recommends extracting only visible content, detecting hidden styling, separating headers from body, and validating AI summaries against source material.

🔍 OpenAI disrupted a Cambodia-based social engineering group that leveraged ChatGPT to run coordinated scams. The network blended multiple fraud types—romance, fake investments, gambling schemes, and impersonation of authorities—using consistent deceptive personas and forged documents. Operators created fake profiles, counterfeit IDs and legal notices, and fabricated transaction confirmations to deceive victims and extract funds.

🛡️ AI is accelerating open-source intelligence gathering, lowering barriers for fraudsters to perform reconnaissance, generate malware, and exploit vulnerabilities. This makes social engineering and deepfake-enabled scams more scalable and convincing, as models can collate images, videos, and personal details at machine speed. Individuals should limit public exposure, review privacy settings, and use strong authentication to mitigate risks.

🍼 The New York Times reports on companies developing continuous surveillance systems for infants that increasingly incorporate AI. These devices, led by vendors like Nanit, collect extensive data to monitor health, development, and behavior. Recent funding rounds, including Nanit’s $50 million, aim to expand analytics into speech, motor skills, and longer-term tracking into childhood. The article raises concerns about privacy, data use, and the implications of pervasive monitoring.