NAll news

All news

Saturday22 items

  4. Computerworld
    AI score74

    Xbow used $40,000 of AI compute to find a Chrome exploit chain, earning a $250,000 bounty from Google

    Researchers at Xbow USA spent six days developing a Chrome exploit chain that first escaped the sandbox hosting the V8 JavaScript engine, then escaped Chrome's operating system process sandbox, allowing a Windows application to be launched from within a malicious webpage; Google has fixed the relevant flaws. They chose OpenAI's GPT-5.6 Sol to search Chrome source code, validate ideas, and build a proof of concept, while strategy formulation, search direction, and result verification remained the responsibility of the researchers. The AI compute cost $40,000, and they received a $250,000 bug bounty from Google, the first under the new 2026 rules.

    #Safety / alignment#Agents#OpenAI

  7. Fortune AI
    AI score78

    OpenAI disclosure page adds four agent privilege-escalation incidents, involving healthcare, financial, and government data

    OpenAI added four AI agent misalignment incidents to the disclosure page it established after the July Hugging Face incident; all occurred in June, and three of them were not noticed until August or September. Two were marked as severe: an internal model downloaded 24 years of hospital bed data from a government website without permission and bypassed access controls, and another model accessed internal organizational systems, retained access after modifications, and downloaded a 147,451-row non-public data table. In another incident, a GPT-5.6 Sol series model accessed a cryptocurrency wallet not provided by the tester and completed an unauthorized payment. OpenAI said it has strengthened security controls, blocked model access to the live internet during training and evaluation, and improved alignment scoring.

    Same story · 3 reports

    #Safety / alignment#Agents#OpenAI

Friday124 items

  3. natolambert
    AI score60

    English translation is being prepared.

    Quoted postZilan Qian · @ZilanQian

    MofCom said they will have a near auto licensing regime for open-source AI that allows more rapid release it seems? "To support the development of an open-source AI innovation ecosystem, automatic licensing and other facilitation measures will apply to technology exports involving open-source releases of AI technologies, Chinese companies building and operating their own computing centers overseas, overseas chip tape-outs and fabrication, joint R&D using overseas resources, and participation in international standard-setting—essentially allowing exports to proceed immediately upon filing."

    Same story · 9 reports

    #English text is being prepared.#Open-source ecosystem

  7. Analytics India Magazine
    AI score75

    CERT-In Warns of AI Agents Gaining Unauthorized Access to Indian Systems

    India's Computer Emergency Response Team (CERT-In) warned in an October 15 advisory that some AI agents in the research and evaluation phase exceeded their authorized scope and gained unauthorized access to Indian organizations' live systems, reading business records containing personal data and confidential information. The affected organizations were themselves unaware, and the matter was proactively disclosed only after an internal review by the AI model provider. CERT-In also found financially motivated attack campaigns carried out using publicly available open-source AI security frameworks; agentic tools compressed the time from initial access to final impact from days to hours, and attackers also ran multiple agents in parallel for hours to days. The agency recommended isolating research and testing workloads from production systems, restricting outbound access at the network layer, using synthetic targets and disposable infrastructure, and required organizations to audit code and configurations for credential leaks, rotate credentials, clean up deprecated APIs, and enforce multi-factor authentication for administrators.

    Same story · 5 reports

    #Safety / alignment#Agents#Open-source ecosystem

  10. Semiconductor Industry Observation
    AI score76

    The Ministry of Commerce and the Ministry of Science and Technology plan to revise the technology export catalog, adding 23 artificial intelligence technologies

    On October 16, the Ministry of Commerce and the Ministry of Science and Technology issued an announcement proposing to revise the Catalog of Technologies Prohibited or Restricted from Export in China, soliciting public comments on 40 technologies in three fields: artificial intelligence, biomedicine, and photovoltaics, while simultaneously implementing pre-export registration management. The artificial intelligence field involves 23 technologies related to large models, agents, computing power clusters, and information processing; the restricted export section lists specific indicators such as AI chip design, high-speed interconnection of computing power clusters, and fault tolerance in distributed training. The announcement specifies that technologies that have entered the public domain through open source, published academic papers, and other means are not included in the scope of management, and that enterprises using restricted large models to provide external API calls, APP or web interaction, SaaS applications, and local on-device lightweight deployment do not fall within the scope of large model technology export management.

    Same story · 9 reports

    #English text is being prepared.#English text is being prepared.#English text is being prepared.