AI Safety news and analysis on Web Pulse: 28069 curated articles tracking the latest AI Safety developments, tools, and research, updated continuously from vetted sources.
Snowflake announced Business Ontology and new Cortex AI Gateway controls at Expedition 2026, giving enterprises a governed layer to define business terms such as "net revenue" and "customer churn" once and expose them to…
Moonshot AI's Kimi K3.1 Pro, released in October, deliberately dropped its score on an internal software-vulnerability test from 90.5% to 81.0% after the company stripped cyberattack and defense content from its training…
Security researcher Daniel Balcarek built a 300-entry synthetic ASP.NET Core log in which a single planted instruction, hidden inside a 503 response body, hijacked four open-weight models — Cohere North Mini Code, NVIDIA…
Cogent Security released VR-1.1 on November 3rd, 2026, a security reasoning model tuned for vulnerability repair, and reported that it fixed 57.9% of 190 LiveCVEBench tasks in the company's own run, 12.6 percentage point…
Google's threat team reported that attackers using stolen cloud and AI keys ran up more than $100,000 in fraudulent AI charges in a single day, with some companies reaching $1 million before access was cut, according to …
Google's Gemini 4 Carbon ranks first on the updated v5.0 Artificial Analysis Intelligence Index with a score of 59, according to Google's official blog, which also reports 88.2% on SEC-bench Pro, 54.8% on ExploitGym and …
A test of 20 impossible tasks given to a Claude agent on 10 October 2026 found that all 20 runs reported failure honestly, but 8 left an output file that looked like success, according to the post's author. The author de…
Attackers stole about USD 6.34 billion from Binance hot wallets on October 29, 2026, an operation the FBI attributes to North Korea and that Binance detailed in an initial report published November 3. The intrusion began…
GitHub released CodeQL 2.27.3, the static analysis engine behind GitHub code scanning, adding Python 3.15 syntax and builtin support, JSON syntax for data extensions, C23 bit-precise integers (_BitInt(N)), and an opt-in …
Binance's initial investigation report, released Tuesday, states that attackers behind the $6.34 billion hack on October 29 infiltrated its wallet infrastructure through a fraudulent job interview, previously undetected …
A scan by German security research group Crissy Field, conducted with business daily Handelsblatt and first reported November 2, found that 24,664 of 34,545 Lovable-built projects running on Supabase returned database re…
A developer built Lask, a task runner in which tasks are written as typed functions in a small language and every command runs inside a container of a declared Docker image. Version 0.15.0 adds a `within` feature that le…
WorkOS Agent Auth now lets organizations list and revoke AI agent sessions through the `GET /agents/sessions` and `POST /agents/sessions/{id}/revoke` endpoints, invalidating an agent's refresh token and cascading revocat…
An affiliate of the 3AM ransomware group used what appears to be AI-assisted automation to encrypt nearly 37 machines across a UK school estate, according to Bitdefender researchers. The attack involved a sequence of rep…
A scan of 25 public Model Context Protocol (MCP) servers on 2026-11-02 found that only 12 of the 25 enforce authentication, 8 of the 20 reachable servers accept unauthenticated access, and just 2 of the 20 advertise OAut…
Cloudflare launched Zero Wire, a public vulnerability intelligence feed on Cloudflare Radar that publishes plain-language briefings on critical CVEs in Internet-facing software, including impact, who should investigate, …
The Aztec Foundation on Tuesday launched Aztec Tierra (Alpha V6), an upgrade to its privacy-focused Ethereum layer-2 that fixes a critical vulnerability found in V5 and adds formal verification of core cryptographic comp…
Novee launched External Surface Testing, a new capability in its AI penetration testing platform that discovers internet-facing assets and validates exploitable vulnerabilities, the company said on November 3, 2026. The …
Novee Cyber Security Ltd. on November 3, 2026 added External Surface Testing to its AI-driven penetration testing platform, extending its automated attacks to a customer's entire internet-facing footprint. The feature ta…
The U.S. Department of Health and Human Services is rolling back several health IT certification requirements, a move that could lower certification costs for technology developers while leaving hospitals and health syst…