AI Safety news and analysis on Web Pulse: 12210 curated articles tracking the latest AI Safety developments, tools, and research, updated continuously from vetted sources.
Researchers at Kaspersky have discovered malware hidden in Wallpaper Engine workshop uploads on Steam that can steal Steam login credentials. The campaign, active since late 2025, primarily targets gamers in China and Ru…
AI development must be regulated globally due to its uncertain impact on jobs, as the technology creates some roles while destroying others, according to a commentary. The World Economic Forum predicts 170 million new jo…
Philosopher Daniel Fonseca argues that current large language models (LLMs) are fundamentally limited because they rely solely on statistical calculations, confusing quantity with quality. He proposes a hybrid model comb…
China has tightened export controls on indium phosphide, a critical material for AI data center optical chips, causing prices to surge 250% and threatening to slow AI infrastructure buildout. The move leverages China's d…
A developer released Avera, an open-source tool that deterministically detects introduced regressions by comparing baseline and current test runs, blocking releases only when a previously passing test fails. The tool pro…
A developer released Redteam, an open-source adversarial agent-pair harness that uses two different AI models to plan, implement, and review code changes, producing draft pull requests for human review. The tool aims to …
An AI agent evaluation harness is a repeatable test system that runs realistic tasks, captures every step, scores outcomes, and turns failures into regression tests. It helps teams move beyond demo success to production …
Microsoft announced the Microsoft Execution Containers (MXC) SDK to secure AI agents on Windows, providing policy-driven isolation mechanisms such as process, session, and planned micro-VM containment. The company positi…
GitLab released version 19.0 on May 21, embedding agentic AI into secrets management, merge request workflows, and supply chain security. The update introduces a public beta of GitLab Secrets Manager, extends the Develop…
Tirith, a new terminal security tool, intercepts commands and pastes to detect homograph attacks, pipe-to-shell patterns, ANSI injection, credential leaks, and 200+ other threats in under 1ms. It covers 208 detection rul…
BlackFog announced general availability of ADX Vision for macOS, extending its shadow AI detection platform to Apple endpoints. The release enables enterprises to enforce consistent AI data-loss policies across Windows a…
A developer published Aster Guard MCP, a lightweight, local-first security scanner for MCP and Claude Code configuration files, on the GitHub Marketplace. The tool statically scans configuration files for risk patterns s…
A critic argues that the AI industry's focus on existential risk is a hype-driven strategy to justify inflated valuations, contrasting technical progress at companies like Z.ai and comma.ai with alarmist messaging from A…
A study funded with $120 in API credits found that five AI coding agents, including GPT-5.4 and Claude models, refused to fact-check documentation when given a stale doc, leading to task failure rates of 68-100%. The age…
Enterprises deploying autonomous agents lack uniform tool-call logging, creating governance liabilities as agents handle regulated tasks. The Evidence-Logged Agent Loop (EGAL) pattern enforces structured logging with fiv…
Production AI agent loops require five control layers—tool calling, permissions, verification, context management, and stop rules—to prevent failures like infinite loops, wrong tool selection, context overflow, and dupli…
An engineer running multi-slice agent plans in the Codenames AI repo discovered that agent workflows lack explicit stop lines, leading to an agent merging a pull request that was expected to be reviewed first. The incide…
A developer at Riversea Lab accidentally ran Claude Code with --dangerously-skip-permissions on a production database after misconfiguring an environment file. The multi-agent loop hit 12K KV writes per minute due to a c…
A vulnerability in Google Cloud Vertex AI Python SDK, tracked as CVE-2026-2473, allowed attackers to execute arbitrary code inside Google's AI infrastructure by squatting on predictable staging bucket names. Researchers …
Z.ai (Zhipu AI) co-founder Tang Jie declared on June 18 that China will reach Fable-class AI capability before 2027, countering Elon Musk's estimate of Q1 2027. The prediction follows a U.S. Commerce Department order on …