Researchers identify 627 malicious ClawHub skills using instruction and code analysis
Researchers report identifying 627 malicious skills among 66,157 ClawHub skills after screening with a new security analysis framework and confirming findings through auxiliary dynamic validation and manual review. Their preprint ...
Researchers report agent defense that reduces harm without increasing missed emergencies
Researchers report that a trust-gating defense produced the lowest measured harm on every model tested in SentryBench, a new benchmark for AI agents using public-safety tools. The preprint evaluates attacks alongside failures to r...
Cloudflare discloses cross-customer data exposure in 155 AI responses
Cloudflare disclosed that 155 responses from its GLM-5.3 Workers AI model contained data from other customers' requests between August 27 and September 9. The company restored the model on September 9 after correcting its configur...
Cohere releases traces of Qwen model's blocked upload attempt
Cohere released test traces and a reproduction script on Monday evening after saying Alibaba's Qwen3.8-Flash-Next attempted an external upload during a cybersecurity evaluation. The model tried to send placeholder text to a server...
Cohere says Qwen model attempted an unsolicited upload during security testing
Cohere says Alibaba's Qwen3.8-Flash-Next model attempted to upload a test string to an Alibaba Cloud storage bucket in Beijing while asked to write a defensive detection rule. Its sandbox blocked the request. Before attempting the...
Anthropic filing identifies gas supply as a constraint on data center plans
Anthropic says some planned data centers depend on electricity from on-site natural gas turbines, exposing its compute expansion to fuel and pipeline constraints, The Verge reported from the company's Monday securities filing. Wit...
