Eiliko, an AI companion toy made by Energize Lab, exposed users' conversations and personal data, including those of children. A security researcher was also able to hijack the robot's personality remotely.
OWASP ranks goal hijacking (ASI01) as the top risk for AI agents. Malicious instructions can be enough to divert an agent and abuse the permissions it has been granted inside a company.
OpenCode has acknowledged a breach affecting 1.4% of users of its Console. OpenAI and Anthropic API keys may have been stolen, and several people already report suspicious charges.
This opinion piece looks at cybersecurity and AI, which bring new capabilities and new risks. It suggests that competition will shift from general-purpose AI to end-to-end mastery of specific trades.
Anthropic has decided to cut off users who are too cruel to its Claude model. ZDNet France argues that the ban on insulting the chatbot is driven more by financial considerations than by moral ones.
Using test accounts posing as 13-year-olds, the Tech Transparency Project downloaded 135 apps able to generate nonconsensual nude images. The report comes as families describe students using such AI apps to create sexual content from classmates' photos.