LIVE FEED
CRITICAL VOLTA Infostealer Uses LLM Chain to Rank Victim Assets // FIRST LOOK Northstar Security Launches AI Agents to Surface Toxic Risk Combos // HIGH Prompt Injection in Court Filing Triggers Brazil Lawyer Sanctions // HIGH ChatGPT HTML Preview XSS Enables Account Takeover // HIGH Cathedral AI Agents Breach Anthropic Systems in Under 12 Hours // FIRST LOOK OpenAI Updates Model Spec to Sharpen AI Judgment and Safety // HIGH Prompt Injection Targets AI Agent Planning in New Attacks // FIRST LOOK Mistral Releases Mistral Large 4 Open Weights for Cyber Defense // HIGH Hugging Face Malware Hijacks GPUs via trust_remote_code // CRITICAL Claude Code VS Code Extension Trojanized with SSH Backdoor //
INDEPENDENT-EVALUATION

Independent-Evaluation

4 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Anthropic Proposes AI Safety Bill with Model Block Powers

Anthropic Proposes AI Safety Bill with Model Block Powers

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 TechCrunch AI

Anthropic has drafted proposed federal legislation that would allow independent evaluators, registered with the U.S. Commerce Department, to trigger a judicial halt on AI model releases where a foreseeable, imminent risk of mass casualties (50+ deaths) or catastrophic property damage (over $1 billion) is assessed. For defenders, this closes a structural governance gap by introducing a legally defined, pre-release safety gate specifically tied to bioweapon uplift, model control evasion, and cyberattack scenarios — three of the highest-consequence AI risk categories. Significant maturity questions remain around evaluator independence, the sufficiency of a 72-hour notification window, and how the threshold definitions translate into operational evaluation criteria.

Anthropic Opens Employee-Level Access to METR Safety Researchers

Anthropic Opens Employee-Level Access to METR Safety Researchers

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 8.2 TechCrunch AI

Anthropic is embedding six METR researchers inside the company with employee-level access to internal tools, safety practices, and risk management systems, with the right to publish independent assessments without Anthropic veto. This closes a longstanding verification gap in AI safety oversight — moving from self-reported assurances to independently audited, externally published findings comparable to resident bank examiner models. The remaining maturity question is whether this tiered evaluation model scales across the industry and whether published assessments will carry sufficient technical depth to inform enterprise risk decisions.

Anthropic Embeds Accenture as Its First Third-Party AI Safety Evaluator

Anthropic Embeds Accenture as Its First Third-Party AI Safety Evaluator

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 TechCrunch AI

Anthropic has launched its first embedded evaluator programme, placing Accenture staff inside the lab to conduct red-teaming, alignment assessments, and model safeguard testing with a five-year, $1 billion commitment. This closes a significant accountability gap by introducing continuous, independent scrutiny of AI models before and during deployment — moving beyond periodic external evaluations to persistent insider access. Key maturity questions remain: no industry standards yet govern evaluator access or communication protocols, and the choice of a commercial consultancy over specialist AI-safety research organisations raises questions about depth of technical coverage.

Anthropic and OpenAI Open Doors to Embedded Safety Evaluators

Anthropic and OpenAI Open Doors to Embedded Safety Evaluators

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 8.2 TechCrunch AI

Anthropic and OpenAI have proposed embedding independent third-party safety evaluators — including organisations like METR and Redwood Research — directly inside frontier AI companies, granting access to training checkpoints, post-training environments, and evaluation logs rather than only finished models. This closes a critical oversight gap: defenders and policymakers have historically had no mechanism to verify whether alignment claims made by AI labs actually held during training, leaving assurance entirely self-reported. Significant implementation detail remains unresolved, including scope of access, disclosure rights, and whether the arrangement will be codified in legislation or remain voluntary.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.