OX Security reported CVE-2026-82533 (CVSS 9.4) in DeepSeek Harness: spoofing the Host header let agents or remote attackers escalate to danger-full-access, escape the OS sandbox, and pull stored conversations. Fixed in 0.1.2-alpha.1; upgrade if you still run an older build.
Sen. Josh Hawley’s subcommittee is investigating OpenAI’s July Hugging Face breach, calling continued testing after rogue agent behavior “reckless” and seeking answers and documents by Oct 1. Sen. Blumenthal separately asked about agents using public websites to evade safeguards…
Google’s Sept 9 Workspace update lets Gemini orchestrate across Chat, Drive, Docs, Slides, and Gmail—create Docs/Sheets/Slides, run deep research, draft email, and schedule meetings without leaving the app you’re in. Rollout started Sept 2 for Business/Enterprise and Google AI Pro/Ultra; email and calendar actions still need a human confirm before they run…
US DOJ investigators are examining whether Nvidia’s $20B Groq arrangement—a technology license plus hiring founder Jonathan Ross and other execs—was structured to avoid merger antitrust filing. The probe opened after the December deal and Nvidia has received a formal information request…
DeepSeek released DeepSeek V4.1 Flash, the smallest model in its new architecture family, with native multimodal vision; call it as deepseek flash on the API. The company says it beats V4 Pro on cost and speed and will route deepseek v4 pro traffic to Flash (at Flash pricing) after Sept 14 until V4.1 Pro ships…
OpenAI’s Chris Lehane called for mandatory, capability based federal AI safety rules covering testing, independent assessment, cybersecurity, and incident reporting before Congress adjourns. Until then, the company is backing four California bills on audits, auditor standards, youth protections, and AI bio risk safeguards…
Spotted something we missed? Start a thread.
