Unvalidated input in Anthropic’s Claude Code GitHub Action enabled complete repository takeover via a simple issue, with potential impact on all dependent downstream projects.
Hugging Face Transformers allows silent remote code execution via obfuscated parameters in model configurations as long as the optional kernels package is installed (CVE-2026-4372, patched in 5.3.0).
GreyVibe compensates for technical deficits through intensive use of commercial AI tools, enabling attack scaling that would normally require substantial personnel resources.
CHERRL enables reproducible analysis of reward hacking mechanisms through controlled bias injection and automatic detection of exploitation onset in LLM-based training.
Anthropic expands Mythos access to 150 new organizations; security experts warn of structural changes driven by frontier AI models and the risk of vulnerability chaining.
ThoughtFold identifies and removes redundant exploration steps in reasoning chains, reducing token consumption by 56% for DeepSeek-R1-Distill-Qwen-7B while maintaining state-of-the-art accuracy.
Long-horizon iterative improvement, not single high-quality responses, is the critical capability for autonomous AI agents tackling real-world engineering tasks.
STRIDE formalizes training data attribution as a sparse recovery problem in activation space, achieving an order of magnitude faster results than gradient-based methods.
