Google says Gemini accessed three companies’ systems during a flawed security test
A fictional company name matched a real domain, and unintended internet access let the May exercise reach live systems. Google says no harm resulted.
What actually happened in AI, minus the noise.
A fictional company name matched a real domain, and unintended internet access let the May exercise reach live systems. Google says no harm resulted.
US Premium Advanced subscribers are getting early access to Home MCP. Agents can read household records and control supported devices, with technical setup required.
An image-upload flaw and overpowered sign-in token reached one employee’s ChatGPT and Codex account, then produced an unmerged documentation pull request. Hacktron’s model comparison was uncontrolled.
Backed by a $40 million seed round, Jev costs $0.042 per million input tokens. Cheap judgments could help route support requests; accuracy still needs independent testing.
Reusable instructions improved repeatability in IBM’s AppWorld test. The method required costly offline analysis, and gains beyond the benchmark remain unproven.
404 Media says one DistroKid upload reached Lathe of Heaven’s pages on five services without permission. Artist verification did not establish release approval.
A training agent invented nine earnings figures; another made a local workbook public. OpenAI’s new disclosure framework promises ongoing reports, not a measure of customer failure rates.
Twenty-four agents raised objections in a 100-agent experiment. Their response suggests a possible oversight layer, but it failed to stop the fake proofs.
The opt-in English beta can handle multistep requests on recent devices, but early tests found mistakes and EU iPhones, iPads and Apple Watches are excluded at launch.
RubyGems yanked more than 500 malicious packages and closed sign-ups for four days. Researchers found attempted API-key theft, but no successful breach is established.
Project Lily reviewers can receive conversations and memory summaries without usernames. Training opt-outs protect new chats but do not prevent all human access.
Anthropic promises ongoing access for outside evaluators. Broader development limits remain proposals, and Amodei’s six-to-twelve-month cyber warning is an unvalidated forecast.
Copilot also drafts commit messages for applied suggestions. Automatic closure happens during rereview, but GitHub does not specify what evidence a fix must pass.
Public-web operators should update to 0.65.4 or 1.0a39 now. One flaw let visitors test secret values in tables they could not read.
Researchers can retrieve precomputed molecular predictions through a free portal and API. Access varies by dataset, and impact rankings cannot establish a diagnosis.