Open AI supply chains are exposed to model removals, API-key theft, AI-driven vulnerability discovery and transparency gaps. Frontier labs are also tying open-weight releases to stricter safety evaluations and cyberdefense conditions.
Sam Altman says open-weight models have real social value, but OpenAI's most advanced internal model cannot be opened responsibly until cyberdefense and biosecurity are stronger. He also admitted underestimating alignment and called for a serious con...
A user reports models disappearing from Hugging Face, highlighting an often overlooked risk for self-hosted deployments: the model supply chain is revocable. The names of the vanished models - uncensored, offensive cyber, abliterated - point to likel...
The discovery of PHP2Shell with AI shows a structural shift: LLMs turn bug hunting into mass scanning, shrinking the coordinated disclosure window to zero. Chainguard and Amazon found the same flaw in parallel. The bottleneck is not finding bugs but ...
A Hugging Face repository called RecursiveSI/flint, followed by the string 40B A2.5B, revives the issue of transparency around open models. With no model card or numerical precision details, the name becomes a battleground for those calculating on-pr...
Anthropic is giving METR employee-like access to evaluate the safety of its systems and has started early discussions with other organizations, including Hugging Face. This shifts trust from vendor self-assessment to independent, distributed auditing...
OpenCode, an open source coding agent popular as an alternative to Claude Code and Cursor, suffered a breach of its online platform: attackers stole some users' API keys and used them to inflate AI account charges. AI tools asked to inspect the malic...
