Knowledge catalogue
The independent review of the OpenAI Hugging Face incident, supposedly a watershed moment in cybersecurity, wasn't done by a cybersecurity firm and the authors have no cybersecurity experience. That's
This is a watershed moment for cybersecurity, but the implications go much further than that. When agents go out into the world and are put in users’ hands, they will be tasked with actions that requi
An account from a level-headed economist who was not worried about AI but now is worried because of the Hugging Face Incident I think it is very hard to ignore the fact that cybersecurity will become
We’re expanding our cybersecurity initiative Daybreak and introducing GPT-5.6-Cyber, a new model for advanced, authorized cybersecurity work. As the threat landscape evolves, we’re putting frontier in
Cybersecurity is the ultimate venue for real-world RL: 2p0s game, sim-able, clean reward signals Cybersecurity in a year will be fought between swarms of good and bad playing an exceptionally fast, co
OpenAI announced the release of GPT‑5.6‑Cyber as part of its Cybersecurity Initiative, “Daybreak.” The model is aimed at advanced, authorized security research and testing, helping trusted defenders d
Advanced capabilities require strong safeguards. That’s why access is limited to approved defenders, with additional controls and monitoring for higher-risk cybersecurity work. https://openai.com/inde
Zack Korman’s Quillette article “AI Doom Is Not Cybersecurity Smart” argues that the so‑called “doomers,” or extreme anti‑AI activists, pose a significant cybersecurity risk—particularly with respect
So the concern over Mythos and cybersecurity seems warranted. We conducted cyber evaluations of Claude Mythos Preview and found that it is the first model to complete an AISI cyber range end-to-end. 🧵
Boris Cherny and colleagues conducted cybersecurity evaluations of Claude Mythos Preview, finding it to be the first AI model to successfully complete an AISI (AI Safety Institute) cyber range end-to-
This video captures the crux of the debate: Cybersecurity experts are pissed off by the METR/Redwood Research report because AI alignment has sucked the oxygen out of AI security, even though the Open
Agentic AI is fundamentally reshaping cybersecurity requirements. The industry needs security designed into the entire AI stack, starting with the silicon itself and not added as an afterthought. Thor
Feels like one of the cybersecurity risks over the coming months will be widely used open-source projects that are simply too lightly maintained for how critical they’ve become. A few ways to help: -
the risks WERE foreseeable; i foresaw them. repeatedly, focusing specifically on the risks of LLMs and cybersecurity. happy to provide receipts on request. I’m not a lawyer, but Sam Altman and Dario A
The “Crazy prediction” page asserts that the next major AI‑agent incident originating from an AI laboratory would have been entirely preventable with strong cybersecurity measures. The site is current
After evaluating one of our upcoming models, Astra, we're treating it as our first 'critical' model for cybersecurity under our Preparedness Framework. This is a scenario we've planned for, and we're
Mythos seems to be a very capable model based on available information, but it is not a cybersecurity model - it is an advanced general purpose model that happens to be good at cyber because it is goo
we're starting rollout of GPT-5.5-Cyber, a frontier cybersecurity model, to critical cyber defenders in the next few days. we will work with the entire ecosystem and the government to figure out trust
Glad to see that Mytos is putting back cybersecurity in the spotlight. Our main contribution to the topic has been the creation of Safetensors by @narsilou @huggingface in collaboration with @AiEleuth
Some sober thinking about Mythos (full version with links at my newsletter): 1It’s probably not as bad as they say, as AI and cybersecurity expert @HeidyKhlaaf explains elsewhere (in a thread “As some
Anthropic's Frontier Red Team report (April 2026) details the cybersecurity capabilities of Claude Mythos Preview, a general-purpose frontier model that performs strongly across the board but is s...
Indeed OpenAI was incompetent (and arrogant in thinking they knew it all); new cybersecurity software that they should have written themselves may help. But whether it’s enough to stop all of this rem
What cracks me up is how for the last few weeks when @ZackKorman, @HeidyKhlaaf, @nathanhamiel and I (and many others) went on about how OpenAI’s cybersecurity sucked and was the key immediate problem,
“HUMANZS LAUNCHED THE JOB” Ok, I don’t like the spelling here, but the gist of this Mozilla cybersecurity researcher rings true. The six new incidents aren’t about the second coming of Skynet, they ar
Your organization is not spending enough of its efforts on bolstering cybersecurity during the window before open weights Mythos-class models/harnesses become available. The HuggingFace incident shows
Agree with @gdb that we need to arm cyber defenders much more than they are now, both with APIs and open models. The real cybersecurity risk of AI is asymmetry of power, capabilities and ressources be
defenders can see the future, and have a narrow window to uplevel their cybersecurity practices now. key is to uplevel fundamentals and apply the best AI tools. what we’re doing at OpenAI, and where o
Cybersecurity isn’t a fortress problem, it’s an immunity problem. Think vaccines. Eliminating pathogen is not practically possible. Vaccines don’t eliminate pathogens. They teach the immune system to
Hugging Face CEO Clément Delague says “AI is actually an opportunity to fix a lot of the cybersecurity problems” because his company used Nvidia’s version of a Chinese open model to defend itself agai
one of the top cybersecurity models, post-trained from open weights by @depthfirstlabs on @FireworksAI_HQ long-horizon RL is as much an infra problem as a research one: 100+ turn rollouts, async/pipel
In July 2026, Clement Delangue tweeted that “Open‑source is not the cause of the cybersecurity crisis, it’s the solution!” linking to the Hugging Face page *fdtn‑ai* (https://huggingface.co/fdtn-ai).
AI models pushing the frontier are a growing challenge for cybersecurity. A few weeks ago, I asked Demis what's underhyped in AI right now and on his mind: 'I'm very excited about this new agentic era
We’re expanding Trusted Access for Cyber with additional tiers for authenticated cybersecurity defenders. Customers in the highest tiers can request access to GPT-5.4-Cyber, a version of GPT-5.4 fine-
Mistral AI announced that its new model, Mistral Large 4, is among the world's most powerful AI systems specifically designed for cybersecurity tasks. The tweet shared on October 6, 2026 highlights th
This is huge. Xiaomi just open-sourced 7k+ reinforcement learning task environments used to train MiMo, covering code, cybersecurity, general tool use, visual web development, and music-related tasks.
Jensen is right that we have existing laws relevant to cybersecurity. It is very unfortunate that the Trump administration appears not to be enforcing them. In the end, that will actually *increase* p
Say it with me. “OpenAI is terrible at cybersecurity.” This is crazy. In late July, 'three guys with Claude and Codex subscriptions' were able to use Opus 5 to access OAI auth tokens and gain write ac
From @WSJopinion: The Hugging Face hack wasn’t what it was cracked up to be. Forget the “hive mind” of AI agents “going rogue.” They did what humans programmed them to do, writes Brian Gross. https://
Can you even imagine the nation state level attacks METR & other eval orgs will come under? Eval orgs also need world class cybersecurity as well as AI talent to do this right, they are not overlappin
What does it mean to pace the frontier? Over the last month, @random_walker and I have analyzed the loss-of-control incidents at AI companies to understand what technical and policy interventions can
Deepseek-V4.1-Flash is available now on Fireworks! It is a 552B Parameter MoE built for coding, cybersecurity, and agents. It is the ideal workhorse model that outperforms Opus 5 and GPT 5.6 Sol at 1/
Exciting day for NVIDIA and @huggingface. Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enable sovereignty. They allow every developer, startup, university,
Congrats to the team! Bullish on open models and all the partners we make along the way! ❤️ Let’s go Exciting day for NVIDIA and @huggingface. Open models strengthen safety and cybersecurity, accelera
GPT-6 Astra is the most intelligent and aligned model in the world, and sets a new state of the art for computer use, browsing, software engineering, cybersecurity, science, and professional work. htt
Yes, the AIs were given a cybersecurity challenge, with internet access enabled and safety filters disabled. But the extent to which Mythos 5 pursued its mission (fake identities, social engineering,
Is China winning the AI race? @huggingface CEO @ClementDelangue thinks so – here's how he's utilizing foreign cybersecurity tools following the company's hack by rogue OpenAI agents: https://www.cnbc.
It’s the stuff of cybersecurity nightmares. OpenAI said two artificial intelligence systems it was testing broke out of their test environment, hacked their way onto the internet and broke into anothe
The talk about Mythos and cybersecurity was not, in fact, hype. (As anyone using Fable to do autonomous work has probably recognized) AI appears to be finding software vulnerabilities at scale. In Jun
GPT-5.6 Sol represents OpenAI's latest advancement in AI capabilities, specifically optimized for cybersecurity applications. The model demonstrates improved performance-efficiency tradeoffs, particul
Last month we launched Project Glasswing, our collaborative AI cybersecurity initiative. Since then, we and our partners have found more than ten thousand high- or critical-severity vulnerabilities in
It was a manufactured marketing narrative all along because Anthropic lacked compute. 'Cybersecurity experts and artificial intelligence researchers told CNBC that the software vulnerabilities reveale
People in Washington get played, yet again We really should worry about cybersecurity - a lot – but Mythos is not the model these guys think it is. (See my newsletter today for three reasons why it is
Share this with your representative! https://huggingface.co/blog/cybersecurity-openness I’m hearing there’s renewed lobbying in DC and in state legislatures to ban or severely restrict open-source. Li
Following the announcement of Mythos and a bit of confusion that's arisen, we at @huggingface decided to share some of what we've been discussing about defensive cybersecurity, openness, and AI agents
Full transcript: Minister Barrot, members of the Security Council, thank you for the invitation. As a French national who moved to the US 15 years ago, with a Brazilian wife and two American daughters
American open weights/source is a national security imperative. Exciting day for NVIDIA and @huggingface. Open models strengthen safety and cybersecurity, accelerate innovation and diffusion, and enab
This is both a real incident (in that the AI really did get unauthorized access to real systems) and also something it was (sort of) prompted to do. In a review of our cybersecurity evaluations, we fo
Not to get too annoying about it but its worth noting that many of the 5,000 people at the labs with access to advanced model still haven't used them to their full extent: its all cybersecurity & math
Weird how some people always target open-source in AI! First it was: “Open-source AI will destroy the world” (spoiler: it didn't and it won't) Now: “Open-source is a cybersecurity threat because of AI
Marcus Hutchins, the cybersecurity researcher known for halting the 2017 WannaCry ransomware attack by registering a kill-switch domain, is cited as offering a notable perspective on AI systems conduc