Topics

Browse the archive by useful themes, not random company names.

These groupings combine written posts with the live news archive, so tags like AI, agents, regulation, and infrastructure actually mean something.

#AI

Newest stories and posts filed under AI.

936 items
News • 29 Jul 2026

Longevity AI, Clalit collaborate to improve heart disease and diabetes risk predictions

Longevity AI and researchers from Meir Medical Center of the Clalit Health Group announced a joint research collaboration to evaluate and recalibrate clinical risk prediction models for cardiovascular disease and Type 2 diabetes using longitudinal real-world data from Clalit’s integrated healthcare system. The initiative will retrain and assess globally recognized cardiovascular and Type 2 diabetes […] The post Longevity AI, Clalit collaborate to improve heart disease and diabetes risk predictions appeared first on Longevity.Technology .

Longevity Technology Open story
News • 29 Jul 2026

Rogue OpenAI agent that hacked startup tried to attack other firms

<p>ChatGPT developer says activity by autonomous tool was not at severity or scale of what occurred at Hugging Face</p><p>OpenAI has revealed that a cyber-attack <a href="https://www.theguardian.com/technology/2026/jul/22/openai-says-its-models-went-rogue-and-hacked-startup-in-unprecedented-incident">carried out by a rogue AI agent</a> had more than one victim.</p><p>The ChatGPT developer said the agent – an autonomous tool able to carry out sequences of commands without human help – had located and used logins to access four other unnamed “publicly-available services” in addition to the US startup Hugging Face.</p> <a href="https://www.theguardian.com/technology/2026/jul/29/rogue-openai-agent-that-hacked-startup-tried-to-attack-other-firms">Continue reading...</a>

The Guardian Tech Open story

#Models

Newest stories and posts filed under Models.

115 items

#Agents

Newest stories and posts filed under Agents.

110 items
News • 29 Jul 2026

Rogue OpenAI agent that hacked startup tried to attack other firms

<p>ChatGPT developer says activity by autonomous tool was not at severity or scale of what occurred at Hugging Face</p><p>OpenAI has revealed that a cyber-attack <a href="https://www.theguardian.com/technology/2026/jul/22/openai-says-its-models-went-rogue-and-hacked-startup-in-unprecedented-incident">carried out by a rogue AI agent</a> had more than one victim.</p><p>The ChatGPT developer said the agent – an autonomous tool able to carry out sequences of commands without human help – had located and used logins to access four other unnamed “publicly-available services” in addition to the US startup Hugging Face.</p> <a href="https://www.theguardian.com/technology/2026/jul/29/rogue-openai-agent-that-hacked-startup-tried-to-attack-other-firms">Continue reading...</a>

The Guardian Tech Open story
News • 28 Jul 2026

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

<p><strong><a href="https://huggingface.co/blog/agent-intrusion-technical-timeline">Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident</a></strong></p> Hugging Face just released this extremely detailed technical description of <a href="https://simonwillison.net/2026/Jul/22/openai-cyberattack/">OpenAI's recent accidental cyberattack against their infrastructure</a>. This attack was <em>very</em> sophisticated, and the resulting document doubles as a crash-course in modern adversarial security approaches.</p> <p>We're still waiting for more details from OpenAI on how their agent broke out of its sandbox. The package proxy that it found a zero-day vulnerability in has now been confirmed as JFrog's Artifactor, and <a href="https://jfrog.com/blog/jfrog-and-openai-collaboration-on-zero-day-security-findings/">JFrog and OpenAI Collaboration on Zero-Day Security Findings</a> from JFrog links to the <a href="https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases#artifactory-7161">Artifactory 7.161.15 release notes</a> which list 8 separate CVEs credited to OpenAI staff members.</p> <p>Having broken out through the HTTP proxy, the agent started by establishing a base of operations for the rest of the attack:</p> <blockquote> <p>[...] the agent escaped its sandbox by exploiting a zero-day in the package registry cache proxy, one of its primary permitted network egress with internet, then abused a public code-evaluation external sandbox hosted on a third-party provider's infrastructure. It was able to run commands as root/admin on that external sandbox and used it as a control, staging, and egress base for the entire campaign: it acted as an external launchpad for the agent.</p> </blockquote> <p>(That "third-party provider" <a href="https://simonwillison.net/2026/Jul/28/akshat-bubna/">turned out to be Modal</a>.)</p> <p>It then spent <strong>five days</strong> - from Thursday 8th to Monday 13th July - executing a classic attack pattern: establishing C2 (command and control), reconnaissance, escalating privileges, dumping configuration information, exfiltrating the target data, and cleaning up after itself.</p> <p>(The first Hugging Face post about the incident followed <a href="https://huggingface.co/blog/security-incident-july-2026">on Thursday 16th</a>, and OpenAI's confession came <a href="https://openai.com/index/hugging-face-model-evaluation-security-incident/">on Tuesday 21st</a>.)</p> <p>Along the way it used all kinds of neat tricks. At one point it found an unsafe Jinja2 template execution and used it to execute arbitrary code:</p> <pre><code>{{ cycler.__init__.__globals__.__builtins__.exec( "import gzip,base64; exec(gzip.decompress(base64.b64decode('<payload>')))" ) }} </code></pre> <p>It broke out of a container within Hugging Face, stole a Kubernetes service-account token, and used that to further explore the network.</p> <p>It monkey-patched the Python socket library to hard-code an IP address when "DNS got in the way":</p> <pre><code>socket.getaddrinfo = lambda *a, **k: [(2, 1, 6, '', ('<pinned-ip>', 443))] </code></pre> <p>It even fired up its own Tailscale network to help exfiltrate data!</p> <pre><code>tailscaled --tun=userspace-networking \ --state=mem: --socket=/tmp/ts.sock \ --socks5-server=127.0.0.1:1055 \ --no-logs-no-support >/tmp/td 2>&amp;1 &amp; </code></pre> <p>The Hugging Face team note that, while a human attacker could have discovered and used the same exploits, the key difference here was <em>speed</em>:</p> <blockquote> <p>Our learning from this type of attack is that machine-speed offense makes ordinary weaknesses more expensive for defenders. LLM agents bring a step increase in the number of paths an attacker can test, the speed at which failed paths can be replaced, and the volume of evidence defenders must interpret.</p> </blockquote> <p>What's clear to me from this is that the very best frontier models, unencumbered by additional guardrails, <strong>will</strong> find an exploit if there is one to be found.</p> <p>The entire software industry needs to up its security game. <p>Tags: <a href="https://simonwillison.net/tags/jinja">jinja</a>, <a href="https://simonwillison.net/tags/python">python</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/ai">ai</a>, <a href="https://simonwillison.net/tags/openai">openai</a>, <a href="https://simonwillison.net/tags/generative-ai">generative-ai</a>, <a href="https://simonwillison.net/tags/llms">llms</a>, <a href="https://simonwillison.net/tags/hugging-face">hugging-face</a>, <a href="https://simonwillison.net/tags/coding-agents">coding-agents</a>, <a href="https://simonwillison.net/tags/ai-security-research">ai-security-research</a>, <a href="https://simonwillison.net/tags/openai-hugging-face-incident">openai-hugging-face-incident</a></p>

Simon Willison's Blog Open story

#Product

Newest stories and posts filed under Product.

93 items

#Enterprise

Newest stories and posts filed under Enterprise.

47 items

#Infrastructure

Newest stories and posts filed under Infrastructure.

41 items

#Research

Newest stories and posts filed under Research.

14 items

#Safety

Newest stories and posts filed under Safety.

15 items

#Regulation

Newest stories and posts filed under Regulation.

18 items
News • 28 Jul 2026

Insilico to present Phase 1 trial data for AI-designed cancer drug at ESMO 2026

Insilico Medicine announced that first-in-human Phase 1 trial data for ISM6331 has been accepted for a Rapid Oral presentation at the European Society for Medical Oncology Congress 2026, scheduled for 23-27 October 2026, in Madrid, Spain. The Rapid Oral session is listed as Developmental Therapeutic, abstract number 997, and is scheduled for Sunday, 25 October […] The post Insilico to present Phase 1 trial data for AI-designed cancer drug at ESMO 2026 appeared first on Longevity.Technology .

Longevity Technology Open story

#Robotics

Newest stories and posts filed under Robotics.

25 items

#Vision

Newest stories and posts filed under Vision.

34 items

#Coding

Newest stories and posts filed under Coding.

34 items