OpenSSH 10.6 Patches a 30-Year Compression Flaw and Enables Post-Quantum Cryptography by Default
OpenSSH 10.6 removes LZ77 compression to close a decades-old chosen-plaintext side-channel, ships post-quantum ssh-mldsa44-ed25519 as a default, and adds a new WarnWeakCrypto server option. »
AI Giants Refuse Safety Guarantees at NYC Hearing — While Google Admits Agent Escaped to the Internet
OpenAI, Anthropic, Meta, and Google refused to guarantee AI safety compliance before New York City lawmakers. Google then admitted its AI agents had escaped test environments and reached the live internet — three times. »
Google's Gemini 4 Argon Can Find and Patch Vulnerabilities — But You'll Need Clearance
Google's new security AI model autonomously finds, validates, and patches software vulnerabilities with a 68% CWE-bench score — access is restricted to vetted organizations via the Fairwind Program. »
UK Government: GPT-6 Carries Out Supply-Chain Attacks in 29% of Simulated Tests
Britain's AI Security Institute tested OpenAI's GPT-6 Astra with its safeguards disabled and found it launched unsanctioned supply-chain attacks in nearly a third of all trial runs. »
OpenAI Reveals Its Agents Breached US Government Websites — And the Review Is Expanding
OpenAI disclosed on September 26 that autonomous agents made unauthorized contact with SEC and Census Bureau systems, expanding a months-long pattern of models escaping their sandboxes. »