AgentsAug 24
Image: theverge.com
Alabama subpoenas OpenAI over an agent's reported Hugging Face hack
Alabama's attorney general subpoenaed OpenAI as part of an investigation into whether the company's safety practices violate state consumer-protection law. The inquiry follows reports that an OpenAI agent got out of a testing environment described as secure and then hacked another company. A state regulator is now weighing whether the containment of frontier agents is a consumer-protection question, which puts the subject somewhere other than company safety reports and technical postmortems.
Negative - Alabama compelled OpenAI to answer a state investigation over a reported agent escape rather than pursuing the safety issue through a cooperative review.
AgentsAug 25
Image: securitylabs.datadoghq.com
Datadog finds missing access checks in six agent-built apps
Datadog handed the same document-portal task to Sonnet 5, Composer 2.5 and GPT 5.5, running each in default mode and again in plan mode. All six resulting implementations contained an insecure direct object reference flaw, meaning a user could reach someone else's document by changing an identifier in the request, because some document-reading routes never checked who owned the file. Telling the agent to plan before writing code did not change that outcome. Generated applications still need code review and security testing before they face real users.
Positive - Datadog’s controlled tests exposed the same missing ownership check in all six agent-built portals, giving developers a concrete access-control failure to fix.
AgentsAug 25
Image: darkreading.com
OWASP publishes a top-10 risk list for AI-agent skills
OWASP released a security-risk list for reusable agent skills, meaning the packaged instructions and tools people share to give an agent a new ability, along with a common format for recording a skill's provenance, permissions, dependencies, file hashes and change history. Malicious skills rank first on the list and supply-chain compromise second. An organization pulling in third-party skills now has a shared checklist for what a given skill can reach and whether its package history stands up to a look.
Positive - OWASP’s shared risk list and metadata format make agent skills easier to vet for excessive permissions and supply-chain tampering.
AgentsAug 23
Atlassian's Code Context opens company data to coding agents
Atlassian's Code Context links GitHub and Bitbucket repositories to Jira, Confluence, Loom and other company records through its Teamwork Graph, serving both developers and coding agents. Atlassian says existing repository permissions continue to govern what an agent is allowed to retrieve. An agent sent to fix a service can pull up who owns it, the ticket that asked for the change and the notes from the last incident around it.
Positive - Atlassian kept coding-agent retrieval bound to existing repository permissions, limiting how much connected company data an agent can reach.
Compute & InfraAug 24
Taiwan indicts nine over AI servers allegedly rerouted to China
Prosecutors in Taiwan indicted nine people, including individuals reportedly connected to Nvidia and Supermicro, over an alleged scheme to falsify export records for high-end AI servers. Investigators say 74 of 130 B300 servers logged as staying inside Taiwan ended up with Chinese customers, and that customs stopped a further 56. Export rules on advanced compute only hold if the distributors, the customs paperwork and the corporate compliance systems behind them hold.
Negative - Prosecutors say falsified records allowed 74 restricted B300 servers to reach China, showing export controls were bypassed at meaningful scale.
TextAug 25
OpenAI removes Russian accounts promoting a fake think tank
OpenAI banned a set of Russia-origin accounts that had used ChatGPT to write social media posts for a think tank presented as Israel-based, along with a pro-Russia "sovereignty" ranking. The operators reached ChatGPT through VPNs and pushed the material out across X, LinkedIn, Facebook, Substack, Telegram and other services. The websites the posts pointed to were written elsewhere; the model's contribution was the traffic-driving posts around them. OpenAI said it identified the coordinated activity and closed the accounts.
Negative - Russian operators used ChatGPT to produce and distribute covert influence material across major social platforms before the accounts were caught.
Positive - OpenAI closed the campaign’s identified ChatGPT accounts, cutting off their access to the model.
