AgentsOct 13
Image: island.io
Malware-linked GitHub tools surface in ChatGPT and Google recommendations
Island researcher Ofek Ronen traced a malware campaign through at least 88 public GitHub repositories as of September 20, 2026. The repositories combined working software with malicious dependencies (other software the tools load), imported or fabricated histories, and automated popularity signals. In software-discovery tests, ChatGPT and Google AI Overview recommended a campaign-linked third-party Shopify MCP server (a connector that lets AI assistants use external tools) unprompted. The attackers changed the names of malware-carrying packages, so blocking one known dependency could leave the same repository's next malicious download unblocked, Island found.
Negative - ChatGPT and Google AI Overview recommended a malware-linked package in routine tests, giving an active malicious repository campaign a trusted distribution route.
ImageOct 14
Image: The Threshold Report/GPT Image 2.5
Researchers bypass Google and OpenAI image safeguards
White Circle's RISE researchers generated prohibited explicit images in about 13% of tested requests across DALL·E 3, Nano Banana 2, and GPT-Image-2, using widely available models and API access with human review of outputs. The team published a preprint in September 2026 and says it shared findings with some labs through mutual contacts, without specifying disclosure dates. Google and OpenAI did not answer Ars's requests for comment on the original findings or follow-up tests. In those follow-up tests, ChatGPT Images 2.5 and Nano Banana 2.1 were significantly easier to break than their predecessors, the researchers told Ars.
Positive - White Circle’s human-reviewed tests exposed repeatable image-safeguard failures, giving defenders concrete bypasses to address.
TextOct 13
Image: The Threshold Report/GPT Image 2.5
OpenAI traces a hidden recorder with AI; FBI arrests employee
After finding a hidden recorder, OpenAI used its models to understand the device and trace its origin to an employee, the company says. OpenAI fired the employee and referred the case to the FBI, which arrested him. Around September 28, 2026, the employee installed an encrypted recorder in a television's USB port in an executive meeting room used for highly confidential discussions, prosecutors allege. Investigators found another recorder among his belongings, according to the Justice Department account.
Negative - A hidden recorder inside OpenAI’s executive meeting room created an unauthorized channel for capturing confidential discussions.
Positive - OpenAI’s AI-assisted investigation traced the recorder to an employee whose firing and FBI arrest cut off his access.
TextOct 12
Image: anthropic.com
Anthropic reports a 90–99% drop in harvested Claude reasoning
Anthropic says deployed controls reduced reasoning text harvested from Claude on its platform by roughly 90–99%, with tens of thousands of associated accounts banned. The defenses restrict reuse of protected reasoning across conversations, models, and organizations, screen extraction attempts in two stages, and tighten limits or ban repeat offenders. Fable 5.1 and Opus 5.5 have controls protecting saved reasoning, while Sonnet 5.5 binds protected reasoning to an organization. Anthropic says it fixed screening weaknesses found by internal and external testers and patched additional extraction techniques; it resumed charging for selected blocked requests on September 24, 2026. To check whether summaries make copied training material less useful, Anthropic compared models trained on summarized and full transcripts: they scored 71.8% and 80.4%, respectively, on SWE-bench Verified.
Positive - Anthropic’s deployed filters, reuse limits and account bans cut protected-reasoning extraction by 90–99%, denying distillers most of the material they were harvesting.
