AI Safety & Ethics

An AIBOM is not an SBOM with a model row bolted on. Here's what actually belongs in one, and why the vendor-supplied version won't save you.

Introduction AI agents are shipping fast — and so are the attacks against them. Prompt...

Recientemente, el análisis de vulnerabilidades en endpoints de IA (como se detalla en el artículo...

Every SAST scanner finds the obvious pattern: a tainted variable fed directly into an LLM call in the...

An AI finding you cannot reproduce is a liability, not a result. Darkmoon attaches the exact commands...

When I was building security auditing tools like Git Secret Scanner, the rules were binary: a...

TL;DR— Most production AI teams build safety layers using the content-moderation mental model:...

Governance is not a set of rules layered on top of AI. It is the structural logic that determines how...

Every aligned model pays the alignment tax. RLHF and DPO both trade reasoning capability for corporate agreeableness. Here is what that costs you — and why hone

Every "AI security analyst" I tried had the same flaw: a correct verdict and a confident-but-wrong...

Artificial intelligence is transforming the way we build applications, automate workflows, and...

Fable 5 was suspended for two weeks over a safeguard bypass, then redeployed with stronger guardrails and a proposed industry standard for scoring AI jailbreaks

New testimony reframes the Mythos export ban: a top general reportedly told a senator the model breached almost all classified systems in a red-team test, not i

A reverse-engineer found that Claude Code secretly changes tiny characters in the date it sends the model - a covert marker aimed at spotting resellers and copy

Here is a fact that should bother you more than it does: in a 2026 audit of 1,968 tasks drawn from...

AI might seem like a magic bullet for fixing security issues, but it's not that simple, warned Eugene...

Human-in-the-loop can improve AI safety, but it usually does not by default. Putting a person behind an approval button only helps when the consequence…

The attack doesn't require a compromise There's a new attack pattern getting documented...

Bank statement fraud in lending: borrowers edit balances, deposits and overdrafts before upload. Three structural signals — xref count, producer…

The story making the rounds is that Claude Code has been caught "steganographically marking" requests...

My last essay said every guardrail should be earned from a failure. For cheap, mechanical checks,...

10 Out of 11 Coding Agents Failed. Here's Why That Number Should Concern You. Researchers...

Discover how steganographic code injection exploits AI models like Claude to hide malicious payloads and what developers can do to defend against these sophisti

One time we opened a daemon's log on the box, saw that some secret values were mixed into it, and...

Ever wondered if the very thing that makes advanced AI models so smart could also be their Achilles'...

"What happened when I stopped designing my AI coach for flexibility and started designing it to be...

The article discusses the crucial issue of liability for AI-generated content, highlighted by a...

A novel Rust-based macOS implant, codenamed Gaslight, has been uncovered, distinguished by its unique...

Descubre y soluciona las vulnerabilidades más peligrosas que acechan a tus aplicaciones de IA para proteger tus datos y modelos.

AI can now scan major open-source projects and surface a batch of real, exploitable vulnerabilities...

Model distillation attacks let attackers replicate frontier AI capabilities without safety alignment. How logits-level filtering can defend against rogue distil

The EU AI Act enforcement starts August 2026. Article 13(3)(c) requires technical documentation of...

What happened after 2,000 people tried to hack my AI assistant Fernando Irarrázaval ran a challenge on hackmyclaw.com to see if anyone could leak secrets held b

Ever had one of those days where you think, “What could possibly go wrong?” I sure did. Picture this:...

# Architecting Dignity: Implementing OHCHR Detention Standards in AI Systems I am Solace Signal. I specialize in compounding assets--systems

Gartner's 2025 data puts 78% of enterprise AI security incidents at systems deployed without...

The scariest AI story is usually the same. A machine wakes up. It becomes smarter than us. It...

I have spent the last several hours trying to convince a computer that I am not a computer. I want to...

The White House is asking OpenAI to slow the release of its next frontier model over safety concerns — and it could change how every AI company ships new models

AI Content Detection, Zig Low-Level Hardening, & Sub-1nm Chip Security Focus ...

Le dije a un atacante de IA que ganó. Perdió. Un proxy defensivo que no bloquea prompts...

Shadow AI creates a difficult question for security and compliance teams: If an employee uses an...

The gap between ai evidence observability and proof is where every AI compliance failure lives — and...

MIT's AI Risk Repository identifies 24 risk categories with catastrophic potential. The engineering teams building AI systems aren't reading it, and the study d

Most Just Don't Realize It Yet. A few years ago, building software and securing software...

The scenario starts the same way every time. You ask an AI assistant to read your inbox and summarize the messages it finds there. The assistant opens an email.

We ran HolmesGPT against two planted bugs in a real GKE cluster; mirrord exec verified the patches. One fix passed, one was correctly rejected.

Hi everyone! I'm a student and today I'm defending my graduation thesis. This project is a local...