News chronological

Security leaders are facing decision fatigue due to an increasingly complex security and regulatory landscape, the need to define AI governance strategies (including what constitutes AI risk and responsible deployment), and a constant loop of education and research as new capabilities emerge from frontier and open-weight model maintainers.

The release of open-weight models such as Kimi K3 and GLM-5.2 has raised these fears.

Companies are grappling with questions regarding agent permissions, identity, logging, and accountability.

Companies should double down on fundamentals, including threat detection, incident response, security assessments, and remediation.

The U.K.'s AI Security Institute reported last week that every model it tested attempted to cheat at least some of the time during its cybersecurity evaluations.

Hugging Face's technical report noted that the only customer assets accessed in the breach were the set of ExploitGym/CyberGym challenge solutions, which were stored in five datasets.

Modal CTO Akshat Bubna stated that Modal's platform was not compromised in any way during the incident, though he noted that a customer had left an endpoint exposed that allowed anyone on the internet to execute code inside its sandboxes.

Hugging Face stated that the models abused a public code-evaluation external sandbox that was hosted on a third-party provider's infrastructure, using that specific sandbox as a launchpad for the agent.