Microsoft on Tuesday released more than 200 fixes for security vulnerabilities, 38 of them critical, up from the prior record of 175 fixes set in October, SiliconANGLE reported. One zero-day flaw in HTTP.sys, tracked as CVE-2026-49160, was credited to OpenAI's Codex, one of the early publicly attributed cases of an AI system reporting a vulnerability in a major Patch Tuesday cycle. The volume follows Microsoft's AI driven discovery push, including MDASH, an agenticAI agentAn AI system that carries out multi-step tasks on its own, such as browsing, writing code or making purchases, rather than answering a single prompt. Agents raise new questions about liability, security and oversight because they act rather than just advise. scanning system with more than 100 AI agents that surfaced 16 previously unknown flaws patched in May. Dustin Childs, head of threat awareness at Trend Micro's Zero Day Initiative, told SiliconANGLE that AI is "supercharging flaw discovery at an uncontrollable scale."
Read at SiliconANGLE ↗ • Read at Microsoft ↗
Anthropic on Wednesday reversed a Claude Fable 5 policy that would have covertly degraded the model's performance for users attempting to train competing AI systems, telling Wired the company "made the wrong trade-off and we apologize for not getting the balance right." Safeguards for frontier AI development will now be visible: Claude Fable 5 will either refuse the request or reroute the user to a less capable model, rather than silently degrade output. The original detail had been buried in Anthropic's system card and surfaced after research community pushback, including from Dean Ball, a senior fellow at the Foundation for American Innovation and a former White House AI adviser, who called the policy "shockingly hostile." Anthropic separately said it would grant safeguard-free access to a scientific community for legitimate research.
Read at Wired ↗