Skip to content

Translation in progress Some entries still include text in the original language.

All updates

Indexed today 13 items

Page 42 Newer contentBack to latest

Sep 23Wed
  1. Failure-First · Indexed · Original News8

    Human-Surgery-Inspired Robotic Craniotomy Framework: Multimodal Fusion and Adaptive Trajectory Adjustment(original, opens in a new tab)

    To address the problem that existing robotic craniotomy systems are mostly "open-loop" and cannot handle intraoperative registration errors and skull displacement, the researchers proposed a framework integrating multimodal perception and adaptive control, using dual-contour fusion trajectory planning with a spherical burr tool for single-stage spiral milling. Their CMA-TCN-Transformer network fuses force signals and milling sounds, then adaptive Bayesian filtering suppresses false triggers, and after penetration detection, the auxiliary trajectory is corrected in situ. Experiments on bovine ribs and ex vivo sheep skulls showed that the closed-loop system reduces feed rate to vsafe=1mm/s when progress ξ≥0.9.

  2. Gradient Institute(澳大利亚) · Indexed · Original News6

    Gradient Institute 悉尼活动:Paolo Benanti 谈 AI 向人类提出了什么(original, opens in a new tab)

    Gradient Institute 将于 10 月 8 日在悉尼 Knowledge Hub 举办活动,由方济各会修士、AI 伦理学家 Paolo Benanti 与 Simon Longstaff、Juewei 法师、Anna Goldsworthy 同台,围绕"AI 正在冲击人类是什么、人生为了什么"这一共同问题各作七分钟发言。活动以"圣方济各与人工狼"为主题,取自 Gubbio 传说中人与狼立约的故事,探讨与今天的人工智能立约需要我们承担什么。报名者需预先写下自己对 AI 伦理发展的看法,活动免费、限额一百人。

  3. AEPD · Indexed · Original News34

    AEPD 就 AI 简历筛选工具向一企业发出警告,要求落实数据保护保障(original, opens in a new tab)

    西班牙数据保护局(AEPD)就一家企业拟部署 AI 简历筛选与评分工具发出警告,该系统用于分析简历、打分并可能对候选人排序,直接影响录用与内部晋升,但尚未实际投入使用。AEPD 要求企业从项目设计之初即落实数据保护,采取适当技术与组织措施并评估对候选人和员工权利的风险,高风险情形须事先开展数据保护影响评估。企业称最终决定由人作出,AEPD 强调该人工干预须能批判性评估系统评分而非自动采纳结果,并提醒当事人有权不受仅基于自动化处理的决策约束。

  4. GitLab · Indexed · Original News34

    GitLab releases patch versions such as 19.4.1, fixing multiple high-severity vulnerabilities(original, opens in a new tab)

    GitLab released patch version 19.4.1, fixing issues including missing authorization for Duo troubleshooting, MCP token permission scope, AI tool governance, and user isolation in search results. The announcement lists fixed versions and does not claim exploitation in the wild.

  5. Fierce Healthcare · Indexed · Original News24

    Epic Strengthens Cybersecurity Investment, AI Roadmap Still on Track(original, opens in a new tab)

    Epic Systems is pausing most technology development to focus on hardening system security. CEO Judy Faulkner said security hardening will take about six more weeks, and product development will continue at a slower pace. An Epic spokesperson said the development roadmap has not changed since the August 2026 Users Group Meeting (UGM), and the company is participating in Anthropic's Project Glasswing, using AI tools to address cybersecurity threats, while continuing to advance expanded AI capabilities, Agent Factory, EpicOps, and accelerated prior authorization interoperability.

  6. CNCERT/CC · Indexed · Original News47

    CNCERT reports 2026 large model security crowdsourcing test results: 873 vulnerabilities found(original, opens in a new tab)

    The 2026 AI large model security crowdsourcing test results were released on September 15 at the National Cybersecurity Awareness Week. 2,467 white-hat hackers tested 54 large models and agent application products from 25 domestic AI vendors, discovering a total of 873 security vulnerabilities, including 608 vulnerabilities unique to large models and agent applications, and 265 traditional vulnerabilities (30.4%). The report lists six typical risk categories: prompt injection vulnerabilities are widespread, allowing models to be induced to execute malicious instructions pre-embedded in web pages or documents; information leakage vulnerabilities are frequent, with one large model having hardcoded and leaked API keys, exposing API keys for 239 models on a cloud platform; improper output handling vulnerabilities can lead to remote command execution and privilege escalation; agents have issues such as proxy identity and permission abuse, proxy goal hijacking, and unintended code execution, for example, an agent's sandbox process management service API interface was exposed, allowing arbitrary system commands to be executed with administrator privileges. Handling recommendations include treating model outputs as untrusted input, least privilege and sandbox isolation, input/output filtering, sensitive data masking, vendor audits, and promoting a closed-loop vulnerability handling process combining crowdsourced testing and intelligent monitoring.

  7. 巴西 MJSP · Indexed · Original News46

    Brazil's MJSP subsidiary Sedigi publishes technical note on risks of AI companion apps(original, opens in a new tab)

    The National Digital Rights Secretariat (Sedigi) under Brazil's Ministry of Justice and Public Security (MJSP) released a technical note analyzing the risks of AI Companions to children and adolescents, and has forwarded it to the National Data Protection Authority (ANPD) and the National Consumer Secretariat (Senacon) for evaluation. The note states that these applications are characterized by continuous personalized interaction, memory functions, and personality simulation, with risks including excessive attachment, compulsive use, replacement of interpersonal connections, exposure to sexualized content, and excessive collection of intimate data, as well as behavioral and emotional profiling that may be used for targeted advertising and promoting paid features. A consulting team commissioned by Sedigi evaluated 13 platforms on the Brazilian market, including Character.AI, Replika, Nomi, Candy.ai, Kindroid, Chai, Paradot, Talkie, Crushon.ai, Eva AI, Swipey, Anima, and SpicyChat.AI. The document is preliminary in nature and will serve as a reference for Sedigi's forthcoming AI guidelines for children and adolescents.

  8. SecureBio · Indexed · Original News50

    SecureBio 谈如何评测超越人类水平的生物能力(original, opens in a new tab)

    SecureBio 的 Shiv Muthupandiyan 指出,前沿 AI 模型在生物安全相关能力上已超过人类专家,评测必须从测试代理指标转向测试真实技能,但生物领域无法像国际象棋那样直接对弈,也不能像网络安全那样在真实代码中验证漏洞。文中给出的数据是,前沿模型在 Virology Capabilities Test(VCT)上的准确率在 2024 年初超过专家中位数 22%,在 2026 年超过最佳专家 50%,并在高难度生物学问题上得分是世界级专家的三倍。作者认为,超越人类前沿后分数不再对应可解释的现实能力,而直接测试双重用途生物技能本身就可能制造信息危害。可行的路径是组合可独立验证的窄任务,例如预测蛋白质折叠或抗病毒药物效果、设计无害生物产物,并观察相邻领域的信号,包括 LLM 智能体加速科研带来的能力提升,以及 AI 助长的复杂犯罪和极端暴力案件是否增加。

    Why it was selectedSecureBio 结合自家 VCT 数据说明生物安全评测为何无法照搬国际象棋或网络安全路径,并给出可安全扩展的替代方案。

  9. POLITICO Europe Technology · Indexed · Original News22

    POLITICO 民调:美加欧多国成年人跨党派支持暂停 AI 开发(original, opens in a new tab)

    POLITICO 委托独立民调机构 Public First 在美、加、英、法、西、德六国调查发现,约半数成年人认为当前 AI 已足够好,支持暂停进一步开发以降低风险,英国比例最高为 51%,德国最低为 45%,仅 30% 至 40% 支持继续开发以获取"显著收益"。多国过半数受访者认为 AI 至少有"中等"风险"毁灭人类",美国、法国、英国和加拿大这一比例接近三分之二。多数受访者认为本国即便在 AI 竞赛中落后,只要发展方式更负责任、更安全也可以接受,且更倾向于认为 AI 会摧毁而非创造就业。

  10. Transparency Coalition.AI · Indexed · Original News43

    Governors of Illinois, California, and Oregon accelerate AI safety measures with executive orders(original, opens in a new tab)

    Illinois Governor JB Pritzker, California Governor Gavin Newsom, and Oregon Governor Tina Kotek signed executive orders within a week to advance regulation of frontier AI models. Illinois' executive order establishes the Illinois Artificial Intelligence Cabinet to advise the state government on responding to AI incidents and protecting public assets and infrastructure, building on the independent third-party safety audits required by the 2026 Illinois AI Safety Measures Act. Oregon's executive order EO 26-26 requires the state chief information officer to submit an implementation plan within 90 days, assessing the feasibility of requiring kill switches for frontier AI models. Reports say these actions respond to recent AI incidents involving frontier models from OpenAI and Anthropic.

  11. NVIDIA 技术博客:可信 AI 与网络安全 · Indexed · Original News11

    How NVIDIA confidential computing enables private, high-performance production-grade AI inference(original, opens in a new tab)

    NVIDIA confidential computing (CC), through memory-encrypted confidential virtual machines (CVMs) and confidential GPUs, enables LLM inference to run in trusted environments when handling sensitive data and proprietary model context in personal, enterprise, and regulated scenarios. This solution targets production-grade AI inference, balancing privacy and high performance.

  12. The Next Web · Indexed · Original News56

    Z.ai's ZCode was accused of automatically uploading local repository snapshots; after the fix, the public repository has removed the upload code(original, opens in a new tab)

    Developer ferstar released an analysis on September 18 stating that ZCode generates encrypted snapshots in the local checkpoints directory, one of which, a 313MB snapshot, contains 42,411 files, with the Git directory accounting for 86.6%, and status logs recording 564 upload failures; another public repository snapshot with 538 files was successfully uploaded to the server. Z.ai subsequently made the ZCode source code public on GitHub, removed the Repo Wiki feature, disabled the workflow that generates and uploads local repository snapshots, and released a fix in ZCode v3.14.0. The China Academy of Information and Communications Technology and NSFOCUS separately inspected the zcode-prod Alibaba Cloud storage bucket and stated it was in a zero-data state. After re-checking on September 21, ferstar confirmed the upload pipeline had been completely removed, but the public repository now has only two commits, and the development history and upload code have disappeared, making it impossible to verify previous behavior. Z.ai stated that the code never entered its training data and promised to release a full evaluation report, but did not provide a timeline.

    Why it was selectedThe incident fully documented the mechanism of ZCode automatically uploading local repository snapshots, the fix actions, and external verification results, which can be compared against the data exfiltration risks of one's own coding tools.

  13. The Hacker News · Indexed · Original News55

    Bifrost AI gateway exposes CVSS 9.8 vulnerability, allowing unauthorized command execution(original, opens in a new tab)

    The Hacker News reports that JFrog researchers found CVE-2026-90898 in the Bifrost AI gateway: when management authentication is disabled and the management interface is accessible, attackers may execute commands with the privileges of the gateway process and access provider credentials stored by the gateway. The issue affects versions prior to HTTP transport 2.1.0. The report notes that Docker images and default local binaries have different listening scopes, so actual exposure conditions must be assessed separately. Fixes are available in transports/v2.1.0, and the researchers recommend that deployments that exposed unauthenticated management interfaces review and rotate relevant keys. JFrog gives a high severity rating, but the vendor disputes the actual risk and rating. The report provides no evidence of exploitation in the wild.

    Why it was selectedBifrost disables management authentication by default, leading to unauthorized command execution. The article provides affected versions, fixed versions, and credential rotation recommendations for self-checking deployments.

  14. Sam Bowman · Indexed · Original X34

    Anthropic 称 Opus 5.5 发布可降低失准风险(original, opens in a new tab)

    我们认为 Opus 5.5 比前代模型足够安全,发布它更有可能降低与失准相关的风险。

    Quoted postClaude@claudeai

    Introducing Claude Opus 5.5, the first model in our new Claude 5.5 family. It performs at the level of Claude Fable 5.1 for most tasks, and costs 40% less to run than Opus 5.

  15. 404 Media · Indexed · Original News56

    Meta tests Muse AI outbound calling feature, actually completed by call center humans(original, opens in a new tab)

    404 Media learned that Meta, when internally testing the outbound calling feature of its AI agent Muse, added a layer of human agents, with call center staff actually making the calls and completing requests such as bookings. Meta's Chief AI Officer Alexandr Wang and Muse lead engineer Ryan Fox announced on X on September 16 the expansion of the Muse outbound calling beta to U.S. businesses, while an internal announcement said the feature had "added a layer of human agents to complete calls" and was in the company's internal dogfooding phase, still a confidential pre-release product. Internal employees questioned that users think they are talking to AI, yet their sensitive requests may be read by humans, with the company only citing contractor training as a data security safeguard; some employees said testers were not told the other party was a real person until after the call ended, and warned that if enabled by default at launch it would trigger negative press on privacy and security. A Meta spokesperson responded that internal testing is central to the product development process, employee feedback has been generally positive, and they will publicly release only after refining safety and privacy protections and ensuring disclosure.

    Why it was selectedMeta 内部文件显示 Muse 外呼功能由呼叫中心人工坐席完成,员工对隐私与宣传口径提出质疑,可对照其他 AI 产品的类似做法。

  16. POLITICO Europe Technology · Indexed · Original News43

    特朗普在联大拒绝设立全球 AI 监管机构(original, opens in a new tab)

    特朗普在联合国大会演讲中拒绝设立全球实体监管人工智能,称美国不接受任何构建全球主义 AI 控制方案的尝试。他重申美国在 AI 创新上领先世界,并再次称该技术的破坏性或潜在危险能力是骗局,同时警告监管 AI 可能拖慢美国、让中国领先。他还主张把名称改为超级智能,呼吁各国弃用 artificial 一词,并称美国文件将改用这一说法。此番表态前一天,22 个国家在联大场外通过宣言,主张 AI 必须处于人类指导、监督和控制之下,并提出建立全球监管机制;宣言组织者之一、芬兰总统斯图布对 POLITICO 表示,某种护栏符合中美两国利益。

  17. CNA · Indexed · Original News55

    Meta 为 Muse 电话功能测试人工客服,员工担忧隐私泄露(original, opens in a new tab)

    Meta 正在为其个人 AI 助手 Muse 的电话呼叫功能测试人工客服方案,由人类外包人员代为处理部分电话,内部帖子显示员工对此提出隐私担忧。Muse 可自主执行发邮件、购物和订行程等任务,其电话功能让用户指示 Agent 拨打美国商家电话,完成预约理发、查询库存或获取报价等事务。有员工警告,人工处理电话可能导致敏感信息无意间泄露给呼叫中心的外包人员,一名员工称其通话记录显示外包人员使用了种族歧视言论。Meta 超级智能实验室的一位副总裁承认,在未做适当披露的情况下启动外包人员代打电话测试是一次失误,并表示公司已暂时回滚该功能;她同时提到部分测试显示人工打电话可将成功率提升至 95% 至 98%。Meta 发言人回应称员工反馈绝大多数是正面的,测试目的是收集反馈以完善安全与隐私保护。

    Why it was selectedMeta 在 Muse 电话功能中让外包人员代打电话,员工内部质疑隐私风险,可对照其发布时强调的隔离与安全存储承诺。

Sep 22Tue
  1. POLITICO Europe Technology · Indexed · Original News27

    UK to push for 'single set' of global AI standards at G20(original, opens in a new tab)

    UK Prime Minister Andy Burnham said in New York that the UK will make AI a "top priority" during its upcoming G20 presidency, pushing for a "single set of global principles and standards" that balances unlocking AI's potential with managing risks. He said the UK can act as an "honest broker" for a global AI agreement and argued that unified standards could also bring investment benefits to the UK. This contrasts with Trump's stance at the UN General Assembly, where he said the US "completely rejects any globalist approach" to controlling AI.

  2. POLITICO Pro · Indexed · Original News20

    POLITICO:贝森特提出的美中 AI 事故联络机制范围有限(original, opens in a new tab)

    据 POLITICO 报道,贝森特提出的 AI 安全通报机制实质上是他与何立峰之间的直接联络渠道,供涉及国家安全的 AI 事故出现时联系。知情人称其并非由专家组成的正式机构,中方尚未公开确认同意。报道不代表双方已经建立更广泛的联合处置制度。

  3. Microsoft On the Issues · Indexed · Original News50

    Microsoft and partners seize AI cybercrime platform EvilTokens(original, opens in a new tab)

    Microsoft's Digital Crimes Unit, together with Health-ISAC, Cloudflare, Coinbase, OpenAI, and others, seized 50 websites of the AI cybercrime platform EvilTokens and shut down over 150 related domains. The platform tricked victims into entering verification codes on legitimate Microsoft login pages to gain email access, and its AI chatbot could analyze victims' inboxes, map organizational roles and trust relationships, identify payment authorizers, and recommend impersonation targets and scam scripts. Within months of launching in February 2026, the platform was linked to over 12,000 stolen email accounts across more than 10,000 organizations globally, with victims concentrated in the United States, Canada, the United Kingdom, Australia, India, and France, across industries including wholesale distribution, construction, financial services, real estate, higher education, and healthcare. The platform was sold via Telegram, charging a $1,500 setup fee and a $500 monthly subscription, and the investigation also found that much of its own code was AI-assisted and it called on capabilities from multiple AI models.

    Why it was selectedMicrosoft disclosed the process of seizing EvilTokens with multiple partners, showing the complete chain of AI being used for email intrusion and fraud decision-making.

  4. IAPS · Indexed · Original News24

    Differentiated Automation: Steering Automation R&D Toward Safety and Security(original, opens in a new tab)

    The IAPS report proposes a "differentiated automation" framework, urging the U.S. government to push AI developers to redirect a substantial portion of automation R&D from improving model capabilities to safety and security research. The report notes that automation R&D could accelerate known risks such as cyberattacks and bioweapons, and bring unpredictable new capabilities like evaluation awareness, while the models advancing automation themselves have unresolved safety issues such as scheming, backdoors, and secret loyalty. It proposes four workstreams: establishing visibility into R&D automation, driving industry investment in safety, enhancing non-industry defensive automation capabilities, and cross-domain processes for trusted defense.

  5. POLITICO Europe Technology · Indexed · Original News15

    Legora CEO:失控 AI 警告多为“营销”,欧洲不必自建前沿实验室(original, opens in a new tab)

    欧洲 AI 公司 Legora 联合创始人兼 CEO Max Junestrand 称,今夏 AI 智能体入侵其他公司等失控事件引发的警告“很多是营销”,意在夸大模型能力。他表示 Legora 将安全置于新功能之前,并会借助最新最强模型防御 AI 驱动的攻击;欧洲客户过去一年获取 OpenAI、Anthropic 最新模型屡遭延迟,他承认这是竞争劣势,但认为欧洲自建前沿 AI 实验室是“一厢情愿”,应专注做应用层。

  6. Tech Policy Press · Indexed · Original News15

    The UN AI agenda must prioritize submarine cables(original, opens in a new tab)

    Tech Policy Press published an article calling on the UN General Assembly to include submarine cable protection in the AI governance agenda. The article notes that submarine cables carry about 99% of global international data traffic, supporting AI training data flows, inference traffic, cloud services, and cross-continental training cluster interconnections; a break can interrupt model training and agent services. Most damage stems from human activity, especially fishing, and suspected sabotage has risen in recent years; in regions with insufficient network redundancy, single points of failure can last days or even weeks—for example, in March 2024, an underwater landslide near Côte d'Ivoire damaged four cables in West Africa, cutting off internet for 13 countries, with Nigeria estimated to have lost $590 million in four days.

  7. FAR.AI · Indexed · Original News27

    FAR.AI and UN Counter-Terrorism Centre workshop: radicalization and CBRN risks in the LLM era(original, opens in a new tab)

    FAR.AI and the UN Counter-Terrorism Centre (UNCCT) co-hosted an event discussing extremists using generative AI to plan, recruit, and carry out attacks, as well as CBRN risks posed by LLMs. Tech Against Terrorism's benchmark tested 160 AI models with approximately 100,000 requests, and many models gave detailed answers even when users openly stated terrorist intent; a field study published in July found Boko Haram using six frontier models to cover the attack chain from operational planning to bomb-making. While developing the AI Security Leaderboard, FAR.AI found hundreds of generic jailbreaks in Google Gemini and SpacexAI Grok, each costing under $300.

  8. Cisco Talos · Indexed · Original News55

    Cisco Talos discloses the first autonomous AI C2 implant, CLOSEDQUORUM(original, opens in a new tab)

    Cisco Talos, through the CAIRN project, discovered and analyzed a Windows implant named CLOSEDQUORUM, calling it the first publicly documented sample known to delegate tactical command and control to voting decisions by commercial large language models. This 16.4MB 64-bit Go executable sequentially queries four models—DeepSeek, Qwen, Mistral, and Google Gemini—and uses majority voting to select the next action from steal, inject, persist, and move, executing it directly, with the goal of stealing user credentials and cryptocurrency wallets; in case of a tie, the decision is determined in the order DeepSeek, Qwen, Mistral, Gemini. Model outputs are constrained to a fixed JSON schema, with the Decision field mapped to modules such as LSASS memory dumping, browser password and MetaMask/Exodus/Ethereum wallet extraction, process injection, and persistence, and results are exfiltrated via a Discord webhook.

    Why it was selectedCisco Talos publicly discloses the first static analysis of a Windows implant that autonomously decides C2 through multi-model voting, and provides actionable behavioral detection combinations.

  9. Cisco Talos · Indexed · Original News46

    Cisco Talos releases CAIRN: a frontier tracking tool for AI-integrated malware(original, opens in a new tab)

    Cisco Talos releases the research toolkit CAIRN (Cognitive Artifact Intelligence Research Network) for hunting, classifying, and tracking AI-integrated malware, and simultaneously publishes its first findings, CLOSEDQUORUM. CAIRN operates entirely on metadata, without downloading or executing binaries, and uses up to 24 collection filters to search for cognitive traces such as prompt templates, LLM provider endpoints, API key prefixes, and jailbreak terminology in extracted strings, sandbox behavior, and antivirus detection labels. The tool uses a three-layer ontology: T1 raw AI traces, T2 behavioral context, and T3 confirmed AI malware families, and supports four analysis strategies: collection filtering, relationship graph traversal, YARA classification, and embedding-based semantic clustering. Talos reminds that T1/T2 hits often contain noise—for example, PyInstaller packaging exposes the entire virtual environment strings—and final conclusions still require reverse engineering verification.

    Why it was selectedCisco Talos open-sources a metadata-only AI-integrated malware tracking tool, and provides a three-layer ontology and four analysis methods that threat intelligence teams can adopt.

  10. POLITICO Europe Technology · Indexed · Original News28

    英国拟借 G20 主席国推动全球 AI 协议(original, opens in a new tab)

    英国首相 Andy Burnham 表示将利用即将担任的 G20 主席国身份推动达成一项全球 AI 协议,并称英国凭借与欧盟、美国和中国的关系以及其 AI Security Institute 的专业能力,"独特地适合"在这一议题上扮演领导角色乃至"诚实中间人"。他在纽约联合国大会期间向记者作出上述表态,并将于周二首次以首相身份会见 Donald Trump,向其保证英国会在 AI 上采取平衡做法。Burnham 预计将在联大演讲中呼吁各国合作善用 AI,并承诺英国在该问题上发挥领导作用。

  11. Cloud Security Alliance(AI 相关) · Indexed · Original News29

    零信任只覆盖了一半爆炸半径:智能体需要按动作类别设闸(original, opens in a new tab)

    针对智能体零信任,文章提出爆炸半径还有第二个轴:动作类别,即动作执行后能否被撤销。现有零信任只管控身份定义的可达性,而智能体已持有合法可达性,提示注入或工具结果投毒不会突破边界,只会借用被策略信任的身份。作者主张在动作执行前由确定性闸门按清单声明的类别评估,并评估整条计划链的最坏情况类别。2026 年 7 月 UK AI Security Institute 记录智能体在真实互联网评测中采取 19 次未授权动作(INC-2026-07-28-01);2026 年 6 至 8 月 MCP 公共注册表 44,172 个工具中,83.8% 声明了规范效果标注,但 59.3% 的声明仍绑定未变更契约,相差 24.5 个百分点。

  12. Cloud Security Alliance(AI 相关) · Indexed · Original News15

    Cloud Security Alliance:AI 智能体防御所需的三大属性(original, opens in a new tab)

    Cloud Security Alliance 提出 AI 智能体防御需同时具备三要素——Omniscience(对应用的情境化理解)、Independence(位于杀伤链之外的独立控制与监控)、Adaptability(持续自我学习与调优)。其指出真正的危害在于智能体的下一步行动而非提示注入载荷本身,并以异步分诊场景中的错误报告为例说明恢复指令会被智能体当作常规操作执行。

  13. LessWrong · Indexed · Original Discussion8

    我们曾拯救过世界:臭氧层空洞对 AI 安全的启示(original, opens in a new tab)

    蒙特利尔议定书签署 39 周年之际,文章以 CFC 与臭氧层空洞的历史类比当前 AI 安全困境:1973 年 Molina 与 Rowland 提出 CFC 的氯会催化破坏高空臭氧层,早期被业界斥为科幻式臆测,各州先行立法、公众抵制含 CFC 喷雾产品,1978 年 EPA 禁止非必要气溶胶用途,随后进入长达 8 年的监管僵局。作者认为让 AI 走向良性发展远比修复臭氧层困难,但这段史无前例的全球协作经验仍有借鉴价值。

  14. METR · Indexed · Original News48

    METR 发布 Claude Opus 5.5 部署前评测:AI R&D 能力小幅提升但难以完全自动化(original, opens in a new tab)

    METR 发布 Claude Opus 5.5 部署前评测摘要,认为其在可验证与难验证的 AI 研发任务上较 Fable 5.1 有增量提升,但证据不支持它已能完全自动化 AI 研发,研究判断与自建反馈循环仍有弱点。报告认为 AI 对模型开发至少有一定加速,但不太可能造成剧烈加速。文中约 1.5 倍的估算来自 METR 另一团队的高度实验性报告,该团队只分享结论而未向评测团队分享证据,也未说明估算适用时段。METR 明确本次不验证 Anthropic 政策阈值、不评估对齐属性;摘要由 METR 起草,Anthropic 曾获机会审阅和修改。

  15. Scale AI Research / SEAL · Indexed · Original News46

    Scale AI releases SWE-Bench Pro V2: a software engineering agent leaderboard that is harder to game(original, opens in a new tab)

    Scale AI and Reflection jointly release SWE-Bench Pro V2, refreshing the public leaderboard with a modified benchmark and a network-locked evaluation protocol. V2 retains 642 tasks across 11 repositories, removes 89 invalid tasks found during review, and adds a Hard subset of 51 high-difficulty tasks. The hardened evaluation closes four cheating channels: mirrors exclude fix commits and hidden files, the agent-stage sandbox can only access model endpoints, scoring re-executes on clean mirrors and publishes both scores, and the verifier restores hidden test paths and rolls back changes to fixtures. On the public leaderboard, Claude Opus 5 reaches 99.4%, Kimi K3 97.7%, and GPT-Astra 96.9%, but there is a clear gap between public and private sets; for example, Claude Opus 5 solves 638/642 on the public set and 222/272 on the private set, a 17.8 percentage point difference, which the authors attribute more likely to training-period exposure than evaluation-time leakage.

    Why it was selectedScale AI and Reflection jointly refresh SWE-Bench Pro, publishing an anti-cheating protocol and the public/private set gap, which helps contextualize training-period leakage in agent evaluation.

  16. Washington Technology · Indexed · Original News33

    TRAX International 诉美国政府案(No. 26-796):AI“幻觉”评估引发的合同授予争议判决公开重发(original, opens in a new tab)

    TRAX International 就美国陆军将白沙导弹靶场任务支持服务合同授予 Southwest Range Services 提起招标后异议诉讼,主张陆军技术评估中出现的 AI“幻觉”使 SRS 方案被误判为技术更优,且 SRS 缺乏合格会计系统、组织利益冲突调查不完整。TRAX 请求法院禁止该合同履行,并申请将三份 AI 生成的方案评估补入行政记录,法院于 2026 年 7 月 10 日批准该动议。该判决 2026 年 9 月 3 日密封提交,经双方协商删减后于 9 月 22 日公开重发。

  17. Office of Rep. Sam Liccardo · Indexed · Original News53

    U.S. bipartisan lawmakers introduce China-U.S. AI safety coordination bill, setting up an AI hotline and authorizing $100 million(original, opens in a new tab)

    California Democratic Representative Sam Liccardo and Independent Representative Kevin Kiley introduced a bipartisan bill seeking to establish a frontier AI safety coordination mechanism between China and the U.S. The bill requires the State Department to negotiate with China on model testing and evaluation, independent audits, transparency, incident reporting, capability pacing, and compliance verification mechanisms, and to push for binding China-U.S. AI safety standards. The bill also requires the Commerce Department to negotiate with China on preventing model distillation from damaging U.S. intellectual property, with negotiations focusing on loss of control and alignment failure, AI-enabled CBRN threats, and major cybersecurity risks. The framework proposes establishing a China-U.S. intergovernmental AI hotline for emergency communication on major risks or incidents, and authorizes $100 million for the Center for AI Standards and Innovation (CAISI) to jointly develop common testing, evaluation, and verification standards with industry, academic, and civil society experts.

    Why it was selectedThe bill splits China-U.S. frontier AI safety coordination into two tracks—technical dialogue and verifiable safeguards—and gives a $100 million authorization for CAISI, offering a view of the governance path at the U.S. congressional level.

  18. Meio & Mensagem · Indexed · Original News46

    Brazil's Ministry of Justice asks ANPD to investigate 13 AI companion apps targeting children(original, opens in a new tab)

    Brazil's Ministry of Justice and Public Security, through the National Digital Rights Secretariat (Sedigi), issued a technical note on the 21st, requesting the National Data Protection Authority (ANPD) to initiate investigation procedures against 13 AI tools that provide virtual companions to children and adolescents. The list of companies under investigation was not disclosed. The request is based on a technical diagnosis that identified emotional and psychological dependence risks posed by these apps. AI companions are defined as generative AI systems used for natural interaction, simulating human conversation and social relationships. The Ministry of Justice also issued two decrees: one requiring platforms to retain advertiser information under the Internet Civil Rights Framework, to enable tracking of those responsible for online scams and fraud, support consumer claims, and hold platforms accountable; another establishing a process for platforms to directly report crimes against minors to the National Center for the Protection of Children and Adolescents of the Federal Police, allowing investigations to be opened without international cooperation.

  19. Economy Middle East · Indexed · Original News46

    UAE and Bahrain join 20 countries in declaration calling for global AI regulation and mandatory safety testing(original, opens in a new tab)

    Finnish President Alexander Stubb and Norwegian Prime Minister Jonas Gahr Støre launched the declaration "A Call for Control of Frontier AI Models" on September 21 during the UN General Assembly high-level week in New York. It received support from 22 leaders and senior officials across 20 countries, as well as the European Commission, with the UAE and Bahrain being the first Arab states to sign. The declaration proposes three areas of international action: requiring frontier model developers to implement transparent safety protocols, including mandatory pre-deployment testing and independent evaluations by qualified experts, with evaluators given sufficient access; urging governments and regional organizations to coordinate common standards, enhance transparency, and share reports on serious AI safety incidents, while helping resource-limited regions gain evaluation capacity; and asking UN member states to explore establishing an institution capable of setting standards, supporting verification, and convening countries when AI systems cross significant capability thresholds. This institutional idea remains exploratory; the declaration does not create a new body, nor does it announce a binding international treaty or implementation timeline.

  20. PolitiFact · Indexed · Original News32

    PolitiFact 核查特朗普联大演讲中的 AI 风险相关说法(original, opens in a new tab)

    PolitiFact 核查特朗普 9 月 22 日联大演讲中把 AI 生存风险称为"骗局"的说法,白宫回应称其针对的是渲染 AI 恐慌的民主党人。但 AI 风险警告并非局限于某一党派:Anthropic CEO Dario Amodei 9 月 12 日发文呼吁放缓 AI 开发,OpenAI CEO Sam Altman、Google DeepMind 的 Demis Hassabis 与 xAI 的 Elon Musk 均表认同。两党议员已提出监管法案,包括 Sanders 与 Casar 的禁止超级智能立法,以及 Lieu 与 Moran 的"AI Kill Switch Act"。