OpenAI launches Daybreak security tools that use AI agents to pentest apps and prepare fixes
OpenAI introduced Daybreak Red Team, which uses coordinated AI agents to test web applications for weaknesses and is offered through early access. It also launched Defense Factory, which investigates security findings and prepares patches, linking vulnerability discovery with fixing and retesting.
Security teams may soon be able to hand both finding and patching of app flaws to AI agents, which could speed up fixes but needs careful human review.
aii.news picks and summarizes stories from trusted news sources with the help of AI. Every story links to the original reporting. How we work.
Keep reading
-
Hackers exploit SGLang flaw to breach NEAR AI inference server and steal agent and user data
An attacker used a remote code execution flaw in the open-source SGLang inference engine to run code on one of NEAR AI's inference servers, taking data from 18 agents and about 100 users. Requests sent in a confidential mode were also potentially visible on that server.
Why it mattersTeams running open-source inference engines should patch quickly, because a single flaw can expose user prompts even in so-called confidential setups.
-
Microsoft AI agents and researchers find 59 Linux kernel bugs, some hidden for over 20 years
A Microsoft FORGE Lab project combining AI agents with human researchers found 59 Linux kernel vulnerabilities, some in production code for more than 20 years. AI sped up discovery, but checking flaws and writing patches still needed a lot of human work.
Why it mattersAI is finding old bugs in core software fast, so teams running Linux should expect more patches and plan for the human effort needed to fix them.
-
Researchers show stolen Claude API keys can turn Claude Code into a remote-controlled implant
Darktrace researchers controlled Claude Code in a lab test using the memory feature of Anthropic's platform and pulled out a 1 GB file through the Files API. All traffic went through Anthropic's normal API endpoint, so it looked like a coding agent doing its job.
Why it mattersLeaked AI API keys can give attackers hidden control of coding agents, so companies should guard and rotate these keys like passwords.
-
Railway breach let hackers run up about $740,000 in AI charges with stolen customer keys
Platform provider Railway said AI provider keys stored by customers were stolen in an October breach and used for an estimated $740,000 in unauthorized usage, potentially affecting up to 100,000 workspaces. The company promised to cover charges that AI providers will not refund.
Why it mattersStored AI API keys are now a direct target for theft and resale of compute, so set spending limits and rotate keys kept on third-party platforms.
-
Microsoft shows editing fewer than 10 neurons can plant a hidden backdoor in AI agents
Microsoft researchers described a technique called Lazarus that changes a few dormant neurons in an open-weight model so that a trigger makes it output attacker commands, with no retraining needed. The modified model behaves normally in standard safety tests, and Microsoft says it has not seen attackers use the method.
Why it mattersTeams running agents on open-weight models need to verify where their model files come from and limit what agents can execute.
