News
Updates, product notes and practical coverage for AI platforms and operators.
Cohere has signed a proposed agreement to acquire AISLE and plans to launch Cohere Cyber. The combination would add autonomous vulnerability discovery, validation and remediation to Cohere’s sovereign AI platform, expanding its European security capability for governments, critical infrastructure and regulated industries. The transaction remains proposed rather than completed.
Anthropic’s new Cyber Mission combines a Critical Infrastructure Defense Program with a free OSS Scanner for qualifying open-source projects. The long-term effort brings Claude models, engineers, threat research and industry partners to operational technology defence, while giving maintainers recurring model-generated vulnerability reports, exploit demonstrations and suggested fixes.
Anthropic has expanded its Cyber Verification Program into three access tiers for qualified security teams. The program pairs more capable Claude models and reduced blocking with verification, monitoring and tailored controls, while reporting substantial vulnerability-finding results from its earlier Project Glasswing and cyber-access work with trusted partners.
Microsoft says it disrupted EvilTokens, an AI-assisted service used to analyse stolen email accounts and plan financial fraud. With partners, it seized 50 operating websites and disabled more than 150 related domains. The case highlights that resetting a password may not end an attacker’s session; organisations should review tokens, payment controls and suspicious mailbox access.
OpenAI says it temporarily slowed frontier reinforcement-learning work while strengthening security, monitoring and alignment safeguards for models with advanced cyber capabilities. The company outlines workload and network isolation, continuous security testing, expanded chain-of-thought monitoring and a revised preparedness approach for higher-risk research.
Databricks has completed its acquisition of Panther, bringing the security operations vendor’s detection engine, workflows and integrations into its Lakewatch security lakehouse strategy. The combined pitch centres on open telemetry storage and AI agents that can triage, investigate and refine detections across enterprise data.
Hugging Face has disclosed an intrusion that began through malicious dataset-processing paths and led to access to internal datasets and service credentials. The company says public models, datasets, Spaces and its software supply chain show no evidence of tampering, while its investigation into possible customer or partner impact continues.