OpenAI introduced Lockdown Mode and Elevated Risk labels for ChatGPT on February 13, 2026. The changes are designed to give high-risk users stronger controls and make security tradeoffs more explicit as AI products connect to the web and external apps.
Tom's Hardware reported on March 15, 2026 that Markus 'Doom' Gaasedelen unveiled the Xbox One 'Bliss' exploit at RE//verse 2026. The report says the double voltage glitching attack reaches the boot ROM path, enables unsigned code at every level, and is effectively unpatchable because it targets silicon.
Anthropic said it detected industrial-scale campaigns by DeepSeek, Moonshot, and MiniMax to extract Claude outputs at scale. The company said the activity involved more than 16 million exchanges through about 24,000 fraudulent accounts and that it is investing in detection and response tooling.
GitHub said AI coding agents can now invoke secret scanning through the GitHub MCP Server before a commit or pull request. The feature is in public preview for repositories with GitHub Secret Protection enabled.
GitHub on 2026-03-09 detailed how Agentic Workflows are secured on top of GitHub Actions. The article is significant because it treats agents as untrusted components, isolates them from secrets, and stages writes before they can affect a repository.
Kotaku reports that Duet Night Abyss acknowledged a March 18, 2026 launcher update that spread malware, promising security improvements and in-game compensation after calling the breach a serious wake-up call.
Anthropic said on March 17, 2026 that open source security is becoming more important as AI grows more capable. In its X post, the company said it is donating to the Linux Foundation to help secure the software foundations AI depends on.
Perplexity said on March 17, 2026 that it is launching Comet Enterprise for team use. Perplexity's enterprise page says the browser can answer queries, navigate sites, summarize pages, respond to email, send calendar invites, and adds governance features including prompt-injection protection, SOC 2 Type II and HIPAA compliance, CrowdStrike-based controls, MDM deployment, telemetry, and audit logs.
Google said it is pairing new funding with AI-powered security tooling to help open source maintainers respond faster as AI increases both vulnerability discovery and attack pressure. The announcement combines a collective $12.5 million pledge through Alpha-Omega with wider use of tools such as Big Sleep, CodeMender, and Sec-Gemini.
OpenAI said on March 9, 2026 that it plans to acquire Promptfoo. The company said Promptfoo's technology will strengthen agentic security testing and evaluation inside OpenAI Frontier, while Promptfoo remains open source under its current license and existing customers continue to receive support.
On March 11, 2026, OpenAI published new guidance on designing AI agents to resist prompt injection, framing untrusted emails, web pages, and other inputs as a core security boundary. The company says robust agents separate data from instructions, minimize privileges, and require monitoring and user confirmation before taking consequential actions.
Mozilla said on March 6, 2026 that Anthropic’s AI-assisted red team surfaced more than a dozen verifiable Firefox security bugs. Mozilla says engineers validated and fixed most of the issues before Firefox 148 shipped.