Here's your daily roundup of the most relevant AI and ML news for September 19, 2026. Today's digest includes 6 security-focused stories. Click through to read the full articles from our curated sources.
Security & Safety
1. Inside the suddenly explosive world of AI safety
Article URL: https://www.theverge.com/ai-artificial-intelligence/996563/ai-safety-research-metr-redwood-openai-anthropic Comments URL: https://news.ycombinator.com/item?id=49765939 Points: 2
Comments: 0
Source: Hacker News - ML Security | 1 hours ago
2. Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.
The chain began with a bug in the software that runs OpenAI's publi...
Source: The Hacker News (Security) | 3 hours ago
3. Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry.
"The developer likely wrote the malware using a large language model (LLM), an assessment made with high con...
Source: The Hacker News (Security) | 1 day ago
4. The Science of Machine Learning vs. the Push for AI Deployment
Article URL: https://medium.com/@MirArshadTalpur/the-science-of-machine-learning-vs-the-push-for-ai-deployment-854c659e4a6a Comments URL: https://news.ycombinator.com/item?id=49766419 Points: 1
Comments: 1
Source: Hacker News - ML Security | just now
5. CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18.
The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chai...
Source: The Hacker News (Security) | 6 hours ago
6. Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by The Wall Street Journal.
The incidents occurred in May 2026 as part of a test run conduct...
Source: The Hacker News (Security) | 6 hours ago
Tech & Development
7. Security researchers used Claude to help them hack into OpenAI
A team of three independent security researchers at Hacktron says it took less than 72 hours for them to hack into OpenAI employee accounts using Anthropic's Claude Opus 4.8 and 5, The Wall Street Journal reports. They were able to access OpenAI's GitHub repository, called "Monorepo," which repor...
Source: The Verge - AI | 22 hours ago
8. Claude Code relaunches Projects to manage multiple AI agents in the cloud
The revamped projects feature in Claude Code allows users to run multiple agents under the same roof, with a shared memory, goals, and library of files and artifacts. Similar to Grok Bot and other tools that manage groups of AI agents, each project has "threads" running different tasks in paralle...
Source: The Verge - AI | 1 day ago
About This Digest
This digest is automatically curated from leading AI and tech news sources, filtered for relevance to AI security and the ML ecosystem. Stories are scored and ranked based on their relevance to model security, supply chain safety, and the broader AI landscape.
Want to see how your favorite models score on security? Check our model dashboard for trust scores on the top 500 HuggingFace models.