Here's your daily roundup of the most relevant AI and ML news for September 20, 2026. Today's digest includes 5 security-focused stories. Click through to read the full articles from our curated sources.
Security & Safety
1. Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of several OpenAI employees, then reach an internal OpenAI code repository.
The chain began with a bug in the software that runs OpenAI's publi...
Source: The Hacker News (Security) | 19 hours ago
2. CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18.
The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chai...
Source: The Hacker News (Security) | 1 day ago
3. Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by The Wall Street Journal.
The incidents occurred in May 2026 as part of a test run conduct...
Source: The Hacker News (Security) | 1 day ago
4. Can You Prove a New CVE Is Exploitable Before Attackers Do? Learn How in This Webinar
A new CVE drops. Your scanner finds it. The severity score looks ugly.
But that still does not answer the question that matters: Can it actually be exploited in your environment?
Mythos-class AI is compressing the time between disclosure and working exploitation, while many security programs st...
Source: The Hacker News (Security) | 1 day ago
5. Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon's annual Data Breach Investigations Report. This article explains what identity visibili...
Source: The Hacker News (Security) | 1 day ago
Industry News
6. AI safety conversations have gotten unbelievable
This week two conversations about AI safety went viral that demonstrate just how hard it is to discern AI fact from fiction.
Source: TechCrunch - AI | 23 hours ago
Tech & Development
7. Drop-in Django app to serve a decent LLM-ready documentation site
Article URL: https://mdjango.chesselink.com/ Comments URL: https://news.ycombinator.com/item?id=49774057 Points: 3
Comments: 1
Source: Hacker News - AI | 4 hours ago
8. Security researchers used Claude to help them hack into OpenAI
A team of three independent security researchers at Hacktron says it took less than 72 hours for them to hack into OpenAI employee accounts using Anthropic's Claude Opus 4.8 and 5, The Wall Street Journal reports. They were able to access OpenAI's GitHub repository, called "Monorepo," which repor...
Source: The Verge - AI | 1 day ago
About This Digest
This digest is automatically curated from leading AI and tech news sources, filtered for relevance to AI security and the ML ecosystem. Stories are scored and ranked based on their relevance to model security, supply chain safety, and the broader AI landscape.
Want to see how your favorite models score on security? Check our model dashboard for trust scores on the top 500 HuggingFace models.