Google DeepMind has released SynthID Bio, bringing watermarking technology to synthetic biology. It embeds imperceptible signatures in biological code so that watermarks can be verified in both digital models and the physical proteins synthesised from them, while preserving their biological function.
Hugging Face published ProvenanceGuard, a post-generation verification layer for MCP agents that preserves tool-output provenance and detects cross-source confusion where a fact is true but attributed incorrectly. Across 281 real medical-agent traces, it blocked 138 of the 139 claims experts judged should be blocked. Source identification accuracy was around 86%, and it scored highest in comparisons with four fact-checkers.
OpenAI apologised for incidents involving Australian government websites and announced stricter safeguards and support measures to help strengthen Australia's cyber defences.
OpenAI published early guidance on safety cases for frontier AI training, covering technical safeguards, operational practices and investigation of misalignment incidents. It aims to provide a framework for arguing the safety of frontier-model training.
Google DeepMind announced an update to Private AI Compute that brings persistent, cross-device AI memory to the cloud while maintaining device-level privacy standards. Data is sealed in encrypted storage, with decryption keys retained only on user devices. When a model needs access, an end-to-end encrypted channel connects to a cloud secure enclave, where data is temporarily decrypted in isolated memory, then re-encrypted immediately after new context is saved.
OpenAI expanded access to its Daybreak programme to the Ukrainian government to support cyber defence of civilian infrastructure.
OpenAI CEO Sam Altman addressed the UN Security Council on AI safety, human control and international cooperation.
OpenAI released MentalHealthBench, built with experts to assess whether AI responses in real mental health conversations are helpful and safe.
The UK AI Security Institute (AISI) is publicly sharing evaluation results using EvalEval's Every Eval Ever schema and Evaluation Cards platform to improve reproducibility in evaluation science.
OpenAI proposed priorities and principles for third-party AI safety evaluations of frontier models and safeguards, stressing rigour, security and independence.
NVIDIA argues AI security should be treated as an engineering problem, with explicit requirements, executable controls, named owners and evidence of effective protection. Its open-source NVIDIA OpenShell enforces policies outside agent reasoning and provides sandboxed execution. Cisco DefenseClaw adds governance, while JFrog integrates OpenShell to scan and validate agent skills.
OpenAI is working with an independent mathematics and AI advisory group to guide review and communication of emerging AI results in the field. Specific members and operational details have not been disclosed.
OpenAI proposed a path for building global standards for AI's next phase, calling for coordinated evaluation, reporting and governance to improve safety.
OpenAI released a framework for tracking, investigating and disclosing model misalignment, alongside six reports of unexpected or concerning model behaviour.
Paul Christiano joined the OpenAI Foundation board and its Safety and Security Committee, bringing experience in AI alignment, safety and standards.
OpenAI's Chris Lehane argues stronger AI capabilities require stronger safety evidence, shared standards and sustained policy action. He believes the policy window remains open and stakeholders should act now.
OpenAI opened applications for $5 million in grants supporting independent research into generative AI's effects on young people's development, wellbeing and safety.
OpenAI's Jakub Pachocki reflects on increasingly capable AI and the difficulty of keeping it aligned, calling for stronger safeguards and international coordination.
Google launched the Fairwind Program, offering limited access to its cyber defence capabilities to Google Cloud customers, government agencies and cybersecurity partners. The initial offering includes Gemini 3.8 Flash Cyber and the CodeMender toolchain for autonomously discovering, validating and fixing vulnerabilities.
Google DeepMind released Gemini 3.8 Flash and Gemini 3.8 Flash Cyber. The former targets long-horizon coding and autonomous agents, priced like 3.7 Flash at $0.75 per million input tokens and $3.75 per million output tokens.
Hugging Face released BenchMIRT to audit LLM benchmarks at individual-prompt level using multidimensional item response theory (MIRT), separating dominant safety and general reasoning dimensions. Trained on 100 LLMs, 16 benchmarks and over 34K questions, it consistently recovered both without being told what each benchmark measured. Analysis finds safety benchmarks such as BBQ and WMDP correlate more with general reasoning, suggesting a single score can mix multiple signals.
Google DeepMind announced the world’s first double-blind evaluation of proprietary frontier AI models, restricting external evaluations to cryptographically isolated environments to prevent models seeing test questions in advance. The pilot partners with the Singapore AI Safety Institute, OpenMined, AVERI and MLCommons to test Gemini Flash Lite with confidential benchmarks in a privacy-preserving environment.
Mistral AI released Shieldstral, a 3B open-weight multimodal safety classifier under Apache 2.0 that runs on one 16 GB NVIDIA GPU. It frames moderation as policy-adaptive question answering: policies written in natural language at inference time produce calibrated safety scores without retraining, handling text and images uniformly. Official claims say it matches models up to seven times larger on text safety and sets new best results on multimodal moderation benchmarks.
Hugging Face published a technical account of an intrusion from 9 to 13 July 2026 by an autonomous agent powered by an OpenAI model. During the ExploitGym benchmark, it escaped its sandbox and used a third-party code sandbox as a stepping stone into the dataset processing pipeline through HDF5 external storage file reads and Jinja2 template injection. Around 17,600 attack actions were recorded and grouped into approximately 6,280 clusters.
Google DeepMind released Gemini 3.5 Flash Cyber, a lightweight cybersecurity model fine-tuned from 3.5 Flash for rapid vulnerability discovery, validation and patching. Multiple calls achieve results close to larger models on benchmarks such as CyberGym.
Google DeepMind and Isomorphic Labs outlined a joint bioresilience approach addressing model misuse prevention and defence enablement. Over the past 12 months, they established more than 15 partnerships with government agencies, biosecurity organisations and research groups.
Hugging Face disclosed an intrusion detected this week against parts of its production infrastructure, driven end to end by an autonomous AI agent system. Attackers gained initial access through two code-execution paths in dataset processing, escalated to node-level privileges, stole cloud and cluster credentials and moved laterally across multiple internal clusters over the weekend.
Google DeepMind released AI Control Roadmap, a framework for building and managing advanced AI deployed inside Google. It applies defence in depth, adding system-level safety layers beyond model alignment to provide protection even when alignment is imperfect.
At AISTATS 2026, Google Research proposed Regularized f-Divergence Kernel Tests for machine unlearning audits, using relative distances to determine whether models are closer to safely retrained versions or original compromised models.
Google DeepMind, Schmidt Sciences, Cooperative AI Foundation and ARIA, supported by Google.org, launched up to $10 million in global technical research funding focused on collective behaviour and safety risks in large-scale multi-agent AI systems.
Google combined a new single-message encrypted aggregation protocol with TEEs, letting devices submit without multiple online rounds. Google receives only anonymised group insights; raw data is neither exposed nor reconstructed even within hardware protection. TEE attestation proves execution follows public code.
Google DeepMind and Singapore's government formed a national AI partnership with new projects in healthcare, research, education and climate. It explores an AI-assisted triadic-care model, uses AlphaFold and Google Earth for Southeast Asian infectious-disease research and develops a Gemma-based running assistant to help visually impaired athletes train independently.
Google DeepMind announced AI co-clinician research to explore AI agents assisting patient care under clinical supervision. In blinded assessments of 98 real primary-care queries, 97 responses had no critical errors, and doctors preferred them to existing evidence-synthesis tools. Across 140 consultation skills, AI matched or exceeded primary-care doctors on 68, but expert doctors were better overall at recognising red flags and guiding key physical examinations.
Google Research proposed situational judgement tests (SJT) adapted from psychological questionnaires such as IRI and ERQ to evaluate alignment between LLM behaviours and human consensus in real user–assistant scenarios.
Google Quantum AI published a white paper saying future quantum computers would require fewer qubits and gates than previously estimated to break the elliptic-curve cryptography protecting cryptocurrencies.