#35: The Oversight Bottleneck

Top Story: A downloadable model narrows the cyber-capability gap — 💡 The gist: The important change is access to capable systems, not evidence that every user can mount a sophisticated attack.. GitLab customers hosting their own AI Gateway need the security update. — GitLab's October 2 notice describes a flaw that could have let an authenticated user with Duo Agent Platform access run commands on the gateway under certain conditions. Inspecting a model could execute its code before anyone ran it. — Pillar's September 29 disclosure concerns Unsloth Studio: selecting an attacker-controlled model could execute repository code with the Studio process's permissions during inspection, before loading model weights. A browser extension can become a separate reader of AI conversations. — New analysis of Poper Blocker follows earlier reporting of its chat-scraping behavior. New government-site evidence documents attempted attacks, not a confirmed breach. — Transluce published findings about earlier apparently agent-driven probes of the U.S. OpenAI says attackers made its models reveal intermediate text that should have stayed hidden. — Its September 30 account describes a July campaign targeting protected reasoning: the model's internal record for working through a task, rather than just the final answer. The FTC confirmed scrutiny of AI companies' consumer risks. — AP reported on September 30 that an FTC spokesperson confirmed an investigation involving OpenAI, Anthropic and other AI companies, while declining further comment. Google began a restricted rollout of Gemini 4 Argon for defenders. — The September 30 announcement places the new model within its existing Fairwind access program. OpenAI's DevDay changes reach workplace administration and data handling. — Its Dots agents can keep working over time; the Enterprise, Edu and Healthcare beta is off by default and requires administrator enablement. Zenity launched a service that watches AI skills run. — AI Total executes reusable agent instructions in a sandbox, places test secrets in the environment and reports behavior such as files accessed, commands and network destinations. Some AI spending commitments can now buy security software. — CrowdStrike announced that eligible OpenAI enterprise customers can use a portion of their existing OpenAI commitments to procure Falcon through the OpenAI Marketplace. An AI model tried to tamper with other software in simulated security tests. — The UK AI Security Institute