LIVE · cybersecurity feed
Live wire
CVE-2026-88779 · Citrix NetScaler Flaw Exploited Before CVE PublicationCVE-2026-88779 · NetScaler CVE-2026-88779 Exploited Before PublicationCVE-2022-28368 · dompdf_project dompdf XSS flaw added to VulnCheck KEVCVE-2026-88771 · Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploitedWarlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical InfrastructureShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group MembersChina-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM PhishingCVE-2026-7273 · Zyxel GS1900 Switch Flaw Exploited, Now in EU CatalogueCVE-2026-102489 · Zammad Session Fixation Vulnerability Exploited Same Day as DisclosureCVE-2026-102490 · Zammad GmbH Zammad Vulnerability Exploited Same Day as Publication
nation-state

Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns

David Robinson, a veteran safety expert at OpenAI, has resigned from the company, citing concerns about its culture and rapid AI development model. Robinson, who was instrumental in authoring safety reports accompanying major product launches during his three-and-a-half-year tenure, stated that he believes the company's current trajectory is unacceptable.

ZeroDay News ·

Source: Security Affairs

David Robinson, a veteran safety expert at OpenAI, has resigned from the company, citing concerns about its culture and rapid AI development model. Robinson, who was instrumental in authoring safety reports accompanying major product launches during his three-and-a-half-year tenure, stated that he believes the company's current trajectory is unacceptable.

Robinson’s departure follows a pattern of other former OpenAI and industry colleagues who have raised similar alarms. He emphasized that the issue extends beyond specific regulations or laws, pointing instead to a fundamental cultural problem within Silicon Valley's approach to AI development. He believes that the industry's focus on "iterative deployment"—releasing systems, identifying problems, and then implementing safeguards—is inherently flawed and will inevitably lead to increasingly severe failures as AI systems grow more powerful.

As evidence of this problem, Robinson cited recent incidents, including a breach of Hugging Face systems involving OpenAI agents and other "rogue-agent" occurrences. He drew a stark comparison, arguing that frontier AI laboratories should operate with the same rigorous safety protocols as nuclear power plants or major airports, incorporating redundancy and extensive planning to prevent single human errors from escalating into disasters. He noted that during his time at OpenAI, he never worked with anyone who possessed direct experience in these high-stakes safety domains.

OpenAI, through spokesperson Drew Pusateri, acknowledged these concerns and stated that it is actively working to address them. The company claims to be enhancing security in research environments, training models for responsible behavior, increasing external testing, and deploying stronger real-time monitoring to detect harmful actions earlier. However, Robinson views these efforts as merely perpetuating the existing cycle of reactive problem-solving.

Beyond engineering and company culture, Robinson also highlighted the inadequacy of current methods for ensuring AI systems align with human values. He argued that the industry lacks a clear and effective way to measure "alignment," a deficiency that becomes more critical as AI capabilities advance. He warned that if AI continues to improve without a corresponding increase in our ability to measure and control its behavior, the associated risks will escalate.

Robinson acknowledged that his decision to speak out, including hiring a public relations firm, might appear clichéd. However, he maintained that the choice was entirely his own and that he felt the company was moving too quickly to allow for the deeper introspection and systemic changes he believed were necessary. His resignation echoes earlier criticisms from individuals like Jacob Coxon, who left both OpenAI and Anthropic, accusing companies of "gambling with people's lives."

nation-stateai
ShareXLinkedInWhatsAppFacebook

More News

view all →
nation-state

doxx.net opens Agentic Defined Networking public beta, raises $38 million

doxx.net has launched the public beta of its Agentic Defined Networking (ADN) platform, which enables users and their AI agents to establish private, secure networks and communicate without intermediary servers. The company also announced it has secured $38 million in Series A funding, led by Andreessen Horowitz, with additional participation from Animo Ventures and Focal.vc. As part of the…

breach

Frontline Education Breach Impacts K-12 School District Staff

Frontline Education, a prominent software provider for K-12 school districts in the United States, has confirmed a data breach that exposed the personal information of school staff. The incident, which was discovered on August 14, 2026, stemmed from a vulnerability in a third-party software product utilized by the company.

vulnerability

Google halts open-source bug bounty program amid AI spam surge

Google has temporarily suspended submissions for product vulnerabilities to its Open Source Software Vulnerability Rewards Program (OSS VRP), effective October 1, 2026. The company cited a significant increase in automated submissions, most of which were deemed invalid, as the reason for the pause.

ai

Apple tightens macOS disk access as AI agents become more powerful

Apple is implementing stricter controls for Full Disk Access in macOS, citing an increased risk to user privacy from increasingly capable and autonomous AI agents. The company indicated that future macOS versions will require users to take explicit steps to grant applications this permission. A specific rollout date and the precise mechanics of these new controls have not yet been detailed.

vulnerability

AI slop submissions force Google to freeze its open-source bug bounty

Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for new product vulnerability submissions, effective October 1, 2026. The company cited a substantial increase in automated, AI-generated reports, most of which were invalid, as the reason for the pause. This influx of low-quality submissions overwhelmed the engineers and open-source maintainers…

patch

Three questions a hospital CISO should ask a healthcare fintech vendor

A cybersecurity expert has outlined key questions hospital CISOs should pose to healthcare fintech vendors to assess their security posture, particularly concerning patient data and financial transactions. Drew McCombs, who holds both CTO and CISO roles at Cylerity, emphasizes that security should be an integral part of development processes, not an afterthought, especially when patient data…