lethal trifecta

muse safety warning meta bug bounty vulnerability a traffic cone on a square base

Meta Bolsters Muse Safety Warning After Security Vulnerability Found

Meta is adding a clearer safety warning inside Muse after an outside researcher reported, through its bug bounty program, a previously unreported vulnerability that could let an attacker reach a user’s sensitive personal information. It is the third Muse security story in five days. We separate what is known from what is not, compare the three incidents, explain Meta’s own containment design and the lethal trifecta, and set out what users and IT teams should do.

Read more
ai lab security in house auditors front door a vault door disc set into a square wall slab

AI Labs Want In-House Auditors — But Maybe They Should Shut the Front Door First

Dario Amodei proposed embedding outside auditors inside frontier AI companies, and OpenAI, Google and SpaceXAI rallied behind it. Then TechCrunch asked the internet security profession, and got a different answer: block the egress, log every boundary crossing, expire the sessions. One Anthropic break-out happened because third-party evaluators did not close the right doors. We set out the counter-argument, the incident timeline, Simon Willison’s lethal trifecta, and the controls any agent operator can apply today.

Read more
CHAT