AI safety

AIThreatBook has acquired CyberStrikeAI, an open-source AI pentesting agent, after reports that attackers had used it in real intrusions. The company says it added guardrails to limit misuse but will put new capability enhancements into its commercial edition, and it argues defenders should control such tools. It also corrects an earlier threat intelligence report that linked the developer, a security engineer at Alipay, to government agencies, calling that attribution a false positive.

AISafeWorld emerged from stealth this week with $12.2 million in seed funding for its robot safety simulation platform. The software lets teams build test scenarios from past incidents, safety standards, and robot logs, then runs robots through thousands of variations with reactive human motion. SafeWorld said it supports robot arms, humanoids, and mobile robots, with customers in industrial, manufacturing, logistics, and construction.

AIOpenCode warned that a code execution vulnerability affects OpenCode Server versions 1.14.30 through 1.18.21 and urged users to update to the latest version. The post credits @christophetd and the Datadog team for reporting the issue, with details linked in a Datadog Security Labs article.

Why it matters: The post names the affected version range and the fix, which matters for anyone running OpenCode Server and deciding whether to upgrade now.