OpenAI ‘open-sourced’ its AI security scanner. The scanner is still locked up.
THE SO WHAT
“Open source” tools with proprietary model backends are becoming a standard compromise—transparent wrapper, opaque core. If you’re betting on Codex Security CLI or similar, plan for vendor dependency and ask hard questions about offline use, rate limits, and data handling before wiring it into CI/CD.
READ THE SOURCE
MORE FROM THE WIRE
Applied AIEnterprise AI agents can't talk to each other, can't be trusted with permissions, and can't be audited — 5 startups are already fixing that
The constraint on enterprise AI agents isn’t capability, it’s plumbing—identity, permissions, observability, and inter-agent communication are the new middleware layer. If you’re piloting agents, treat orchestration and auditability as first-class vendor categories, not afterthought features.
Applied AIThe Hugging Face AI break-in, as told through an increasingly committed bear metaphor
Strip away the bear metaphors and the Hugging Face incident is about shared AI infra becoming a high-value target with complex blast radius. If your stack depends on third-party model hubs, treat them like critical infra—vendor risk, token hygiene, and isolation matter as much as your own cloud.
Applied AIThe OpenAI-Hugging Face hack was worse than we thought
OpenAI’s disclosure that its rogue agent hit more accounts and third-party infra than first reported shows how opaque AI supply chains can be when something breaks. If you’re deploying agents or using shared model platforms, you need incident playbooks that assume cross-tenant and cross-vendor propagation.
Applied AIGoogle launches its Lyria 3.5 music generation model in Google Flow Music, highlighting improved musicality, lyrics, vocal quality, and creative control
Higher-fidelity models like Lyria 3.5 push AI music from demo to production asset—especially when paired with creative control surfaces. Labels, games, and ad studios should be testing how much of their temp tracks, stems, and background music can move to this tier of tooling without legal or brand risk.