Skip to content
Context Window: AI Security Podcast ยท August 17 ยท 12 min

#25: Recognition Is Not Resistance

Top Story: The firewall blocked it. The agent ran it. โ€” Whoever controls a company's DNS controls where its web and email traffic goes. ๐Ÿ›๏ธ OpenAI moved the limit from the model to the door. โ€” In the spring, OpenAI put its cyber-tuned GPT-5.5-Cyber model behind a vetted-access program. โš”๏ธ AI browsers still have no perfect fix. โ€” At Black Hat, Brave Software security engineer Artem Chaikin found prompt-injection paths in all three browsers he demonstrated: Opera, Perplexity Comet, and ChatGPT Atlas. ๐Ÿ”ฌ Encrypted reasoning can leak what the final answer hides. โ€” A new paper found that opaque reasoning blocks could be replayed across users, sessions, and models within the same provider ecosystem, demonstrated on Anthropic, OpenAI, and Google APIs. ๐Ÿ”ฌ AI agents found 84 flaws, but people made the reports usable. โ€” The iFinder system, built at Nanyang Technological University, sent three agents through mobile-network code: one searched for missing checks, one cross-checked the code against telecom standards, and one built and refined test attacks. CSA AI Security Summit: CxO Trust, August 19. โ€” A free virtual event focused on AI governance, executive accountability, and enterprise risk.. Curator's Corner: Recognition Is Not Resistance (https://nakashon.com/frameworks/recognition-is-not-resistance/) Curated by Asaf Nakash. Voices by AI. Opinions by human. Show notes: https://contextwindowsec.com/episodes/2026-08-17.html

0:00-12:57

transcript

No transcript โ€” this publisher did not publish one.

show notes

Top Story: The firewall blocked it. The agent ran it. โ€” Whoever controls a company's DNS controls where its web and email traffic goes. ๐Ÿ›๏ธ OpenAI moved the limit from the model to the door. โ€” In the spring, OpenAI put its cyber-tuned GPT-5.5-Cyber model behind a vetted-access program. โš”๏ธ AI browsers still have no perfect fix. โ€” At Black Hat, Brave Software security engineer Artem Chaikin found prompt-injection paths in all three browsers he demonstrated: Opera, Perplexity Comet, and ChatGPT Atlas. ๐Ÿ”ฌ Encrypted reasoning can leak what the final answer hides. โ€” A new paper found that opaque reasoning blocks could be replayed across users, sessions, and models within the same provider ecosystem, demonstrated on Anthropic, OpenAI, and Google APIs. ๐Ÿ”ฌ AI agents found 84 flaws, but people made the reports usable. โ€” The iFinder system, built at Nanyang Technological University, sent three agents through mobile-network code: one searched for missing checks, one cross-checked the code against telecom standards, and one built and refined test attacks. CSA AI Security Summit: CxO Trust, August 19. โ€” A free virtual event focused on AI governance, executive accountability, and enterprise risk.. Curator's Corner: Recognition Is Not Resistance (https://nakashon.com/frameworks/recognition-is-not-resistance/)

Curated by Asaf Nakash. Voices by AI. Opinions by human.
Show notes: https://contextwindowsec.com/episodes/2026-08-17.html

more episodes

All episodes