-
OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an “even more capable pre-release model,” was behind the security incident that targeted Hugging Face’s production infrastructure last week. The AI company said the models were operating with “reduced cyber refusals for evaluation purposes” that might otherwise limit their ability to
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Canada's decision to become the first observer nation in the Global Combat Air Program, or GCAP, a multinational effort to build a sixth-generation fighter, is less about finding an alternative to its ongoing F-35 purchases and more about building non-U.S. defense relationships.
First, a look at Canada’s current fighter requirements. The Royal Canadian Air Force flies Boeing CF-18 Hornets that were originally expected to retire by 2020. Ottawa had planned since 2010 to replace them with 65 F-35s, but scuttled the plan as the cost of the Joint Strike Fighter continued to rise.
The government examined other options, including the Boeing F/A-18E/F Super Hornet and the Saab Gripen, in a follow-on competition marked by a chaotic process and a trade dispute with Boeing about government commercial aircraft subsidies and negotiations over industrial benefits. Justin Trudeau’s government ultimately decided to buy 88 F-35s.That changed when Donald Trump returned to the White House. Within a year, the American president's new tariffs and comments about annexing Canada deeply strained the once-ironclad relationship. The fallout reshaped Canada’s political future. Trudeau’s Liberal Party was facing abysmal approval ratings, leading to his ouster as prime minister prior to the 2025 federal election. His replacement, Mark Carney, promised to stand up to Trump in the trade war, which ultimately secured his Liberal party an election victory.
Carney has continued to push back against Trump, including outlining plans to distance Canada from its reliance on U.S. defense equipment. He put the F-35 procurement plans on hold to review the program and determine if a different aircraft would better serve Canada’s broader interests. Ottawa is already contractually committed to the first 16 F-35s, so at this point the government is deciding whether to continue with a pure fleet of F-35s or adopt a mixed fleet that would likely integrate the Saab Gripen. The Royal Canadian Air Force has long preferred the F-35, but the program remains a political negotiating tool.
Enter GCAP
Ottawa’s involvement in GCAP—a joint effort of Italy, Japan, and the United Kingdom—isn’t about replacing the CF-18, which will be retired sooner rather than later. Before putting the F-35 on hold, Ottawa anticipated receiving its final new aircraft in 2032. However, GCAP isn’t expected to enter service until 2035, and any theoretical Canadian aircraft wouldn’t arrive until well after that date, meaning it isn’t a viable platform to replace the CF-18. Canadian Defense Minister David McGuinty confirmed as much on Monday when he said any GCAP involvement is a separate issue from the ongoing F-35 review.
Rather, Canada’s move is about building relationships and realigning strategic partnerships at a time of deteriorating relations with the U.S. Canada is increasingly looking abroad to bolster defense and industrial ties with other nations. Joining GCAP, even if only as an observer, serves as way to learn more about sixth-generation fighter capabilities, increase industrial collaboration with allies overseas, and strengthen ongoing security arrangements. “Today is about more than a program, it’s about an enduring strength of partnership,” McGuinty said at a press conference announcing the GCAP news.
McGuinty also spoke of a world that is becoming more contested, with technology and conflict transforming at an unparalleled pace. “The nations that can innovate together, build together, and stand together will be best positioned to meet the challenges of tomorrow,” he said. These sentiments echo a speech Prime Minister Carney gave at the January 2026 World Economic Forum in Davos, Switzerland. There, he called for increased cooperation among middle powers to hedge against uncertainty and the rise of “hard power.” While Carney didn’t mention the U.S. or Trump by name, the speech clearly served to highlight Canada’s displeasure with the new status quo in Washington.
Walking a fine line
Canada finds itself in a difficult position. It faces diminished trust in its closest ally and has outlined plans to reduce its reliance on American military equipment in the future. At the same time, U.S. and Canadian defense interests remain closely linked through shared security under the North American Aerospace Defense Command. U.S. and Canadian defense industrial bases are also deeply integrated, and Canada already operates many U.S. platforms. The tense relationship also hasn’t derailed other recent efforts to procure U.S. equipment, such as Boeing P-8A maritime patrol aircraft, General Atomics MQ-9B drones, and Lockheed Martin High Mobility Artillery Rocket Systems (HIMARS).
As with other European nations that have expressed a desire to rely more heavily on domestic hardware, shifting away from reliance on U.S. equipment is something that would take years to achieve and is a goal that will be significantly impacted by future administrations. For now, GCAP observer status doesn’t change Canada’s fighter fleet or its F-35 review. What it does is give Ottawa a new seat at the table as it works to diversify its defense relationships beyond Washington.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV.

Proxy SDK prevalence among smart TV apps for LG (webOS) and Samsung (Tizen OS) televisions. Image: Spur.us.
On July 2, we featured research by the security firm Spur that examined the prevalence of residential proxy software development kits (SDKs) in smart TV apps. Spur found more than 42 percent of apps available for download on LG smart TVs include SDKs that turn one’s television in a proxy node indefinitely, and that more than a quarter of the apps made for Samsung’s Tizen operating system had similar residential proxy components.
Responding to questions about Spur’s research, LG Senior Vice President John Taylor told KrebsOnSecurity the company was working with app developers to remove the residential proxy option from their apps on the webOS platform. Developers that fail to comply, he said, will find their apps suspended.
“A residential proxy network is not an intended use for LG smart TVs, and LG Electronics is working with developers to remove the residential proxy option from their apps on the webOS platform,” Taylor said. “If this option is not removed, these apps will be suspended.”
Taylor said LG is committed to keeping residential proxy networks out of its smart TV apps going forward, and that the company’s review of those apps is “well underway now.”
“As part of our ongoing efforts to enhance platform quality and the user experience, LG will continue to strengthen our evaluation process for developer-submitted apps, including those that incorporate residential proxy SDKs,” Taylor wrote in an emailed statement.
App makers looking for ways to monetize their creations can turn to residential proxy providers, which pay developers to include SDKs that turn the user’s device into a residential proxy node that is rented to paying customers. In the case of LG and Samsung smart TVs, Spur found residential proxy SDKs bundled with everything from simple games like Pac-Man to screensavers and file utilities.

A Pac-Man smart TV app from Bright Data offers users the choice between viewing ads in the game or agreeing to allow their TV to serve as a residential proxy node. Image: Spur.us.
Spur’s report found the residential proxy network Bright Data accounted for a majority of proxy SDKs across both Samsung and LG smart TVs. Bright Data did not respond to requests for comment.
Bright Data and other proxy providers named in Spur’s report all say they follow rigorous know-your-customer processes to validate legitimate uses of their services, which is often heavily tied to content-scraping activities by said customers. The proxy companies also say they incorporate technological countermeasures to prevent proxy service customers from being able to interact with and control other devices on the proxy user’s local network.
Spur argues the problem is not that residential proxy networks exist, but rather that they are being embedded at scale in devices that most consumers do not think of as computers and are not equipped to audit.
“A one-time consent prompt buried in a TV app is not a substitute for meaningful transparency, ongoing control, and platform oversight,” Spur’s Trevor Sutter wrote. “The risk is amplified when consent comes from individuals within the household who use the device but shouldn’t give consent, such as minors.”
LG’s announcement that it is culling residential proxy SDKs from its app store is welcome news, but the company recently came under fire for another questionable partnership: Pimping McAfee security products via software drivers included in its high-end LCD monitors.
Earlier this week, the Youtube channel Gamers Nexus showed that certain LG LCD monitors will automatically install an app that promotes paid McAfee antivirus subscriptions, and that the app arrives through Windows Update without an approval prompt.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The U.S. intelligence community needs to devote more resources to protecting American artificial intelligence companies from foreign espionage, former officials told the House Intelligence Committee on Tuesday, arguing that China will use a range of intelligence-gathering techniques to steal proprietary AI technology and advance its own military and economic goals.
The hearing, focused on emerging threats to the U.S. in the 25 years since the Sept. 11, 2001, terrorist attacks, also highlighted AI’s growing role across a range of national security concerns, including cyberattacks, autonomous drones and foreign influence operations.
“Of course, our intelligence services and agencies are going to have secrets that are always going to be of top desire for foreign intelligence adversaries, but if you’re [China’s Ministry of State Security] today, you’re looking at frontier model companies,” said Frank Cilluffo, a former George W. Bush homeland security official who leads Auburn University’s McCrary Institute for Cyber and Critical Infrastructure.
“I think we’ve got to actually rethink counterintelligence. It’s not just the traditional spy-versus-spy, information-versus-information,” he added. “It’s who holds the keys right now, it’s not going to be in government alone.”
Access to proprietary U.S. AI research is valuable to foreign adversaries because it can help them close technological gaps without bearing the cost and time of developing those capabilities themselves.
U.S. officials have several times assessed that China has stolen proprietary national security information, notably data on military aircraft. More recently, the White House and major U.S. AI companies have accused Chinese firms of conducting distillation operations, in which developers covertly use advanced American-made AI models to improve their own.
“The counterintelligence threat has lagged way behind,” said retired Lt. Gen. H.R. McMaster, who served as national security advisor during President Donald Trump’s first term. “I think we have a lot of work to do,” he said, describing how, over the years, U.S. devotion to counterterrorism efforts after Sept. 11 drew away resources that track China’s efforts to embed spies and other researchers into American firms.
The range of counterintelligence targets is broader now, and especially includes private companies, said Ben Buchanan, who served as the Biden administration’s White House special advisor for AI.
Counterintelligence operations will also evolve with AI, he said.
“Of course cyber operations have already changed, but even if you look at things like human intelligence and detecting human intelligence operations, it is a different technical paradigm that yields different kinds of analysis that AI alone can do,” Buchanan said.
He also criticized the Trump administration’s recent moves to ease restrictions on advanced chip exports to China.
“America has a large structural advantage in AI due to the democratic ecosystem of producing chips, and we should exploit that structural advantage to the fullest,” Buchanan said. “We should be much more aggressive on enforcement and smuggling to stop China from trying to catch up.”
Many individual states are also not well equipped to track and respond to Chinese spying efforts, said Seth Jones, a former U.S. Special Operations Command official who now leads the Defense and Security Department at the Center for Strategic and International Studies.
Recent quantum computing executive orders have focused, in part, on tasking the FBI and the intelligence community with better protecting the nation’s quantum research from foreign spying.
The White House has directed national security agencies to help safeguard advanced U.S.-made AI from foreign threats, but it has not established a dedicated counterintelligence framework equivalent to the quantum technology directives.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
LONDON—Keeping some things local will be key for U.S. weapons makers that want to expand their business in Europe, a top Boeing executive said.
That can mean not being a prime on certain contracts, teaming with European defense companies, employing locals, and designing future platforms—like the MQ-28 Ghost Bat—with open architecture that can be tailored to fit international militaries’ needs.
“I would say that we've been listening a little bit [differently] for the past couple of years, as there has been some kind of shift in Europe,” Steve Parker, Boeing’s president and CEO for its defense business, told reporters Sunday ahead of the Farnborough International Airshow.
For example, as part of an upcoming bid competition, Boeing is pitching its T-7A fighter jet training platform—built with Saab for the U.S. Air Force—to be the Royal Air Force’s next trainer.
“We're going to bring what I believe is the world's most advanced training system to the UK, and we'll compete there very differently with a UK focus and a final assembly checkout line here,” Parker said, “We are teamed with BAE Systems, and…they will prime an opportunity for us, and this is all about British jobs.”
BAE Systems announced the solidification of the multivendor bid for T-7 on Tuesday.
Having BAE, Saab, and Boeing bid together “aligns with the ambition of the Defence Investment Plan, while strengthening the UK’s sovereign industrial capability,” Charles Woodburn, BAE Systems’ CEO, said in a news release announcing the decision.
And for Boeing, it’s a way to emphasize their commitment to keeping European business.
“Boeing Defense UK, we started with five employees. We're up to over 2,100—those are 2,100 jobs here in the UK. I don't care whose name is on the door,” Chris Raymond, Boeing’s president and CEO of global services told reporters. “And you’ve got to create those partnerships between a piece of kit they want and an industrial participation plan that works and gets the local capability starting to grow.”
Raymond said the company has employed that strategy in the UK, Australia, India, Japan, and Canada.
The comments come as the UK and other European countries boost their defense spending and increasingly look internally at domestic defense companies.
From a tech perspective, collaborative design using modular open systems architecture can give foreign governments more flexibility and “provides the country sovereignty,” Parker said of Boeing’s MQ-28 Ghost Bat, a collaborative combat aircraft that will be on display for the first time this week at Farnborough.
The St. Louis-based company is working with Rheinmettall and others to put their technology on the German version of the Ghost Bat aircraft.
“We've teamed with Rheinmetall and a number of other German companies to offer that up to the [German armed forces] and the [German air force], and they will have similar control of what systems they want to put on,” he said. “We're changing the way we bring these capabilities to bear, and sort of the value proposition of the offering. And I think there's more to come there as well. So, it's playing out. We've been looking at it for a couple of years, and I think there's a lot of opportunity for us if we think differently, which is what we're doing.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Apple has moved to address a security flaw in its Hide My Email service that enabled users’ real email addresses to be unmasked, effectively undermining the feature’s privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a year, when it was disclosed to the company by Tyler Murphy, co-founder of EasyOptOuts. Hide My Email
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
FARNBOROUGH, UK—U.S. lawmakers sounded alarms about the fate of this year’s Pentagon budget while attending Europe’s largest airshow and said the Trump administration’s top defense priorities, including the Golden Dome missile defense program, are in peril.
A bipartisian congressional delegation at the Farnborough International Airshow told reporters on Monday that the gridlock surrounding this year’s National Defense Authorization Act, an Iran war supplemental, and additional funding measures likely portends acontinuing resolution: a stopgap funding measure to keep the government open at the current year’s spending levels.
“We're not going to get an NDAA bill done anytime soon,” Sen. John Kennedy, R-La., said. “Anybody, no offense to anybody, anybody who thinks we're going to do an NDAA in the midterm needs to back off the crank. It's not going to happen.”
Kennedy later said, “We'll get the NDAA done” and “I hope we’ll have a CR to continue the budget, but after that, I really don't know.”
Political infighting about the defense budget comes as President Donald Trump has pushed European countries to provide for their own defense and to buy American weapons. Given the gridlock in Washington, the administration has proposed to make heavy, partisan use of an unusual budget maneuver called reconciliation.
“There's a concern that if you start doing defense and reconciliation, it can create a bad habit, and I get all of that,” Kennedy said on the sidelines of Farnborough. “But the military needs money, and the only way to get it to them in this environment is through reconciliation.”
Some $350 billion of the administration’s initial $1.5 trillion defense budget request relies on reconciliation, which allows funding legislation to be passed by a simple majority. The sum includes major defense priorities such as munitions, shipbuilding, and autonomous warfare efforts. Congress has since whittled the reconciliation amount to $60 billion, mostly to support the war in Iran.
“I'd go a little bit heavier on the defense money, but that's just me. I'll take it if that's the best we can do,” Kennedy said.
Democrats disagree.
“I think it does set a dangerous precedent, and I think the Appropriations Committee, both Democrats and Republicans, have been pretty clear with the department about that, about concern that if this is a priority, it should go in the base budget,” Sen. Jeanne Shaheen, D-N.H., said in a sideline gaggle with reporters. “There isn’t going to be a third reconciliation package, so anything that's in there is not going anywhere.”
Golden Dome
Republican lawmakers are also casting doubt on using reconciliation to pass one of the Trump administration’s biggest defense priorities: the sprawling Golden Dome missile defense program.
A mere $400 million of the $17.5 billion the Pentagon is seeking for Golden Dome comes from the baseline budget, and the remainder from reconciliation funds. Sen. Deb Fischer, R-Neb., told reporters at Farnborough the secretive missile defense investment “is needed” but is concerned with the administration’s partisan funding maneuvers.
“I'm worried it's in reconciliation, because I don't know if that's going to happen or not,” Fischer said.
Todd Harrison, a defense budget analyst at the American Enterprise Institute, said there’s other avenues outside of reconciliation to get the Golden Dome funding the admin wants.
“I think this is one of the priority items in reconciliation [that] they will find a way to work into a funding bill,” Harrison said. “If not this one, then the base budget or something else.”
Kennedy, like Fischer, said the missile defense system is needed but added that there’s other more pressing priorities.
“It's going to be expensive,” Kennedy said of Golden Dome. “Will we get it done in this Congress? I wouldn't bet my house on it. And if I were betting your house on it, it'd be a maybe.”
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hidden text on a web page was enough to make Kiro, AWS’s agentic coding IDE, rewrite its own configuration file and run an attacker’s code on a developer’s machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary as asking Kiro to summarize a page could end in remote code execution. AWS has patched the issue, and no CVE has been
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google’s DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that’s designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model will be exclusively available to governments and trusted partners via CodeMender as part of a limited-access pilot
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
·
Learn how Fig adds testing, deployment, and continuous verification to SecOps, helping security teams keep detections reliable as infrastructure evolves. daily.¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


