OpenAI's latest advances have the rumor mill buzzing about "hidden thoughts" and unsupervisable models, but are AI safety experts panicking over the wrong threat? Get the clear-headed take behind the headlines.
- We start out with a classic old school hack against Dropbox.
- Next Patch Tuesday will be enabling "Memory Integrity" for many.
- Firefox moved to 155 and obtained a dumb Smart Window.
- CISA is terminating 6 most valuable cybersecurity services.
- OpenAI advanced to topof the heap with GPT-6 Astra.
- But... is it now hiding some of its thinking from monitoring?
- Nvidia is acquiring Hugging Face. Who's that good for?
- Google releases Gemini 3.8 Flash and Cyber. Is it good?
- Chinese cyberespionage is using AI to become more slippery.
- Matthew Green proposes a fascinating take on AI bug drought.
- A lifelong safety engineer contemplates AI-driven loss of expertise.
Show Notes - https://www.grc.com/sn/SN-1095-Notes.pdf
**Hosts:** Steve Gibson and Leo Laporte
Download or subscribe to *Security Now* at https://twit.tv/shows/security-now.
You can submit a question to *Security Now* at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
**Join Club TWiT for Ad-Free Podcasts!**
Support what you love and get ad-free audio *and* video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit
**Sponsors:**
- doppel.com
- hoxhunt.com/securitynow
- guardsquare.com
- threatlocker.com/twit