September 30, 2026

Trusted defenders and Google's internal teams will receive Argon without cyber guardrails.

According to Google DeepMind, Argon can autonomously find, validate and fix critical software vulnerabilities.

At Wiz, the model discovered a critical vulnerability in health software used by hospitals.

On CWE-bench v1, which evaluates vulnerability fixing, Argon shares first place with 68%.

The flaw carries the identifier CVE-2026-65669, a privilege escalation that Microsoft classifies as critical.

Copilot runs its queries with the privileges of the connected user, including sysadmin.

Via a malicious constitution planted by a db_owner, a demo adds the attacker to the sysadmin role.

The peaks of July 24 and 25 count 16,000 requests from more than 4,000 users, attempts not necessarily successful.

A core of the activity is attributed by OpenAI to people associated with Moonshot AI, the developer of Kimi.

A path allowing the encrypted reasoning of another user to be replayed to recover its content was closed.

The advisory AA26-251A, published on 8 September 2026, mentions billions of tokens extracted from American models.

The campaigns did not steal the model weights: they went through APIs, subscriptions and proxies.

Anthropic reports around 24,000 fraudulent accounts and more than 16 million exchanges in campaigns it attributes.

According to the author, account-by-account defenses are ineffective against a campaign spread across providers.