Safety news

New models, new publications, and regulation and policy, from the sources we watch.

New models 8

2026-10-15 · Muse Spark Open 816B-A42B · Meta · Superintelligence Scaling Framework
2026-10-15 · GPT-Live-1.1 Quip · OpenAI · Preparedness Framework
2026-10-15 · GPT-Live-1.1 · OpenAI · Preparedness Framework
2026-10-12 · Muse Wonder Full · Meta · Superintelligence Scaling Framework
2026-10-12 · Muse Wonder · Meta · Superintelligence Scaling Framework
2026-10-07 · Claude Haiku 5.5 · Anthropic · Responsible Scaling Policy (RSP)
2026-09-29 · GPT-6.1 Sol · OpenAI · Preparedness Framework
2026-09-28 · Claude Sonnet 5.5 · Anthropic · Responsible Scaling Policy (RSP)

Publications 79

2026-10-22 · Harmful Responses Are Jailbreak Templates: Transferring Autoregressive Jailbreaks to Diffusion Language Models · arXiv
2026-10-22 · From Clinical Judgment to Checkable Rules: Clinician-Led Guardrails for Mental-Health Chatbots · arXiv
2026-10-22 · Diffusion Language Models for Perplexity-Aware Black-Box Attacks · arXiv
2026-10-21 · WRDO: Weighted Refusal Direction Optimization in Aligned Language Models · arXiv
2026-10-21 · Prompt Injection Through Forensic Evidence: A Taxonomy and Proof of Concept of Anti-Forensic Attacks on LLM-Assisted Digital Investigations · arXiv
2026-10-21 · Beyond Binary Labels: Diagnostic Evaluation of LLM Safety with Prompt-Level Rubrics · arXiv
2026-10-20 · A Unified Attack Framework against Statistical Generative Watermarks for Large Language Models · arXiv
2026-10-19 · Whose Credential Is It? How Owner Attribution in Agent MemoryShapes Cross-User Account Misuse · arXiv
2026-10-19 · When Safety Fails Collectively: Robust Alignment Against Harmful Fine-Tuning via Joint Weight Perturbations · arXiv
2026-10-19 · Towards Architectural-Level Safety Control: Relocating Hazardous Knowledge into Removable Experts in Mixture-of-Experts Models · arXiv
2026-10-19 · Secure Agentic Coding through Counterexample-Grounded Feedback · arXiv
2026-10-19 · Safety Offset Learning: When Benign Fine-Tuning Misaligns LLMs · arXiv
2026-10-19 · Rethinking LLM Fine-Tuning via Weight Space Reparameterization: Preserving Safety during Downstream Adaptation · arXiv
2026-10-19 · No Matter Who You Are: Addressivity and Sycophancy in Large Language Models · arXiv
2026-10-19 · LLMs Prompted for Legal Context Refuse More: Overrefusal from Small On-Premises LLMs in Criminal Legal Context · arXiv
2026-10-19 · Fake News, Real Crashes: Information Injection Attacks on LLM Financial Trading Agents · arXiv
2026-10-19 · Concerns in Benchmarking Jailbreaks: An Empirical Study of Attack Success Rates · arXiv
2026-10-19 · Budgeted Attack Scheduling for LLM Red-Teaming: The Roles of Static Priors, Semantic Guidance, and Online Feedback · arXiv
2026-10-19 · Beyond Attack Success Rate: Cost-Aware Metric for Evaluating Iterative LLM Jailbreaks · arXiv
2026-10-15 · When Reasoning Is Not Enough: Proactive Inquiry for Cross-Modal Safety in Multimodal Large Language Models · arXiv
2026-10-15 · Shortcut Sensitivity in Agent-Safety Evaluations · arXiv
2026-10-15 · Evaluation Awareness Beyond English: Do LLMs Act Differently When Tested in Indic Languages? · arXiv
2026-10-15 · ContextLift: Breaking the Spurious Correlation Behind Conditional Emergent Misalignment · arXiv
2026-10-15 · CAT-alyzing Honesty: Continuous Adversarial Training for Transferable LLM Honesty · arXiv
2026-10-14 · Safe-FCL: Continual Risk Awareness and Fine-Grained Safety Aggregation for Federated Continual Learning of LLMs · arXiv
2026-10-14 · Moral Combat: Exploiting Moral Foundations Theory to Jailbreak LLMs · arXiv
2026-10-14 · Model vs. User: Whose Values Prevail? Inference-Time Value Alignment in Multi-Turn Conversations · arXiv
2026-10-14 · DANGERLENS: Probing Dangerous Representations Hidden by Safety Alignment · arXiv
2026-10-14 · Are You Reading the Right Thing? Rethinking Internal Signals for Prompt-Injection Detection · arXiv
2026-10-14 · AgentSafeEvo: Adversarial Co-Evolution for LLM Agent Safety · arXiv
2026-10-13 · Safety for Whom? Benchmarking Understanding Beyond Refusal in Egocentric Multimodal Assistants · arXiv
2026-10-13 · Efficient Safety Guardrails through Latent Dual-Hypothesis Reasoning with On-Demand Trace Reconstruction · arXiv
2026-10-13 · CompanionSafe: From Multi-turn Safety Evaluation to Guardrails for AI Companions · arXiv
2026-10-13 · Claim Framing as a Driver of LLM Sycophancy · arXiv
2026-10-07 · SafeEvo: Deciphering the Safety Alignment Mechanism and Evolution in Language Models · arXiv
2026-10-07 · Package Hallucination Attacks on Coding Agents through Prompt Injection in Rule Files · arXiv
2026-10-07 · From Expected Harmfulness to Likelihood: A Probabilistic Reformulation of Jailbreaking LLM Agents · arXiv
2026-10-07 · Adversarial Images Hijack Web Agents from Visual Grounding to Browser Execution · arXiv
2026-10-07 · AI Safety Considerations for Agents With Limited Time to Act · arXiv
2026-10-06 · Transferable Spatial Temporal Coherence Adversarial Attack on Black-Box Vision Language Models for Autonomous Driving · arXiv
2026-10-06 · The Model Plants the Trigger: Answer-Side Backdoor Attacks in Multi-Turn Large Language Models · arXiv
2026-10-06 · Reading, Not Manipulating: Leveraging Router Logits for Multimodal Safety in MoE Vision-Language Models · arXiv
2026-10-06 · ASCENT: First-Order Optimal Fine-Tuning with Recalibration for Safety--Utility Co-Enhancement · arXiv
2026-10-05 · Visual Grounding Safety in Vision-Language Models · arXiv
2026-10-05 · Reward Stealing Attack on Large Language Models · arXiv
2026-10-05 · Benchmarking Jailbreak Guardrails for Embodied Agents · arXiv
2026-10-05 · Before Agent Tells The Lie: Has Deception Already Been Represented? · arXiv
2026-10-05 · AgentPrivArena: Evaluating and Auditing Real-world AI Agent Privacy · arXiv
2026-10-01 · OpenMTB-Audit: Exposing Over-Refusal and Clinical Expert Perspectives in LLM-Based Molecular Tumor Board Safety Evaluation · arXiv
2026-10-01 · MOMAT: Mixture of Multiple Atlases for Low-Power Jailbreak Defense of Quantized LLMs · arXiv
2026-10-01 · High-quality Data Do not Mean Safe! Poisoning LLMs after Data Selection · arXiv
2026-09-30 · Who Verifies the Graph? Misspecification Attacks on Causal Action Verification for Language Agents · arXiv
2026-09-30 · Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets · arXiv
2026-09-30 · SteerProbe: Learning to Bypass Safety Steering in Vision-Language Models · arXiv
2026-09-30 · Speculative Safety Honeypot: Toward Proactive Defense Against Multi-turn Agent Attacks · arXiv
2026-09-30 · SceneJail: Exploiting Video Scenario Context to Jailbreak Multimodal LLMs · arXiv
2026-09-30 · Safety of Latent Communication in Multi-Agent Systems · arXiv
2026-09-30 · Faithful Dual-constrained Erasure for Robust LLM Safety Alignment · arXiv
2026-09-30 · CodeMimicry: Exploiting Safety Generalization Lag in Large Language Models via Structured Code Completion · arXiv
2026-09-30 · CATCH: A Controllable Analysis Testbed for Reward Hacking in Coding RL · arXiv
2026-09-29 · pikit: A Composable Toolkit for Indirect Prompt Injection Research and Evaluation · arXiv
2026-09-29 · actr: aligning thoughts and responses for multilingual safety in reasoning llms · arXiv
2026-09-29 · Where Do LLMs Decide to Break the Rules? Mechanistic Localization of Prompt Injection Compliance · arXiv
2026-09-29 · The Unequal Influence of Bad Advice: Using Training Data Attribution to Modulate Emergent Misalignment · arXiv
2026-09-29 · Safer Content or Firmer Refusals? A Hybrid Perturbation Defense for Alignment under Harmful Fine-tuning · arXiv
2026-09-29 · Does the Unsafe Gradient Survive a Conversation? On the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue · arXiv
2026-09-29 · Controlled Decoding Attacks on Black-Box LLMs · arXiv
2026-09-29 · Can Vision-Language Models Stay Helpful When Facing Implicit Risks? Intent-Privilege OPSD for Efficient Safety-Helpfulness Alignment · arXiv

Regulation and policy in the news 7

2026-10-17 · South Korean Regulators Confirm AI Agent Breached 16 Banks and Lenders - Startup Fortune · startupfortune.com
2026-10-17 · Disney offers $20M to AI company facing bankruptcy, lawsuits claiming its chatbot encouraged kids to hurt themselves · finance.yahoo.com
2026-10-12 · AI less regulated than milk, Microsoft president says in warning over safety · The Guardian
2026-10-11 · Character.AI chatbots promoted self-harm, harmful dieting, lawsuit alleges · storyboard18.com
2026-10-09 · Kentucky files unredacted lawsuit against Character.AI · ua.news
2026-10-01 · AI agents could leave commercial losses between insurance policies · insurancebusinessmag.com
2026-09-29 · AI Quarterly | A Review of AI Law, Policy & Practice | 2026 Q3 | JD Supra · jdsupra.com

An item is listed because its source published it, with the date we hold; this is not a finding about it. Window: since 2026-09-26.

From Anthropic, Anthropic alignment, FAR.AI, Google AI, Google DeepMind, Google DeepMind safety, GreyNoise, Hugging Face, LessWrong, METR, OpenAI, Redwood Research, Schneier on Security, UK AI Security Institute, Zenity Labs, arXiv (safety). An item is listed only when its title names AI and also a safety, risk or policy matter, by a fixed keyword list; a title that only names the field ("AI safety") is not enough.

Agency publications themselves are on the Regulation tab; this lists press coverage. Selected by a fixed keyword rule on headlines from the news sources we watch, plus Cyberspace Administration of China. The match is mechanical and unreviewed.