OpenAI's new guide covers choosing GPT-6 models, adjusting reasoning effort, and improving prompts and skills. It also discusses tool coordination and preparing workflows for production, giving teams a framework for moving from model selection to deployment.
Dell has released security updates for critical flaws in its Container Storage Modules that could enable unauthenticated administrative access and root access on Kubernetes nodes. The reported issues include a missing-authentication vulnerability in the authorization storage gRPC server rated CVSS 10.0, making affected storage integrations a priority for review.
The China-linked Warlock ransomware group exploited SharePoint vulnerabilities to gain initial access to a water utility, a telecom provider, a regional government body, and a university. The reported attacks highlight exposed collaboration software as an entry point into organizations across multiple sectors.
An analysis covered by InfoQ argues that AI agents can combine public clues about software vulnerabilities into working exploits, weakening traditional disclosure embargoes. It calls for faster patching and release processes as the window between disclosure and exploitation shrinks.
Apple says it will add controls around macOS Full Disk Access as increasingly capable AI agents raise the risks of broad file permissions. The permission can expose files, messages, mail, and browsing history, making access boundaries a practical concern for developers building desktop agents.