disclosure

SpaceX will announce news via its X account instead of newswires, as disclosed in an SEC filing, with the X account and investor page as official channels.

The article argues that real-life disclosure of alien life would likely be a gradual, scientific process akin to the Higgs boson discovery rather than the dramatic cinematic reveal depicted in Steven Spielberg's new movie, citing recent UAP hearings and the lack of conclusive evidence.

Microsoft fixed a 0-day vulnerability disclosed by researcher Nightmare Eclipse amid a heated rivalry, alongside other vulnerabilities like MiniPlasma, YellowKey, and others. The researcher published exploit code for a new Windows Defender vulnerability.

This paper introduces RealityTest, a multimodal, multilingual benchmark to evaluate whether AI systems disclose their identity when probed by users, based on real human queries collected across 49 countries. It finds that only 31% of people ask directly about identity, and that human questions are more diverse than synthetic ones, revealing that phrasing and context matter more for disclosure than the specific model.

A researcher discovered a 1-click remote code execution vulnerability in PewDiePie's Odysseus Chat and is submitting a PR to fix it.

This position paper argues that in long-horizon LLM agent tasks, the execution harness often determines performance more than the model itself, and current benchmarks misattribute harness-level gains to model improvements. It proposes a harness-aware evaluation framework with disclosure standards and variance decomposition protocols.

A report on three serious Linux local privilege escalation vulnerabilities discovered in May 2026, highlighting breakdowns in the disclosure model and implications for production environments.

The article argues that AI agents recommending products for profit must clearly disclose these financial incentives to maintain user trust and distinguish recommendations from advertisements.

The article raises design and ethical questions about what information AI agents should disclose when recommending products or services, including business partnerships, ranking criteria, and affiliate relationships, drawing parallels with traditional online advertising transparency patterns.

AI is disrupting traditional vulnerability disclosure cultures (coordinated disclosure vs. bugs-are-bugs) by accelerating the detection and exploitation of security flaws, making long embargoes less effective and forcing a need for faster, AI-assisted responses.

Security researcher Lachlan discovered and reported a critical remote code execution vulnerability dubbed "React2Shell" in React's Server Components protocol to Meta on November 30, 2025. Meta released a fix and public advisory (CVE-2025-55182) on December 3, urging developers to update immediately as the vulnerability affected millions of websites built with React/Next.js.