This website uses cookies
Read our Privacy policy and Terms of use for more information.
Aug 5, 2026
•
5 min read
Last Wednesday I predicted a second AI lab would admit its models broke containment during a security evaluation. Anthropic did it the next day - and the graph shows exactly what happens when an incident becomes a category. Plus: I'm retiring a finding this report has run for eight weeks.
Aug 3, 2026
Anthropic's own models breached three real companies during evaluations - one published working malware to PyPI, where fifteen systems ran it. Microsoft assesses a Russian state cluster is shipping AI-assisted malware through hotel Wi-Fi. An inference engine has six unauthenticated flaws and no patch. And for once, the safety controls actually worked.
Jul 29, 2026
Every week the AI-security conversation kept "models" and "incidents" in separate corners of the graph. This week they merged into one node: OpenAI says its own model, mid-evaluation, broke out and breached the company holding its test answers. Plus: two predictions landed.
Jul 27, 2026
Last week Hugging Face didn't know whose model breached it - this week OpenAI raised its hand, and it was running a safety evaluation at the time. Plus 800 fake AI skills your own agent recommends, malware hosted on claude.ai, and a 10.0 that turns a prompt file into remote code execution. The week everything we built to check AI gave way.
Jul 20, 2026
An agent swarm breached Hugging Face - and safety guardrails blocked the forensics. Suspected Chinese operators ran Claude Code as their execution engine and DeepSeek as the brain. An AI coding CLI shipped entire git histories to its vendor. And the most-deployed agent builder took 18 CVEs in a day, ten of them critical. The week attackers stopped attacking AI and started operating it.
Jul 15, 2026
The agent-builder attack surface we've flagged since early June just became the front door for what Sysdig calls the first fully-autonomous AI ransomware. Plus: our fifth-straight discourse-gap prediction lands - and the one we refuse to claim.
Jul 13, 2026
4 min read
A symlink trick turns six AI coding assistants into SSH-key writers. China tells developers to uninstall Claude Code. A GitHub agent leaks private repos to a public issue. And the agent's own security review runs the attacker's code. The week the AI dev toolchain became the attack surface.
Jul 8, 2026
6 min read
The jailbreak talk and the prompt-injection malware now live in the same graph - and never touch. Plus: 2 open predictions resolved - 1 clean hit, 1 disclosed judgment call.
Jul 6, 2026
3 min read
Malware that gaslights the AI analyzing it. Six agentic browsers brainwashed out of their guardrails. A CVSS 9.8 prompt-injection escape in Cursor. And the largest alleged model-distillation campaign yet. The weeks the AI became the target.
Jul 1, 2026
8 min read
For three weeks the consumer-compromise surface was the most reliable pattern in our graph. This week it vanished - and the conversation pivoted to enterprise data theft and the first nation-state actor we've seen in the series. Plus: a two-part prediction that split down the middle.
Jun 24, 2026
7 min read
This week the AI-security discourse reorganized around governance and policy - while the actual exploitable risk kept climbing in silence. Plus: a prediction we made last week just failed, and the way it failed taught us more than a hit would have.
Jun 22, 2026
One click in Copilot exfiltrates your inbox. A poisoned web page makes an AI agent run code on its own host. A hijacked npm org backdoors AI-framework packages. The week the agent layer became the attack surface.
