The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 169 to 182 of 182 briefings

Tuesday 18 August

A heavy cast-iron points lever bolted to a dark plank floor, photographed close and slightly from the side, its steel handle thrown forward through a brass collar, lit by a single cyan rim light against a black background.

AI Security18 Aug 2026

Cursor launched code hosting on the day GitHub broke for seven hours. Every synced repo still pushes to GitHub

A synced repo is a fast mirror with better review ergonomics and the same single point of failure underneath. Only repos created in Origin have no GitHub in the write path.

Monday 17 August

A row of small round indicator lamps set into a dark brushed metal control panel, most of them unlit and one glowing amber, macro close-up at a shallow angle with a cyan edge light running along the top of the panel.

AI Security17 Aug 2026

GitHub was degraded for seven hours across five services. Its status page posted 37 updates and named a cause in none of them

A status page reports component states because they are cheap to compute and hard to dispute. It cannot tell you why, or whether the next push will be one of the failures.

A precision dial indicator gauge on a metal stand, its plain white face carrying no numerals and its needle resting at rest, macro close-up on an empty dark workbench, rimmed in cyan and crimson light.

AI Security17 Aug 2026

OpenAI dissolved the team that measured catastrophic risk. Its published framework never mentioned that team, so nothing on paper changed

The commitments still stand and no promise was broken. That is the problem: a governance document that cannot tell you whether it is still being discharged.

A slender steel lock pick lying diagonally across the closed brass shackle of a padlock, macro close-up on a near-black surface, the pick edge-lit in cyan and a small crimson highlight on the lock body.

AI Security17 Aug 2026

GLM-5.3 beat Anthropic at finding bugs by 0.7 points. Z.ai's own table shows it losing the exploit benchmark by 23.6

GLM-5.3 leads CyberGym by 0.7 points and trails ExploitBench by 23.6. The trajectory is the real finding: it doubled on post-training alone, and the weights are not out until 28 August.

An industrial toggle switch with a knurled metal bezel set into a dark brushed panel, thrown to one side, macro close-up, with a small unlit indicator pin beside it and a cyan edge light down the left of the panel.

AI Security17 Aug 2026

Anthropic ran 133 million contractor exchanges with its biological filters off. The same flag switched off the logging

Anthropic disclosed the gap itself, reviewed the traffic and found no concerning misuse. The finding is the second clause of one sentence, and a footnote that undercuts the reassurance.

Wednesday 12 August

A glossy black sphere with two small white eye shapes, the Grok Bot mark rendered as an object, on a near-black field. Overlaid: the words It signs in as you, and three figures, 9 replies sent with nobody reading them, 0 separate identities to revoke, $200 a month with no data loss prevention at that tier.

AI Security12 Aug 2026

xAI launches Grok Bot at $200 a month. It signs in as you, so your audit log will say you did it

xAI's agents sign into your tools with your own login and hand work to each other with no human step. Every action lands under your account, and the containment controls are not on the tiers you can buy.

Tuesday 11 August

A knurled metal control dial on a dark instrument panel, turned hard over against its end stop, ringed in cyan light with a single red indicator lit beside it.

AI Security11 Aug 2026

OpenAI's cyber model completes 95% of exploit requests. Removing the safeguards got 2%

Daybreak Blue, Daybreak Red and GPT-5.6-Cyber. The published completion rates say more about AI assurance than the announcement does.

A cellular antenna unit mounted on a mast, seen from below against a near-black night sky, edge-lit in cyan with a single red status light on the housing.

AI Security11 Aug 2026

An AI agent found 84 flaws in 5G core software. Twenty-three still have no fix

84 flaws, 81 CVEs, 23 with no patch. The number nobody leads with is the one that matters, and private 5G networks are where it lands.

Monday 3 August

Translucent glass price plates suspended at conflicting angles in dark space, edge-lit in cyan and violet

AI Security3 Aug 2026

I checked five LLM cost calculators against the published rates

Two of five price Claude Opus at 3x the real rate. All five miss the tokenizer change that makes their token counts about 30% low on current Claude models.

Dark empty text field with a single glowing cursor and threads of cyan light streaming away out of frame

AI Security3 Aug 2026

Your token counter may be reading your prompt

One popular token counter posts your text to its server on every keystroke. Another promises no tracking while loading an analytics script. Here is how to check for yourself.

Dense field of small glowing rectangular blocks in rows receding into darkness, lit in cyan and violet

AI Security3 Aug 2026

Four reasons your Claude bill does not match the calculator

A price rise in four weeks, cache writes charged above input rate, stacking multipliers, and a tokenizer change that quietly invalidates every character-based estimate.

Tuesday 21 July

Dark browser panes with cyan data ribbons reaching toward a floating key lit in violet

AI Security21 Jul 2026

Agentic browsers widen the prompt injection attack surface

Brave broke Perplexity Comet twice after it was declared fixed, then repeated the attack against three more agents. The vendors are not losing a patching race; the architecture composes trusted instructions with untrusted content in one context window.

Page 16

Tuesday 21 July

AI Security21 Jul 2026

Model context protocols are quietly extending the enterprise perimeter

A poisoned tool description is a prompt injection that ships once and fires on every invocation, for every user, in every session. It is the same root cause as the browser attacks, with persistence added.

AI Security21 Jul 2026

58% of executives have had an AI incident. Nearly all are confident

Executive confidence in AI use is not correlated with anything measured. The organisations that had an incident and the ones that feel fine are largely the same organisations, because neither has an inventory.

That is every briefing in this category