The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 613 to 624 of 654 briefings

Tuesday 25 August

A large dark control panel densely filled with rows of identical unlit indicator lamps receding into shadow, with only two lamps glowing amber. In the dark right the text: ten feeds, two saw it coming, arXiv 2608.21471, 54 real attacks measured.

AI Security25 Aug 2026

A government-conference study measured ten OSINT feeds against 54 real attacks. Two sources cover 92.6% of them, and the feeds everyone calls canonical are mostly noise

You are probably paying for redundancy and for feeds doing a job you did not need. The value is in which two, not how many.

Monday 24 August

Editorial hero for the uk-generator-iran-attribution-and-the-plc-pattern briefing.

AI Security24 Aug 2026

Iran shut a UK power plant, said the headlines. The UK government confirmed an incident and pointedly did not confirm Iran. The real story is exposed PLCs

The specific attribution runs ahead of the evidence. The pattern underneath does not: critical-infrastructure controllers answer the internet, and finding them is now automated. The fix is the same whoever is behind it.

Editorial hero for the reliaquest-vishing-device-trust-held briefing.

AI Security24 Aug 2026

A security firm got phished and the attacker approved MFA. Device trust is why nothing was stolen. That is the whole case for it, in one incident

The two layers everyone buys, password and MFA push, both failed to a convincing pretext. The layer that does not trust the human held. Contained, not prevented.

AI Security24 Aug 2026

Taiwan indicted nine over AI-server smuggling to China, including an Nvidia manager. The export controls were not hacked, they were lied to on a form

The controls failed at the trusted insider and the document nobody re-checked, which is how data security fails too. A control that depends on one honest person is a hope, not a control.

Editorial hero for the keycloak-reset-credentials-bypass-cve-2026-18963 briefing.

AI Security24 Aug 2026

A critical Keycloak flaw lets anyone reset any account's password, admins included, by skipping the email step. CVSS 9.1, patch is out

No phishing, no token theft. A crafted request skips the checkpoint and resets any account. Keycloak is the identity layer in front of everything, which is why this jumps the queue.

Editorial hero for the quantization-you-may-not-get-the-model-you-paid-for briefing.

AI Security24 Aug 2026

The DeepSeek or Claude you bought through a reseller may be quantized down. Same name, same price, a measurably worse model, and nothing on the endpoint says so

You may be paying for a full model and receiving a compressed copy. The only tell is a benchmark against the model maker direct, and it is cheap to run.

A battered brown cardboard parcel on a dark studio background, its top buried under many overlapping blank white shipping labels stacked and peeling, showing it has been relabelled and forwarded many times. Text in the dark right reads: you pay one hop, you inherit seven, LLM API reseller supply chain, arXiv 2608.20732.

AI Security24 Aug 2026

You buy model access from one reseller. Your prompt can pass through seven you were never told about, and a timing trick just proved it

The feature that makes inference cheap, prefix caching, is the side channel that reveals who really serves your prompt. Two resellers can be one basket in two coats.

Sunday 23 August

A heavy steel bank-vault door with a wheel lock and thick hinges, standing slightly ajar in a dark concrete chamber, cold cyan light spilling from the gap where it has not fully closed. Text in the dark right reads: the last door is the open one, Guidelight AI control assessment, August 2026.

AI Security23 Aug 2026

Five frontier labs were graded on containing a rogue model. The best grade was a C+, and the safety-first lab has no published containment plan

The headline was that the safety-first lab scored zero. That is one cell of thirty. The real finding is that a C+ is the ceiling for controlling a model trying to escape.

Saturday 22 August

A single white beam of light entering a glass prism on a dark laboratory stand and splitting into three diverging beams, one cyan, one amber, one red, against a near-black background. Text in the dark right reads: one score in, three answers out, arXiv 2608.05086, UK AI Security Institute.

AI Security22 Aug 2026

A UK government study ran 192 models through 8 safety benchmarks. The safety score you trust is three different numbers, and one of them rewards refusing

A model can raise its safety score simply by refusing more. Ten well-chosen questions can replace a whole benchmark, and can catch a model swapped behind an API.

Friday 21 August

A macro image of a square silicon chip covered in a fine gold microelectrode grid, with a translucent pinkish film of living cultured brain cells spread across it, faint branching filaments glowing warm amber against the cool cyan-lit chip edge and a black background. In the dark lower right, the line: a computer made of living cells, no regulator cleanly owns it.

AI Security21 Aug 2026

Singapore unveiled a data centre made of living human neurons. It is lower power only if you measure the cell and not the box, and no regulator cleanly owns it

A CL1 unit draws up to 1,000 watts, most of it keeping cells alive. The efficiency case is about the neuron. A data centre pays for the box.

A heavy dark metal storage drawer pulled open in near darkness, its interior an empty black space, a warm brass rail catching the light along its runner. In the dark lower right, the line: your data, your cloud, still read either way.

AI Security21 Aug 2026

Anthropic will let enterprises keep their AI data on their own cloud. The 30-day retention it fought pushback over does not go away, it moves

Anthropic called its own shot, warning in writing that its retention policy posed risks if competitors did not follow. Days later OpenAI appeared not to, and Anthropic softened to bring-your-own-cloud.

A robotic gripper arm in cool metal, lit by cyan light, lifting one rusted antique skeleton key from a wooden tray holding a row of similar old keys, against a near-black background. In the dark right of the frame, white text reads: the AI is new, the exploits are not. Below it, UAT-10147, oldest bug 2010.

AI Security21 Aug 2026

A crew used AI to run intrusions across 170,000 targets. Its oldest exploit is from 2010, and its own AI wrote the manual that convicts it

The AI did not make this actor more capable, it made them more organised. Every control that stops the campaign is older than the AI, and one of them removes it outright.

Show 12 more