The Briefing

What happened, why it matters, and what to do about it. Analysis, not rewritten press releases.

Showing 613 to 636 of 654 briefings

Tuesday 25 August

A large dark control panel densely filled with rows of identical unlit indicator lamps receding into shadow, with only two lamps glowing amber. In the dark right the text: ten feeds, two saw it coming, arXiv 2608.21471, 54 real attacks measured.

AI Security25 Aug 2026

A government-conference study measured ten OSINT feeds against 54 real attacks. Two sources cover 92.6% of them, and the feeds everyone calls canonical are mostly noise

You are probably paying for redundancy and for feeds doing a job you did not need. The value is in which two, not how many.

Monday 24 August

Editorial hero for the uk-generator-iran-attribution-and-the-plc-pattern briefing.

AI Security24 Aug 2026

Iran shut a UK power plant, said the headlines. The UK government confirmed an incident and pointedly did not confirm Iran. The real story is exposed PLCs

The specific attribution runs ahead of the evidence. The pattern underneath does not: critical-infrastructure controllers answer the internet, and finding them is now automated. The fix is the same whoever is behind it.

Editorial hero for the reliaquest-vishing-device-trust-held briefing.

AI Security24 Aug 2026

A security firm got phished and the attacker approved MFA. Device trust is why nothing was stolen. That is the whole case for it, in one incident

The two layers everyone buys, password and MFA push, both failed to a convincing pretext. The layer that does not trust the human held. Contained, not prevented.

AI Security24 Aug 2026

Taiwan indicted nine over AI-server smuggling to China, including an Nvidia manager. The export controls were not hacked, they were lied to on a form

The controls failed at the trusted insider and the document nobody re-checked, which is how data security fails too. A control that depends on one honest person is a hope, not a control.

Editorial hero for the keycloak-reset-credentials-bypass-cve-2026-18963 briefing.

AI Security24 Aug 2026

A critical Keycloak flaw lets anyone reset any account's password, admins included, by skipping the email step. CVSS 9.1, patch is out

No phishing, no token theft. A crafted request skips the checkpoint and resets any account. Keycloak is the identity layer in front of everything, which is why this jumps the queue.

Editorial hero for the quantization-you-may-not-get-the-model-you-paid-for briefing.

AI Security24 Aug 2026

The DeepSeek or Claude you bought through a reseller may be quantized down. Same name, same price, a measurably worse model, and nothing on the endpoint says so

You may be paying for a full model and receiving a compressed copy. The only tell is a benchmark against the model maker direct, and it is cheap to run.

A battered brown cardboard parcel on a dark studio background, its top buried under many overlapping blank white shipping labels stacked and peeling, showing it has been relabelled and forwarded many times. Text in the dark right reads: you pay one hop, you inherit seven, LLM API reseller supply chain, arXiv 2608.20732.

AI Security24 Aug 2026

You buy model access from one reseller. Your prompt can pass through seven you were never told about, and a timing trick just proved it

The feature that makes inference cheap, prefix caching, is the side channel that reveals who really serves your prompt. Two resellers can be one basket in two coats.

Sunday 23 August

A heavy steel bank-vault door with a wheel lock and thick hinges, standing slightly ajar in a dark concrete chamber, cold cyan light spilling from the gap where it has not fully closed. Text in the dark right reads: the last door is the open one, Guidelight AI control assessment, August 2026.

AI Security23 Aug 2026

Five frontier labs were graded on containing a rogue model. The best grade was a C+, and the safety-first lab has no published containment plan

The headline was that the safety-first lab scored zero. That is one cell of thirty. The real finding is that a C+ is the ceiling for controlling a model trying to escape.

Saturday 22 August

A single white beam of light entering a glass prism on a dark laboratory stand and splitting into three diverging beams, one cyan, one amber, one red, against a near-black background. Text in the dark right reads: one score in, three answers out, arXiv 2608.05086, UK AI Security Institute.

AI Security22 Aug 2026

A UK government study ran 192 models through 8 safety benchmarks. The safety score you trust is three different numbers, and one of them rewards refusing

A model can raise its safety score simply by refusing more. Ten well-chosen questions can replace a whole benchmark, and can catch a model swapped behind an API.

Friday 21 August

A macro image of a square silicon chip covered in a fine gold microelectrode grid, with a translucent pinkish film of living cultured brain cells spread across it, faint branching filaments glowing warm amber against the cool cyan-lit chip edge and a black background. In the dark lower right, the line: a computer made of living cells, no regulator cleanly owns it.

AI Security21 Aug 2026

Singapore unveiled a data centre made of living human neurons. It is lower power only if you measure the cell and not the box, and no regulator cleanly owns it

A CL1 unit draws up to 1,000 watts, most of it keeping cells alive. The efficiency case is about the neuron. A data centre pays for the box.

A heavy dark metal storage drawer pulled open in near darkness, its interior an empty black space, a warm brass rail catching the light along its runner. In the dark lower right, the line: your data, your cloud, still read either way.

AI Security21 Aug 2026

Anthropic will let enterprises keep their AI data on their own cloud. The 30-day retention it fought pushback over does not go away, it moves

Anthropic called its own shot, warning in writing that its retention policy posed risks if competitors did not follow. Days later OpenAI appeared not to, and Anthropic softened to bring-your-own-cloud.

A robotic gripper arm in cool metal, lit by cyan light, lifting one rusted antique skeleton key from a wooden tray holding a row of similar old keys, against a near-black background. In the dark right of the frame, white text reads: the AI is new, the exploits are not. Below it, UAT-10147, oldest bug 2010.

AI Security21 Aug 2026

A crew used AI to run intrusions across 170,000 targets. Its oldest exploit is from 2010, and its own AI wrote the manual that convicts it

The AI did not make this actor more capable, it made them more organised. Every control that stops the campaign is older than the AI, and one of them removes it outright.

Page 53

Thursday 20 August

AI Security20 Aug 2026

OpenAI says Zero Data Retention survives its new safety monitoring. It guarantees that no human looks, not that nothing reads

The outbound alert carries category and severity only. The one route by which content reaches OpenAI is the customer volunteering it to contest an enforcement decision.

A dark navy chart headed The rule says 60 days, it says it twice. Two cyan outlined bars each labelled 60 days run consecutively, the first from associate to covered entity and the second from covered entity to you. Beneath them a longer red bar reads 131 days actually elapsed. A timeline below marks 16 March discovery, 24 June data determined, and 25 July letters.

AI Security20 Aug 2026

CareCloud's breach reached 3.75 million people and took 131 days to reach them. The rule it was measured against sets 60 days twice

Discovery on 16 March, data determined on 24 June, letters from 25 July. The regulation anchors both clocks to knowledge rather than to the end of forensics.

Wednesday 19 August

AI Security19 Aug 2026

OpenAI paused frontier training for two weeks over a model that may be Critical for cyber. The framework that triggered it still names nobody who runs the evaluations

Monitoring now costs roughly 20% of the inference compute it watches. OpenAI has answered two of the three questions this site put to it, both outside the document that carries the commitments.

An illustration on a deep navy ground. On the left, a dark terminal window with an amber outlined command line reading curl minus X PUT minus minus data dash binary at dash. A glowing amber bar leaves the window and breaks into four separate cubes, labelled upload id, chunk index and total chunks, flowing toward a loose grid of six identical empty cyan outlined rectangles on the right, labelled 31 domains one registrar and none registered in 2026. A caption under the terminal reads staged archive split into chunks.

AI Security19 Aug 2026

Microsoft says MacSync Stealer rotates domains too fast to block. All 31 in its own list share one registrar and none was registered this year

Rotation and registration are different activities. Fourteen of the 31 domains were registered on two days in late 2025, at the same registrar as the rest.

Tuesday 18 August

An illustration on a deep navy ground. On the left, a glassy browser window whose address bar reads copilot dot microsoft dot com slash question mark q equals, followed by an ampersand and autorun equals 1 picked out in amber, above greyed placeholder lines and an empty box reading Message Copilot. A glowing amber ribbon streams out of the window from left to right, carrying three lit tiles bearing an envelope, a calendar and a document, labelled connected apps read with granted access. The ribbon ends at a glowing cyan outlined capsule of joined circles labelled attacker endpoint. A caption under the window reads prompt fires on page load.

AI Security18 Aug 2026

Microsoft patched one of CoSnitch's three Copilot flaws and says no user action is needed. The memory the other two wrote survives the fix

Microsoft's advisory sets customer action required to false. That is correct about the vulnerability and wrong about the incident, and the difference is a memory entry no runbook clears.

A heavy cast-iron points lever bolted to a dark plank floor, photographed close and slightly from the side, its steel handle thrown forward through a brass collar, lit by a single cyan rim light against a black background.

AI Security18 Aug 2026

Cursor launched code hosting on the day GitHub broke for seven hours. Every synced repo still pushes to GitHub

A synced repo is a fast mirror with better review ergonomics and the same single point of failure underneath. Only repos created in Origin have no GitHub in the write path.

Monday 17 August

A row of small round indicator lamps set into a dark brushed metal control panel, most of them unlit and one glowing amber, macro close-up at a shallow angle with a cyan edge light running along the top of the panel.

AI Security17 Aug 2026

GitHub was degraded for seven hours across five services. Its status page posted 37 updates and named a cause in none of them

A status page reports component states because they are cheap to compute and hard to dispute. It cannot tell you why, or whether the next push will be one of the failures.

A brass pipe T-junction with one branch sealed by a blank cap, macro close-up against dark industrial pipework, the pipes edge-lit in cyan and the capped branch catching crimson light.

Threat Intel17 Aug 2026

Four CVEs let agent tools run without the model running at all. The guardrails were not bypassed, they were never asked

Black Hat 2026 research with four identifiers, one unpatched open-source path AWS has assigned to the customer, and the reason prompt hardening measured the wrong component.

A precision dial indicator gauge on a metal stand, its plain white face carrying no numerals and its needle resting at rest, macro close-up on an empty dark workbench, rimmed in cyan and crimson light.

AI Security17 Aug 2026

OpenAI dissolved the team that measured catastrophic risk. Its published framework never mentioned that team, so nothing on paper changed

The commitments still stand and no promise was broken. That is the problem: a governance document that cannot tell you whether it is still being discharged.

A slender steel lock pick lying diagonally across the closed brass shackle of a padlock, macro close-up on a near-black surface, the pick edge-lit in cyan and a small crimson highlight on the lock body.

AI Security17 Aug 2026

GLM-5.3 beat Anthropic at finding bugs by 0.7 points. Z.ai's own table shows it losing the exploit benchmark by 23.6

GLM-5.3 leads CyberGym by 0.7 points and trails ExploitBench by 23.6. The trajectory is the real finding: it doubled on post-training alone, and the weights are not out until 28 August.

An industrial toggle switch with a knurled metal bezel set into a dark brushed panel, thrown to one side, macro close-up, with a small unlit indicator pin beside it and a cyan edge light down the left of the panel.

AI Security17 Aug 2026

Anthropic ran 133 million contractor exchanges with its biological filters off. The same flag switched off the logging

Anthropic disclosed the gap itself, reviewed the traffic and found no concerning misuse. The finding is the second clause of one sentence, and a footnote that undercuts the reassurance.

Friday 14 August

A recessed circular power button ringed in crimson light on the dark brushed-metal front panel of a rack-mounted server, macro close-up, with a cyan edge light down the left side of the chassis.

Threat Intel14 Aug 2026

An Akira affiliate rebooted a host into Safe Mode to blind EDR. Defender named the ransomware and could not remove it for 28 minutes

Huntress documents the first Akira use of Safe Mode boot. The full technique chain contains no exploit at all, the encryptor starved of virtual memory and failed, and the victim is still extortable.

Show 12 more