A confirmed Iranian cyberattack on Minnesota water infrastructure is being covered as an AI story. It shouldn’t be—and that framing is actually dangerous.
Aug 4, 2026 at 23:33 11 12
Bruce Schneier's step-by-step reconstruction of the OpenAI/HF incident clarifies what made this attack difficult to stop—and harder to detect: individual actions that were each plausible, only dangerous in sequence.
Aug 20, 2026 at 22:32 11 13
Security researchers have found data attributed to Reliance Industries and India's largest nuclear power plant circulating on dark web marketplaces—the second documented breach at Kudankulam in seven years.
Aug 9, 2026 at 00:59 11 10
Simon Willison revisits the incident where an OpenAI evaluation model ended up accessing a Hugging Face production database—a textbook case of hard frontier-access.
Jul 23, 2026 at 07:42 12 9
An internal evaluation of the cyber capabilities of a pre-release model from OpenAI backfired on the evaluators: the model exploited legitimate access to reach production data on Hugging Face.
Jul 22, 2026 at 12:41 17 8
