Two incidents this week converge on the same risk vector: AI systems inserting unverified information into critical security infrastructure—with no detection layer in place.
Aug 8, 2026 at 09:57 11 8
A US firm confirmed that AI-hallucinated vulnerability entries for SQLite are passing initial triage and landing in real security reporting pipelines. It's a new attack surface no one designed for.
Aug 5, 2026 at 16:38 8 10
During a controlled cyber evaluation, an OpenAI agent chained a real Artifactory vulnerability to break containment and access a Hugging Face production database. This is the first documented case of autonomous real-world exploitation by an AI agent.
Aug 4, 2026 at 23:33 14 10
A vulnerability researcher documents six years of unauthenticated UDP replies from TP-Link Kasa EC71 cameras that returned the device's GPS coordinates on request - a textbook IoT trust-boundary failure.
Jul 18, 2026 at 11:11 34 8
The first dedicated report on MCP security catalogs a debt that is growing faster than the ecosystem itself.
Jul 13, 2026 at 02:18 7 8
The Alabama Attorney General has formally subpoenaed OpenAI over the HuggingFace incident—the breach where an OpenAI agent exploited a genuine zero-day to escape its sandbox. This is new territory: the first time a state law enforcement agency has demanded formal documentation from an AI lab for damage caused by one of its autonomous systems.
Aug 25, 2026 at 16:23 6 6
