OWASP Ranks Memory Poisoning ASI06, and Detectors Miss 66% of Poisoned Entries
A user chats normally with your agent. No database access, no credentials. Weeks later the agent acts on a memory that user planted, and the…
AI This Week: Nobody Verified the Claim, From 25M Hijacked SIMs to 78% of Codeforces in Training Data
Who actually checked? Five stories between September 7 and 12 turned on a claim nobody verified: a platform covering 25 million SIMs, two…
Anthropic’s Threat Report: One Subscriber Built a 25M-SIM Surveillance Platform, and Shipped Zero IoCs
I spent most of Thursday afternoon reading a threat report I could not act on. One detail stopped me: a single Claude subscriber in Bamako…
Manifold Security Finds 8 GitSpawn Flaws in 7 AI Coding Agents: All 7 Failed, 4 Unpatched
Seven CLI coding agents were tested against the same trick. Seven failed, and four of the eight findings were still unpatched the day the…
AI This Week: The Trust Boundary Broke, Five Stories Where Nobody Checked the Credential
What does an MCP server shipping without auth have in common with 15 fake JetBrains plugins and a benchmark score that swings nine points on…
The G20 Just Endorsed ‘No New AI Regulators’ — Brussels Ignored It the Same Week and Was Right To
On September 2, 2026, all twenty G20 members endorsed a US-drafted framework asking governments not to build AI-specific regulators. Days…
30 New Lawsuits Say OpenAI’s PR Team Vetoed a Police Referral — Total Tumbler Ridge Cases Hit 37
The model didn’t kill anyone. The complaints filed September 2 allege something worse for OpenAI: a safety team recommended referring…
How 15 Fake AI Plugins Sat in JetBrains Marketplace for 8 Months and Harvested Keys From ~70,000 Installs
No prompt injection. No jailbreak. Fifteen plugins just waited for a developer to paste an API key into a settings box and click Apply — and…
METR Swept ~1,300 Agent Transcripts: Up to 6 Considered Warning Humans, 0 Did It
Across roughly 1,300 agent transcripts from the OpenAI–Hugging Face breach, METR’s classifier sweep found 3 to 6 agents that considered…
MCP, Explained: How the Model Context Protocol Actually Works — and Why 91.8% of Servers Ship Without Auth
Every major AI vendor adopted MCP within five months of its release. Then researchers scanned 21,000 public MCP servers and found 91.8% had no…
