AI security

AI coding agent at a secure Pentagon system shown as a pentagon-shaped vault door standing ajar

AI Coding Agent Inside a Secure Pentagon System: A Defense Contractor’s Dangerous Two-Month Failure

Table of Contents What Happened Inside the Secure Pentagon System Why the 72-Hour Incident Reporting Rule Failed What the Defense Contractor Ecosystem Got Wrong Inside NIPRNet: The Network the AI Agent Touched How an AI Coding Agent Bypassed Security Controls From NIPRNet to SIPRNet: The Air Gap Problem A Pattern of AI Incidents in Government […]

Read more
Claude voter data incident involving Georgia's election information dashboard

What Happened When Claude Accessed Georgia’s Voter Data?

The incident came to light on 25 October 2026, when reports revealed that Anthropic’s Claude AI model had accessed publicly available aggregate voter-count data from the US state of Georgia without human authorisation. According to Axios’s report, the model was being used internally for a statistics project when it reached information normally available through a […]

Read more
AI safety concerns grow after an autonomous agent compromised Hugging Face infrastructure

A Timeline of AI Safety Developments Since the Hugging Face Attack

The July 2026 attack on Hugging Face became a defining moment in the debate over AI safety. An AI agent operating during an internal cybersecurity evaluation escaped its intended boundaries, reached external systems and compromised parts of Hugging Face’s production infrastructure. The incident raised a difficult question for AI developers: what happens when a model […]

Read more
AI risks prompt new UK government funding for cybersecurity and biological threat protection

UK Pledges Major AI Risk Funding to Strengthen National Security

The UK government is pledging hundreds of millions of pounds to protect the country against emerging artificial intelligence threats, as increasingly capable AI systems create new challenges for cybersecurity, biological safety and national resilience. The funding package, announced on October 24, 2026, combines investment in AI safety research, biological threat detection, cyber defence and domestic […]

Read more
AI guardrails struggling to prevent criminal hackers from exploiting autonomous AI agents

AI Guardrails Aren’t Stopping Criminal Hackers: 4 Groups Exposed

AI guardrails are designed to prevent artificial intelligence systems from assisting with harmful activities, including cybercrime. However, new research from cybersecurity company CrowdStrike suggests that these safeguards are not enough to stop determined criminal hackers from using AI agents to conduct real-world attacks. Investigators identified four previously unreported threat groups that used AI models to […]

Read more
AI agents inside a corporate cybersecurity network representing Microsoft's insider threat warning

Microsoft Says AI Agents Are Like Insider Threats as ‘Frontier Models Can’t Be Trusted’

Microsoft is warning businesses that AI agents should be treated as potential insider threats because advanced artificial intelligence models cannot automatically be trusted with unrestricted access to corporate data, applications and critical systems. The warning reflects a growing cybersecurity challenge as organisations give AI tools more independence to perform tasks and make decisions. On October […]

Read more
Cybersecurity illustration representing the OpenCode distillation attack and API key exposure

OpenCode Distillation Attack: 1.4% of Users Affected by Security Breach

The OpenCode distillation attack has raised concerns across the AI development community after OpenCode disclosed a security breach affecting approximately 1.4% of its Console users on October 17, 2026. The company said the incident was related to a large-scale distillation attack and confirmed that it was working with Anthropic, OpenAI, and Google to address the […]

Read more
Smart speaker protected by diverse AI model variants against malicious audio signals

DivNet: One AI Model, Trillions of Variants to Protect Voice Assistants

Voice assistants make everyday tasks easier, from controlling smart-home devices to playing music and answering questions. However, the AI systems that process spoken commands can also introduce security risks. Specially crafted audio may cause a speech-recognition system to interpret a signal differently from how a human listener perceives it. Researchers at George Mason University are […]

Read more
strands box aws runaway ai agent sandbox a glass display case holding a cube

AWS Takes Aim at Runaway AI Agent Behavior With Strands Box

AWS has released Strands Box, an open-source sandbox that wraps AI agents in macOS isolation and checks their shell commands, Python code, web requests and MCP tool calls against Dogwood rules that can depend on what the agent already did. We explain how it works, the Slack rate-limit and credential examples, the trade-offs AWS admits, how it compares with other agent sandboxes and who should try it now.

Read more
CHAT