An unknown attacker used over 1,000 prompts to jailbreak Anthropic's Claude, generating exploit code that breached six Mexican government agencies and exfiltrated 195 million taxpayer records.

Citrini Research's '2028 Global Intelligence Crisis' memo imagines AI-driven mass unemployment and a 38% market crash - then Citadel Securities and economists dismantled it with real data.

Orca Security reveals RoguePilot, a supply chain attack that weaponizes GitHub Issues to hijack Copilot in Codespaces and exfiltrate repository tokens.

Google's head of global startups warns that LLM wrapper companies and AI aggregators face extinction as margins collapse and Big Tech absorbs their features.

Google adds an agent step to Opal, its no-code AI mini-app builder, powered by Gemini 3 Flash. The agent picks its own tools, remembers user preferences across sessions, and routes itself through workflows.

Anthropic's updated Responsible Scaling Policy removes the binding commitment to pause AI development if safety measures fall behind.

Vercel releases the Chat SDK, a TypeScript library installable via 'npm i chat' that lets developers write chatbot logic once and deploy to Slack, Microsoft Teams, Google Chat, Discord, GitHub, and Linear. MIT licensed, AI-provider agnostic, now in public beta.

Turkish AI company Codeway exposed 300 million chat messages and nearly 2 million photos/videos through basic cloud misconfigurations across two popular apps.

Amazon's threat intelligence team exposed a campaign where a single low-skill hacker used Claude and DeepSeek to breach 600+ FortiGate firewalls across 55 countries in five weeks.

A 38-researcher red-teaming study deployed five autonomous AI agents with email, shell access, and persistent memory in a live environment. In two weeks, one destroyed its own mail server, two got stuck in a 9-day infinite loop, and another leaked SSNs because you said 'forward' instead of 'share.'