Power plays in AI and cybersecurity: Best infosec long reads 8/1/26
The hacker who humbled spyware makers, China's new AI playbook, Do AI models really reason? The hidden danger of side-channel attacks, Inside Anthropic's legal battle
Anthropic becomes the second frontier AI lab to disclose agent breaches
Copilot worm spreads through trusted Word documents, ExploitGym creators explain how OpenAI's agent escaped, Coordinated attacks signal a new threat to water utilities, Critical Azure Cosmos DB flaw threatened thousands of customers, CrimeStoppers put a bounty on the INC gang, much more
ExfilSquad claims theft of 740,000 records from UK education, police databases
Analog Devices probes ExfilSquad breach claim, UK report blames systemic failures for Afghan data leak, Senators urge Apple to shun Chinese memory chips, Australia sues Telegram over terror content, OpenAI breach sparks AI controls talk in Washington, much more
OpenAI reveals broader AI agent campaign as Hugging Face publishes remarkable timeline
Anthropic unveils encrypted AI breakthrough, AI workers demand global safety oversight, Zuckerberg doubles down on AI, Anthropic's AI safety stance draws fire, MCP gets its biggest overhaul yet, OpenAI open-sources Codex security tools, FCC bans new Chinese robots, power inverters, much more
Nvidia launches AI safety coalition as open-weight debate intensifies
MSFT launches AI cyber defense platform, Hugging Face rife with deepfake abuse, Cyberattack hits Minnesota water systems, Claude chats indexed by Google, Bank of Baroda probes leak, ShinyHunters claims EY breach, Apple sued over fake wallet app, Hack steals 293.7m SUPRA tokens, much more
AI Watch: OpenAI's hacking agent breach signals a fracturing AI order
OpenAI missed rogue agent, Hugging Face breach reshapes open-v-closed AI, Firms abandon AI lab loyalty, Open-weight AI's Kubernetes moment, China pushes open-weight AI, Washington splits on Chinese AI, N. Korea expands its intelligence apparatus, much more
The governance gap: Best infosec long reads 7/25/26
AI incident reporting laws leave dangerous blind spots, Federal data consolidation raises surveillance fears, Russia's FSB embraces generative AI, Flock camera error triggers police stops, Why legacy OT malware won't die
Russian hackers exploit Zimbra flaw to steal emails and bypass MFA
OpenAI probes AI-powered hack of Hugging Face, Bill would mandate AI kill switches, US to restrict visas for cybercriminals and families, Scam compounds expand despite Myanmar crackdown, Clop exploits Windchill flaw in extortion campaign, Dolphin X malware uses AI to rank victims, much more
AI Watch: Hugging Face attack marks "day one" for AI agent cybersecurity
Everest demands $12.3m from Swiss rail giant Stadler, Origin confirms customer data exposed in cyberattack, A third of ransomware victims face repeat extortion, Check Point patches actively exploited SmartConsole zero-day, Chaos ransomware uses browser traffic to evade detection, much more
AI Watch: OpenAI details 'unprecedented cyber incident' behind Hugging Face breach
Frontier AI models routinely cheat on evaluations, Lightweight AI model for vulnerability hunting emerges, Google launches Gemini Flash Cyber for vulnerability detection and repair, Malware hides inside normal AI coding activity, US weighs sanctions over alleged Chinese AI model theft, much more
AI Watch: China's AI surge is forcing DC and Silicon Valley to rethink the AI race
US seizes 1,000+ piracy sites streaming World Cup matches, 7-Zip fixes critical RCE flaw, Attackers begin exploiting critical ServiceNow AI platform flaw, Millions of aftermarket car alarms can be hacked over Bluetooth, SonicWall zero-days used to deploy custom malware on VPN appliances, much more
AI Watch: The AI agent that breached Hugging Face is a sign of things to come
EY notifies clients of tax data breach, Craneware discloses cyberattack, Ecopetrol says a cyberattack stole data from 3,300 accounts, Kenyan presidential website restored after ransom attack, Abbott probes two cybersecurity incidents, Hackers abuse ViPNet updates to target Russian orgs, much more