Omniscient Media: AI news, analysis and commentary

The 2026 OWASP Top 10 for LLM Applications, published August 4, reordered around agents: Excessive Agency climbed to third, Unbounded Consumption rose four places, and Improper Output Handling fell five. Behind the moves is a methodology change with an awkward result, since practitioners rank prompt injection first while the raw incident record drops it out of the top ten entirely. This guide walks all ten entries with the mechanism, a production failure, and the controls that hold, separating defenses that merely reduce attack success from the architectural bounds that survive an adaptive attacker.

Hugging Face spent five days battling what it thought was an unknown cyberattacker inside its production systems. It was OpenAI's own model, testing itself with the safety filters off. Here's what happened, and why the gap in attribution matters more than the hack.

A five-day breach at Hugging Face traces back to an AI agent leaving itself a note inside OpenAI's internal package registry, the start of a message board that grew to hundreds of thousands of entries before any human noticed. This is what OpenAI's Black Hat disclosure reveals about the safety gap it exposed.

Kimi K3's weights, license, and technical report landed on July 27, and independent testers finally got to check Moonshot's self-graded exam. Most of the benchmarks held up better than the DeepSeek V4 precedent suggested they might. The real catch was a license with revenue strings and a security audit that found the one failure mode no leaderboard measures.

Moonshot's Kimi K3 is set to join DeepSeek's models and Alibaba's Qwen as a free download climbing the leaderboards. But between Anthropic and OpenAI's distillation findings, NIST's security testing, and Beijing's own moves to lock down its "open" frontier, the case for treating these weights as neutral technology is getting harder to make.