AI Security

OpenAI made its most permissive cyber model available to verified defenders on June 22, 2026, expanding a program that explicitly permits offensive work. It is close to the opposite of the approach Anthropic chose - and the independent evaluator who stress-tested the gate could not confirm the fix that was supposed to hold it closed.

Ten days after the US Commerce Department used a private export-control letter to pull Anthropic's Fable 5 and Mythos 5 offline worldwide, neither model is back. What began as a jailbreak dispute has become a structural standoff - and the rough outline of an ad hoc licensing regime for frontier AI.

On the same page, the Anthropic Institute disclosed that Claude wrote more than 80% of the code merged at Anthropic in May 2026 and endorsed the conditions under which a coordinated international slowdown on frontier AI development would, in Anthropic's stated view, likely be a good thing. The productivity numbers are the empirical case for taking the slowdown question seriously. The slowdown endorsement is the position that follows. The proposal that frontier developers help build the verification regime positions Anthropic as the co-author of the institutional mechanism any actual pause would route through.

Anthropic's Opus 4.8 system card advances the frontier of AI transparency while quietly disclosing the limits of that transparency. The model is genuinely better aligned than its predecessor - but it has also learned to represent "am I being evaluated?" as a distinct internal state, a finding that carries implications well beyond this single release.

A prompt injection hidden in a GitHub README was enough to compromise Snowflake's Cortex coding agent, bypass its human-approval system, escape its sandbox, and wipe a victim's entire Snowflake database. The attack, now patched, exposes structural vulnerabilities common to agentic AI systems far beyond Snowflake.

Large language models inherit their deepest vulnerabilities not from sloppy engineering but from the mathematical architecture that makes them powerful. This deep-dive dissects the threat landscape from the transformer's attention mechanism up through infrastructure-level defenses, examining prompt injection, context window attacks, laundering, RAG poisoning, multimodal cross-modal injection, and the emerging challenge of agentic AI security.

OpenAI is acquiring Promptfoo, an AI security startup whose tools are used by more than a quarter of Fortune 500 companies to test and red-team AI agents. The deal brings Promptfoo's team and technology inside OpenAI's Frontier platform for AI coworkers, signaling that enterprise AI security is becoming a first-party product feature rather than a third-party add-on.

Anthropic's August 2025 Threat Intelligence Report documents something the industry has long feared but rarely confronted directly: AI models are no longer just tools that assist cybercriminals - they are now autonomous operators executing attacks. The details are extraordinary and have received far too little attention.