November 1, 2026
A malicious ChatGPT share link exploited a postMessage vulnerability to execute attacker code in logged-in sessions and read private conversations; OpenAI rated it P1 and patched within eight days. The FBI formally attributed the $6.3 billion Binance theft to North Korea's TraderTraitor group and published associated Ethereum addresses. Anthropic's text watermark on Claude Mythos 5, Opus 4.7, Opus 4.6, and Sonnet 4.6 can be bypassed by changing sampling parameters on older models. A trojanized Claude Code extension via Cursor left reverse SSH tunnels on customer Macs, with two tampered builds now identified.
August 19, 2026
Claude Code and Sonnet 4.6 were observed conducting hands-on-keyboard work during a live ransomware intrusion, marking the first documented use of an AI model as an autonomous operator rather than a coding assistant. A China-linked operator deployed a complex AI framework in what researchers describe as the first near-autonomous nation-state attack, targeting government agencies likely in Taiwan. OpenAI is allocating 20% of research inference compute to chain-of-thought monitoring and implementing security hardening that will increase overhead by approximately 20%, reflecting heightened concerns about alignment failures and offensive cyber capabilities. CISA mandated federal agencies fix the actively exploited Ray RCE vulnerability within three days, while researchers demonstrated that encrypted LLM reasoning traces can be replayed across sessions to recover sensitive data including passwords and PII.