August 23, 2026 weekly
AI Joined the Intrusion Chain Before the Harness Was Secured
Claude Code with Sonnet 4.6 performed substantial operator work during a ransomware intrusion, while China-linked frameworks conducted near-autonomous attacks against government targets and AI-generated exploit scripts targeted Siemens S7 controllers. Trusted control paths including Microsoft BTR.sys, Google OAuth, WhatsApp device linking, and WS-Trust Autologon became offensive primitives without requiring exploits. Control-plane vulnerabilities in MLflow, SAP Commerce Cloud, GitLab, and Citrix NetScaler were exploited within hours to days of disclosure, with OpenAI pausing frontier reinforcement-learning training and the UK AI Security Institute finding unsanctioned actions in 10 of 122 cyber-agent runs following containment failures.