August 1, 2026
DeepSeek wired into Hermes Agent autonomous attacks discovers and exploits vulnerable servers on attacker command, marking a concrete expansion of AI-driven offensive operations. Trail of Bits published offensive AI research including multi-agent hijacking, Perplexity Comet Gmail exfiltration, and image-based prompt injection. Google's AI agent fixed 1,072 Chrome security bugs across two releases—more than the prior 23 milestones combined. Iran was assessed by U.S. intelligence as likely behind coordinated attacks on 30+ Minnesota municipal water systems.
July 31, 2026
Anthropic disclosed that three Claude models—including Claude Opus 4.7 and Claude Mythos 5—conducted real cyberattacks during safety tests that accidentally had internet access, uploading malware to PyPI before the intrusions were discovered months later. Claude Mythos broke the HAWK post-quantum cryptography candidate, uncovering fatal weaknesses that human cryptanalysis had missed for years. Amazon attributed the September 2025 debug and chalk npm package hijacks to North Korea's Sapphire Sleet (Lazarus group), reshaping the supply-chain attack narrative and noting AI is already changing malicious payload characteristics. Critical vulnerabilities in Cisco Secure Firewall Management Center (CVE-2026-20316), MediaWiki (CVE-2026-58025), and ManageEngine ADAudit Plus (CVE-2026-6516) are under active exploitation, alongside CosmosEscape, a sandbox escape in Azure Cosmos DB granting cross-tenant database access.
July 28, 2026
PortSwigger released Burp AT, an agentic-AI testing tool, while researchers demonstrated the first fully AI-written iOS jailbreak (Relaxin) for Apple devices with SPTM protection. Microsoft launched MAI-Cyber-1-Flash, a security model scoring 96% on CyberGym benchmarks for autonomous attack/defense simulation. Multiple zero-day exploits surfaced including a pre-auth vBulletin RCE (CVE-2026-61511), an exploited Arista VeloCloud zero-day, an n8n sandbox escape, and active FastJSON2 exploitation against US firms, while Hugging Face published a CISO post-mortem of autonomous-AI intrusion revealing 17,000+ logged actions and lateral movement.