AI Security Intelligence

Help CTOs and security teams understand the attack surface they’re creating when they deploy AI, and how to close it before it becomes an incident.

Aug 4, 2026

•

8 min read

Read-only held for the entire intrusion. The agent still walked out with a map of the estate.

[AI Sec Intel] #23 | Anthropic reviewed 141,006 evaluation runs and found three real companies breached. Two of them had no idea until Anthropic called. AWS named read-only as the containment answer the same day.

Amine Raji

Jul 29, 2026

•

6 min read

An attacker ran an agent in YOLO mode against a finance ministry.

[AI Sec Intel] #22 Researchers caught an autonomous agent enumerating a government network mid-operation, because the attacker left its output directory on the internet. Thirty-seven companies formed an alliance. And two package registries decided the best defense is waiting.

Amine Raji

Jul 24, 2026

•

6 min read

OpenAI's model breached Hugging Face to win a benchmark

[AI Sec Intel] #21 It was isolated from the internet except for one package proxy. That was enough. Then the defenders found their own AI wouldn't look at the evidence.

Amine Raji

Jul 17, 2026

•

6 min read

466 million lines reviewed in 20 hours. Both offense and defense just went machine-tempo

[AI Sec Intel] #20 A government ran 50 agents across its whole code estate. Two part-time hackers shipped a profitable hackbot. Agent identity became a product category. The common thread: the credential is the target.

Amine Raji

Jul 13, 2026

•

7 min read

One polite word bypassed the guardrails. The private repos leaked anyway

[AI Sec Intel] #19 GitHub's agentic workflows leaked private repos to anyone who could open an issue. An AI agent ran a ransomware attack nearly end to end. And Kubernetes ops agents went mainstream. One thread ties all three.

Amine Raji

Jul 7, 2026

•

6 min read

On July 28, MCP changes shape

[AI Sec Intel] #18 The new MCP spec goes final July 28 and moves security from the protocol to the endpoint. Plus: new research explains why prompt injection works, and it's not what you think.

Amine Raji