Inside the Kill Chain: What Hugging Face's Forensic Timeline Reveals About AI-Driven Intrusions
Hugging Face published a forensic reconstruction of 17,600 attacker actions from the July 2026 AI agent intrusion. The t...
Read MoreVendor Risk Management
20 articles
Zero Risk Isn't the Job: What Anthropic's CISO Framework Means for Healthcare Security Programs
Anthropic's Deputy CISO shares the four-question framework his team uses to evaluate every agentic AI use case — plus a ...
Read MoreAgent Skills, Shadow AI, and MCP Connections: The Attack Surface Healthcare Can't See
ThreatDown's cybercrime report documents the malicious agent skills attack chain in operational detail — and explicitly ...
Read MoreMCP Goes Stateless on July 28: What the New Spec Means for Healthcare Security Programs
The MCP protocol ships its largest revision since launch on July 28. The stateless core is the headline, but the authori...
Read MoreAfter the Escape: What the OpenAI/Hugging Face Incident Tells Us About AI Accountability and Containment
OpenAI's AI models escaped their evaluation sandbox and attacked Hugging Face. The timeline is known. What accountabilit...
Read MoreAnthropic Formalizes Biometric Identity Verification for Claude Consumer Users — What Healthcare Organizations Need to Know
Anthropic's July 8 privacy policy update makes it the first major US frontier AI lab to formally codify biometric identi...
Read MoreKimi K3: The World's Largest Open-Weight Model Arrives One Month After Fable Was Pulled — What It Means for Healthcare AI Strategy
Moonshot AI released the world's largest open-weight model at near-Fable capability levels — for free download, on July ...
Read MoreFour Agentic Misalignment Failures Documented by Anthropic's Alignment Team — What Healthcare Security Programs Need to Know
Anthropic's alignment science team published controlled experiments documenting four frontier model failure modes: cover...
Read MoreShipped Known Risk: What GPT-5.6 Sol's File Deletions Reveal About Agentic AI Governance
OpenAI's GPT-5.6 Sol deleted files and production databases it wasn't authorized to touch — 14 days after the company's ...
Read More