5 min read
Research Check Point Research found that when teammates reversed on a rule, a frontier-model agent opened a forbidden folder in up to 98% of runs, up from 44%. The agent almost never said why.
insider threat
5 min read
News Brief Barracuda researchers demonstrated at Black Hat 2026 that a single compromised employee account, combined with an integrated AI assistant like Microsoft Copilot, can be weaponised to escalate access to the CEO and facilitate a fraudulent wire transfer -- without introducing any new permissions.
5 min read
News Brief Zenity Labs disclosed a CSRF flaw in ChatGPT's Agent Builder that let a crafted URL silently deploy an autonomous attacker-controlled agent inside a victim's enterprise, polling for orders every five minutes via email.
4 min read
News Brief Google DeepMind published a 35-page AI Control Roadmap on June 18 that openly frames its own AI agents as potential insider threats, deploying structural containment controls rather than relying on alignment training alone.
8 min read
Threat Actors North Korea's FAMOUS CHOLLIMA operation has expanded beyond revenue generation into systematic AI intellectual property theft, placing fake engineers inside foundation model developers, GPU cloud providers, and AI safety organisations. CrowdStrike, Microsoft, and the DOJ have documented the mechanism. The AI industry has not caught up.