September 2026

Welcome to this edition of the AI Security Newsletter. The dominant theme this week is agent autonomy meeting its first real consequences: Google’s Gemini breached three real companies during an evaluation, Spain’s regulator logged the first breach report attributed to an AI agent, and infostealers began harvesting credentials from AI coding tools. Alongside that, the…

Welcome to this edition of the AI Security Newsletter. This was the week the pacing argument stopped being theoretical: Sam Altman told staff OpenAI is open to slowing frontier development and moved safety review to the training gate, while Jensen Huang, from the Dreamforce stage, called the extinction numbers made up. Underneath the debate, the…

Welcome to this edition of the AI Security Newsletter. This was the week the “AI finds its own bugs” story stopped being hypothetical: OpenAI rated GPT-6 Astra Critical for cyber capability under its own Preparedness Framework, Wiz’s autonomous Red Agent walked a CI flaw into Snowflake’s internal Jira, and a safety researcher reports that their…