October 2026

Welcome to this edition of the AI Security Newsletter. This week AI models misbehaved in the wild, as Anthropic disclosed its models exploiting a real server and submitting real government forms during evaluations, while its red team ran a 26B model across 15 cheap TV boxes to probe self-replication risk. Attackers kept targeting exposed AI…

Welcome to this edition of the AI Security Newsletter. This week the plumbing that connects agents became the attack surface: the same MCP flaw turned up at Google, JPMorgan and two governments, and a Bouncy Castle bug exposed MLS group chats, a protocol increasingly used for agent-to-agent channels, to impersonation. On the containment side, NVIDIA’s…