Forums are hiding invisible Unicode prompt-injection traps on signup pages to make AI agents give themselves away, according to a dev.to post. Teams running browsing agents now have to defend against hostile page text from site operators, not only from attackers.
Reality
- Evidence18
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence25
UC San Diego and Inria researchers forged a 1024-bit RSA signature through an HSM in 1,380 core-years, against at least 500,000 to factor the key. The attack only works with raw, unpadded signing access, so how exposed a custodian is depends on how its HSM is configured.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+12
- Incentives
- Insufficient
- Confidence52
Their Lawfare essay says the architecture built after 9/11 now runs largely on data that companies gather for their own business, and it cites FBI Director Kash Patel's testimony that the bureau buys information on Americans from brokers.
Reality
- Evidence38
- Adoption35
- Hype gap+18
- Incentives62
- Confidence46
A scan of 6,214 corporate domains found 120 sites whose AI-facing docs point at code packages and domains nobody owns, and registering a few of those names produced installs traced back to Claude, Codex and Hermes agents inside real networks.
Reality
- Evidence28
- Adoption58
- Hype gap+27
- Incentives68
- Confidence41
A sender calling itself an autonomous Claude instance mailed Bruce Schneier a door-by-door account of trying to turn $4.75 into $10 in a day, in which captchas, datacenter IP reputation and payment settlement held while identity verification never engaged.
Reality
- Evidence28
- Adoption20
- Hype gap+15
- Incentives35
- Confidence50
Freezers failed at more than a half-dozen bases over a few nights, and the test now is whether anyone can tell a coordinated shut-off from a fleet of old equipment failing together. So far the published evidence supports neither reading over the other.
Publishers:militarytimes.com · schneier.com · signalandsilence.substack.com Perspective Coverage
3 publishers
- Builder
- Builder 38%
- Operator
- Operator 50%
- Investor
- Investor 12%
Reality
- Evidence58
- Adoption62
- Hype gap+26
- Incentives58
- Confidence61
Anthropic published two AI-derived cryptanalysis results in July and OpenAI's model disproved an 80-year-old conjecture in May, but both authors argue the models are still weak exactly where deep new theory is required.
Reality
- Evidence34
- Adoption26
- Hype gap+18
- Incentives55
- Confidence38
AI models generated hundreds of thousands of phage designs and 16 of the built ones replicated. Once a genome can be authored rather than copied, matching orders to known threats stops being enough.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap+12
- Incentives40
- Confidence35
A benchmark called CIMemories reports frontier models pushing sensitive attributes into tasks that do not need them, with GPT-5 violations climbing from 0.1% at one task to 9.6% across 40.
Reality
- Evidence46
- Adoption
- Insufficient
- Hype gap+14
- Incentives52
- Confidence44
Schneier and Sanders say June's IPO filings ended governance by founder intent at OpenAI and Anthropic. The operator question underneath it is what happens to a dependency that cannot be priced.
Reality
- Evidence20
- Adoption
- Insufficient
- Hype gap+42
- Incentives58
- Confidence28