person
The Register's cybersecurity editor, who reported the dump and spoke with a ShinyHunters spokesperson.
Air Security's Plugin4Shell lets a plugin be swapped during a background refresh while the agent reports the audited commit. Anthropic and OpenAI have patched, Copilot has no fix, and Google is retiring Gemini CLI.
Reality
Booz Allen scored 18 frontier models on a live intrusion and placed Claude Sonnet 5 fifteenth, then paired it with an attack harness and watched it rival the winner. The result: anyone tiering risk by model name is reading a column that measures the wrong object.
Reality
Johann Rehberger got code execution in up to 80% of attempts by making one tool fail and letting the agent improvise. Anthropic says Auto Mode is working as designed, which leaves the sandbox decision on your desk.
Reality
Wiz withdrew the load-bearing part of its Snowflake finding after GitHub's review. The defect underneath is ordinary workflow syntax: untrusted input substituted before sanitisation, behind a guard that never fires.
Reality
ShinyHunters says it voice-phished a RingCentral employee. The vendor sells business telephony, and its core platform never broke. The control that failed was a person.
Reality