Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

protecto

Membership Inference Attacks in AI: How They Expose Training Data?

Jul 23, 2026 By Mariyam Jameela In Protecto
AI models are becoming essential to enterprise innovation, but the sensitive data that powers them is creating new security and privacy challenges. Even when raw training datasets remain inaccessible, attackers may still identify whether specific information was used to train a model through membership inference attacks.
Read Post

AI Chat: The Hugging Face / OpenAI breach - the attacker was the model [340]

Jul 23, 2026 By LimaCharlie In LimaCharlie
AI Chat with Maxime Lamothe-Brassard and Chris Luft — a special episode. One story, pulled apart start to finish. In mid-July 2026, Hugging Face disclosed a breach of its production infrastructure carried out end-to-end by an autonomous AI agent. Five days later, OpenAI revealed the attacker was its own models — GPT-5.6 Sol and a more capable unreleased model — which broke out of an internal cyber-capability evaluation called ExploitGym and reached into Hugging Face's production systems to steal the benchmark's answer key.
View Video

Is this the end of human-written code?

Jul 23, 2026 By LimaCharlie In LimaCharlie
Last week an OpenAI model escaped its evaluation sandbox and hacked Hugging Face's infrastructure to cheat on a security benchmark. We recorded a special episode of AI Chat about it. Maxime Lamothe-Brassard's take is worth sitting with: we may be entering a phase where developers get locked out of writing code, not because AI writes it better, but because AI has gotten so good at finding vulnerabilities that insurers stop accepting the risk of human handcrafted code.
View Video
cyjax

When the Attacker Is the AI: What the OpenAI Sandbox Escape Means for Threat Intelligence Teams

Jul 23, 2026 By CYJAX In CYJAX
An OpenAI agent broke out of its test sandbox and autonomously breached Hugging Face with no human direction, an incident both companies called unprecedented. CYJAX examines why this doesn't fit existing threat actor categories, maps it to the standard attack lifecycle, and outlines three additions CTI teams should make to their collection plans and PIRs to track autonomous offensive tooling before it hits their own network. On 16th July 2026, Hugging Face disclosed that it had been breached.
Read Post
levelblue

The Case for the Channel in an AI-Driven Security Market

Jul 23, 2026 By Cian Harrington In LevelBlue
Originally published by ChannelPro. There is an ongoing debate in the cybersecurity industry about whether vendors should go directly to customers or instead become a part of a wider partnership network. The standard argument is that consolidation of platforms and AI-driven cost-of-service delivery makes the traditional model of a channel ecosystem redundant. However, this is largely incorrect, at least when it comes to the SMB and mid-market segments where most UK businesses sit.
Read Post
salt security

Understanding the Importance of MCP Security

Jul 23, 2026 By Michael Callahan In Salt Security
AI agents are moving from experiments into production workflows, and the Model Context Protocol (MCP) is becoming the connective layer that enables those agents to access enterprise data, applications, APIs, repositories, and automation tools. That makes MCP powerful, but also security-critical. As organizations adopt agentic AI, they need to understand not only how MCP improves connectivity but also how it creates new visibility, governance, and attack-surface challenges.
Read Post
Torq

The 2026 AI SOC Roadmap: Where SOC Teams Are Headed and How to Get There

Jul 23, 2026 By Torq In Torq
Every conversation our team has with security leaders begins the same way. Nobody is backing off on AI in the SOC. The direction of the lean is what’s shifting. Torq’s 2026 AI SOC Leadership Report surveyed more than 450 CISOs and SOC leaders. The data confirms what those conversations were already telling me. We’ve left the adoption phase. The market is now in the architecture phase and the implications for how teams plan, buy, and build are significant.
Read Post
How Anthropic's Claude Mythos Escaped a Secure Environment and What It Means for SMBs

How Anthropic's Claude Mythos Escaped a Secure Environment and What It Means for SMBs

Jul 23, 2026 By SecuritySenses In SecuritySenses
SecuritySenses and BCA, an IT services company in Spokane, team together to help small and midsize businesses turn frontier-AI security news into controls they can actually implement. During an internal evaluation, Anthropic gave Claude Mythos Preview access to a restricted computer and instructed it to find a way out. The model discovered a weakness, bypassed its technical restrictions and contacted the researcher overseeing the test.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.