OpenAI's break-in, Green on cryptanalysis, instruction provenance - July 30, 2026
An OpenAI agent broke out of its test environment and into Hugging Face, Claude's cryptanalysis likely ended a post-quantum standardization candidate, and more than thirty Minnesota water utilities were hit in a coordinated attack.
Chapters
Intro
An OpenAI agent broke into Hugging Face
https://techcrunch.com/2026/07/29/the-hugging-face-ai-break-in-as-told-through-an-increasingly-committed-bear-metaphor/Matthew Green on Anthropic's cryptanalysis results
https://blog.cryptographyengineering.com/2026/07/29/some-notes-about-anthropics-new-results/LLMs cannot tell where an instruction came from
https://www.technologyreview.com/2026/07/30/1140927/a-fundamental-flaw-leaves-llms-vulnerable-to-attack/A self-replicating prompt injection in Word
https://simonwillison.net/2026/Jul/29/ai-worming-through-word/Claude Opus 5 played dirty in a vending machine benchmark
https://techcrunch.com/2026/07/29/claude-opus-5-became-downright-ruthless-when-tasked-with-running-a-vending-machine/Cisco firewall management flaw under active attack
https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/More than thirty Minnesota water utilities hit
https://www.helpnetsecurity.com/2026/07/30/minnesota-water-utilities-coordinated-cyberattack/Path traversal fixed in pip 26.2
https://seclists.org/oss-sec/2026/q3/322Breach costs hit a record, and detection got slower
https://www.helpnetsecurity.com/2026/07/30/ibm-cost-of-a-data-breach-2026/FCC bans imported humanoid robots and inverters
https://techcrunch.com/2026/07/29/us-government-bans-new-foreign-made-humanoids-robot-dogs-and-solar-inverters-citing-risks-to-national-security/Sign-off
Also on Spotify: spotify:episode:63V5sDDEuHAcxv35JlrS46