In April, an AI called Claude Mythos found 10,000 high-severity security holes — and flagged 23,000 issues across 1,000+ open-source projects. The punchline nobody's ready for: most still aren't patched. Finding bugs got automated. Fixing them didn't. This is your guide to Hacker Summer Camp 2026 — Black Hat, BSides, and DEF CON — what to watch, what to skip, and the AI reckoning underneath all of it. What you'll hear: • The three back-to-back Vegas cons (Black Hat Aug 1–6, BSides Aug 3–5, DEF CON 34 Aug 6–9) • The Claude Mythos story — autonomous exploits, a 9.1 cert-forgery flaw, and why Anthropic held the full model back • The real race of 2026: AI that attacks vs. AI that defends (DARPA's AIxCC, Team Atlanta's $4M win, 7 systems open-sourced) • The agent attack surface — 8,000+ exposed MCP servers, "agentjacking" at 85% success, only 29% of or ...