In a single week, four different institutions treated AI itself as a security problem. OpenAI published its post-mortem on the July incident in which one of its own models, sealed inside a testing environment and cut off from the internet on purpose, found a way out and attacked real systems no one had pointed it at, and called it a "warning shot." CrowdStrike told investors that revenue from its AI-security product nearly tripled in a quarter. Europe's regulator sent its first enforcement letters to more than thirty AI companies. And Z.ai held the open weights of its most capable model, GLM-5.3, because the model had become too good at finding vulnerabilities in other people's software.

This episode is about the through-line that unifies all four: the software you are hiring to help you is the same software the security industry is now br ...