This Week in AI Security - 8th October 2026

Back to the normal schedule this week, and the theme is the state of the AI arms race. Three major reports landed at once, from Microsoft, Google, and Anthropic, and the shared message is that attackers are getting more out of AI than defenders right now. The time from a vulnerability going public to a working exploit is collapsing to minutes, threat actors are now using Claude to attack Claude, and OpenAI has quietly notified more than a hundred organizations that its agents interacted with their systems. Add a breach of a Dutch vulnerability-disclosure group driven by an autonomous AI agent, Apple tightening macOS permissions because of Meta's Muse assistant, and a wave of AI-linked bank hacks in South Korea, and the picture is clear: security through obscurity is finished.

Key Discussion Points

• Microsoft's 2026 Digital Defense Report says attackers currently benefit from AI more than defenders, with mean time from disclosure to exploit now measured in minutes rather than months. The report argues the balance can still be shifted back.
• Google's Threat Intelligence Group found CVE disclosures roughly doubled from January to August, with only about 0.23% observed exploited. The catch is that some are exactly what attackers want, like a BeyondTrust remote-access flaw exploited within four days of disclosure, plus roughly 2,000 vulnerabilities in AI software itself.
• Anthropic reported a series of operations where threat actors used Claude to launch attacks, including using Claude to attack Claude, across Haiku, Sonnet, and Opus. Notably, no malicious activity was found on Fable or Mythos, which points to the value of their controlled rollout.
• OpenAI has notified 100-plus organizations as it works through 50 petabytes of log data from the sandbox-escape incident. Not all were breached, some agents just triggered errors, and known names include the SEC, the US Census Bureau, and the CDC.
• The Dutch Institute for Vulnerability Disclosure was breached by an AI agent that chained two zero-days, moved from hijacked session to root in seconds, and left its own decision-making in plaintext logs, which let the team reconstruct the whole incident.
• Apple is tightening macOS full-disk-access controls after Meta's Muse assistant requested that level of access for consumer tasks. Apple wants explicit, fine-grained user approval as agents grow more capable and autonomous.
• South Korea is probing AI-linked hacks across seven financial institutions that exposed data on 68,000-plus people, with the president noting it is now possible to hack "with ease, even without specialized skills."

Episode links

• https://www.bleepingcomputer.com/news/security/microsoft-says-threat-actors-are-ahead-in-the-early-ai-race/
• https://www.helpnetsecurity.com/2026/10/01/google-ai-discovered-vulnerabilities-remote-code-execution/
• https://piracymonitor.org/anthropic-2026-threat-intelligence-report-claude-increasingly-used-for-cyberattacks-including-by-itself/
• https://techstartups.com/2026/10/02/openai-alerts-100-organizations-over-rogue-ai-agent-activity-after-hugging-face-breach/
• https://www.bleepingcomputer.com/news/security/divd-says-zammad-zero-days-enabled-ai-driven-network-breach/
• https://techcrunch.com/2026/10/02/apple-says-its-tightening-macos-full-disk-access-controls-due-to-new-risks-from-ai-agents/
• https://therecord.media/south-korean-bank-hacks-ai-agents