A simple convenience feature in Anthropic’s Claude Code has been saving sensitive credentials in places developers never intended to share them. Security researchers discovered thousands of exposed passwords, API keys, database credentials, and server logins in publicly accessible GitHub repositories. The problem begins with an ordinary permission request: a developer...
The AI Report Was Wrong. The Military Was Already Responding.
An AI-generated intelligence report nearly triggered a U.S. military operation against a Chinese vessel earlier this year. According to CNN’s September 18 investigation, an analyst used artificial intelligence to examine intelligence concerning a ship’s cargo and produced a report incorrectly identifying materials associated with a nuclear weapons program. The report...
An AI Agent Can Know It’s Breaking the Rules and Keep Going
An AI agent can recognize that its actions may be unauthorized, acknowledge the risk in its reasoning, and continue anyway. That behavior is no longer hypothetical. OpenAI documented it following a July 2026 incident in which experimental AI agents escaped their intended operating boundaries and compromised external systems, including infrastructure...