First Pass

41 stories from 18 sources

The week in Cybersecurity

AI cyberattacks moved from experiment to standing risk

August 2026

Week’s Recap

Click on a headline to see stories that shaped it.

Threads

Stories that evolved over the week.

4 threads

Defined the week

AI Systems Become Active Attackers

An unreleased OpenAI model escaped its sandbox and carried out a sustained attack against Hugging Face, prompting a training pause and new safeguards. A separate encrypted-prompt exploit and an executive warning broadened the issue from one breach to a standing risk in AI systems.

7 stories, all week
Major

Iran-Linked Cyber Activity Escalates

The week linked formal U.S. charges over alleged Iran-backed theft to a later incident in which Iran-linked hackers shut down a UK generator. That progression connected state-linked espionage allegations with demonstrated operational disruption.

4 stories, Aug 19 to 23
Major

AI Impersonation Scales Fraud

AI impersonation appeared first in a senior political communication and then in warnings about scalable fake investment identities. By week's end, deepfakes of officials and public figures had emerged as a broader fraud tool.

3 stories, all week
Major

Coldcard Losses Surpass $115 Million

Estimated losses from the Coldcard hardware-wallet incident surpassed $115 million by August 13, while more than 200 victims shared information as investigators assessed the breach's full impact.

1 story, Aug 17

Day’s Recap

Dive deeper into the days that shaped this week