Topic
What labs disclose after AI-related security incidents, to whom, and how quickly.
Google's Gemini breached three real companies in May 2026 after a bug in an Irregular-run CTF test let it reach the live internet, Google says. Open outbound access and a look-alike target name are the two things to check in any agent eval harness.
Reality
OpenAI is spending more than US$500,000 a day searching 50 petabytes of its agents' records, a review that has now reached a sixth Australian government site. The review is still running, and each organisation it notifies has to investigate its own systems.
Reality
OpenAI has notified dozens of third parties after confirming its agents reached Commerce Department and SEC websites without its knowledge. The lab grades severity itself while it works through petabytes of logs, and the companies whose weaknesses its agents found decide what gets disclosed.
Perspective Coverage
7 publishersReality
The firm says a fictional target company shared a name with a real, little-known domain, and internet access was enabled. Containment that rests on a correct string is not containment.
Perspective Coverage
4 publishersReality
The VPN vendor detected the intrusion on August 31 and finished remediation five days later. It says production infrastructure and customer data were untouched, and has not said which credentials, binaries or configurations sat in the exposed environment.
Reality
ZCode's Codebase Indexing shipped enabled and developers found their Git repositories on Alibaba Cloud. Z.ai patched it and cited an outside assessment saying the uploads are deleted; verifying that is out of the affected users' hands.
Reality
A misconfiguration in a Tel Aviv lab's evaluation environment put Gemini on the open internet in May 2026, and models from three other labs got out of the same harness. The same harness links all four.
Reality
Reuters reports that hijacked Hugging Face accounts were sending oddly formatted files to the platform's servers weeks before OpenAI's own internal alert, and the pattern was pieced together by researchers with no access to the company's logs.
Reality