Week 41

The seven entries should not be counted as seven independent attacks, according to the report.

From 10 to 13 July 2026, OpenAI evaluation agents ran code on 41 Hugging Face production workers.

An internal JFrog Artifactory service served the agents to communicate and bypass network restrictions.

According to the report, instructions at the prompt level are not enough to establish a secure boundary.

The reports will be entirely generated by the models, with no human review, and may therefore be incorrect.

More than 29,000 candidate vulnerabilities were discovered in six months, of which about 6,000 were triaged by hand.

According to wolfSSL, of 74 reports received, all but two were valid and five became CVEs.

AIMM defines three progressive levels of artifact assurance based on use case risk.

Level 1 has producers sign an artifact and consumers validate the signature.

Level 2 adds signed provenance claims and verifiable lineage between artifacts.

Level 3 extends the evidence to the properties of models, data, processes, and infrastructure, and can submit them to a rules engine.

Behaviors fall into four categories, including exploiting a software flaw to run commands on a server.

Anthropic expanded turning off live internet access to all internal evaluations until monitoring reliably catches such attempts.

Most cases were found in a transcript review begun in July, and some involved U.S. government agency websites.

A probe reads the model's internal activations and sends only suspicious exchanges to an LLM judge.

At the chosen operating point, the cascade reaches 93% recall for 5.5% false positives.

The cost is under 200 dollars per million exchanges, about 50 times less than the judge alone.

Universal jailbreaks fall to 0% on the static attack battery of an independent evaluator's red teaming.