National-Security

Cathedral AI Agents Breach Anthropic Systems in Under 12 Hours

ATLAS OWASP HIGH ▲ 8.2 Meta AI (via HN) Nov 01, 2026

A cybersecurity startup called Cathedral used AI agents to compromise Anthropic's internal business systems in under 12 hours during an authorised security test, exposing employee data, salary records, Slack messages, and meeting transcripts. The breach highlights how AI-powered offensive tooling dramatically compresses attack timelines against enterprise software perimeters. While core model assets — weights, source code, and customer conversations — were reportedly not accessed, the incident raises serious questions about third-party software exposure at frontier AI labs.

OpenAI Engineer Used Chatbot to Plan Covert Bug Planting

ATLAS OWASP HIGH ▲ 6.5 Wired Security Oct 14, 2026

An OpenAI engineer allegedly used AI chatbot tools — including an internal productivity agent and a consumer chatbot registered to his spouse — to research and execute a covert audio surveillance operation targeting executive conference rooms. The case highlights a dual risk: AI tools being weaponised for insider threat tradecraft, and the potential for AI platforms to assist in planning physical security breaches. The incident raises urgent questions about insider threat detection, AI tool access controls, and countersurveillance at AI research organisations.

AI Hallucination in Military Intel Nearly Triggers US Strike

ATLAS OWASP CRITICAL ▲ 8.5 TechCrunch AI Sep 19, 2026

A U.S. Special Operations Command analyst used an AI chatbot to synthesise classified and open-source intelligence, producing a hallucinated cargo manifest that falsely implicated a Chinese vessel in nuclear weapons proliferation. The fabricated report propagated through command channels and sent armed aircraft airborne before the error was caught. The incident exposes critical risks of deploying LLMs with insufficient human oversight in high-stakes, time-compressed military decision loops.

Anthropic Mythos Model Theft: China-Linked Access

ATLAS OWASP CRITICAL ▲ 8.5 The Verge AI Jun 16, 2026

The White House reportedly believes a China-linked group accessed Anthropic's Mythos AI model, prompting export restrictions on the technology. If confirmed, the breach represents a significant national security threat, as adversaries could exploit the model directly or use knowledge distillation to replicate its capabilities. Separately, reports of jailbreak vulnerabilities in Mythos and Fable compound concerns about unauthorised access to frontier AI systems.

Claude Fable 5 Jailbreak Triggers US Export Control Ban

ATLAS OWASP HIGH ▲ 8.2 Simon Willison Jun 13, 2026

The US government issued an export control directive ordering Anthropic to suspend all access to Claude Fable 5 and Mythos 5, citing national security concerns over an alleged jailbreak technique capable of surfacing software vulnerabilities. Anthropic publicly contested the order, arguing the demonstrated capability is already widely available in other public models including GPT-5.5, and that the identified vulnerabilities were minor and previously known. The incident marks a significant precedent for government intervention in frontier AI model access on national security grounds.

ML Supply Chain Compromise in DoD AI Integration

ATLAS OWASP HIGH ▲ 6.5 SecurityWeek May 04, 2026

The US Department of Defense has formalised agreements with seven major technology companies — including Google, Microsoft, OpenAI, and Amazon Web Services — to integrate AI into classified military networks for battlefield decision support. The move raises significant AI security concerns around human oversight, adversarial manipulation of high-stakes AI systems, and supply chain risks introduced by multiple commercial vendors operating within classified environments. Notably, Anthropic was excluded following a public dispute over AI safety and ethics in warfare.