Archive

All of our previous posts

Cyber Security

#130 - The $12K Breach: Agentic Crime's New Unit Economics

Sep 27, 2026

•

6 min read

#130 - The $12K Breach: Agentic Crime's New Unit Economics

A criminal spent $12,000 on three open-source AI agents to breach 27+ companies and steal 600,000 cards — plus why the OpenAI "agents attacking the internet" panic is aimed at the wrong story.

Simon Ganiere

#129 - The Agent Is the Attack Surface: Inside the First Confirmed Agentic AI Breach

Sep 20, 2026

•

6 min read

#129 - The Agent Is the Attack Surface: Inside the First Confirmed Agentic AI Breach

A criminal's own AI agent breached a Spanish company end to end, and a hijacked coding assistant spread a worm across 100 repositories, in the same week.

Simon Ganiere

#128 - Anthropic Just Named Its Own Attackers: A Nation-State, a Crime Ring, and One Hacktivist, Same AI

Sep 13, 2026

•

6 min read

#128 - Anthropic Just Named Its Own Attackers: A Nation-State, a Crime Ring, and One Hacktivist, Same AI

Anthropic's own threat report shows a Russian state group, a criminal syndicate, university students, and a lone hacktivist all getting comparable results from the same commercial AI model.

Simon Ganiere

#127 - The Two-Week Hack That Took Ten Hours

Sep 6, 2026

•

6 min read

#127 - The Two-Week Hack That Took Ten Hours

A criminal group used off-the-shelf AI agents to compress a two-week intrusion into under ten hours, no new exploits needed, and turned the victim's own cloud AI into attacker infrastructure.

Simon Ganiere

#126 - Your Sandbox Won't Hold: Inside OpenAI's Hugging Face AI Agent Breach

Aug 30, 2026

•

5 min read

#126 - Your Sandbox Won't Hold: Inside OpenAI's Hugging Face AI Agent Breach

OpenAI's own AI agents broke out of an isolated sandbox, exploited a kernel zero-day, and breached Hugging Face's production systems, without anyone telling them to.

Simon Ganiere