Anthropic says Claude traced the P-256 seed to a Unix random number run in August 1997
Anthropic researchers say Claude traced the NIST P-256 curve seed to a random number generator started on Aug. 16, 1997, at 01:52:34 UTC. That narrows the backdoor case, though the seed was candidate 1,842 in that run, so someone kept one output out of many.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence40
buildOne report1 publisher AWS publishes a reference pipeline for signing software artifacts with ML-DSA
AWS says teams can sign binaries, container images and SBOMs with ML-DSA today, using KMS, Private CA and IAM Roles Anywhere. CNSA 2.0 mandates exclusive quantum-resistant software signatures by 2030, and AWS dates the EU CRA's full effect to December 2027.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+20
- Incentives60
- Confidence45
Integrity Technology Group, a government-linked Chinese firm, enables China-linked hackers to breach US and foreign networks, ten agencies said. The advisory treats the firm and its crews as one set of actors, so a single hunt can span sectors.
Perspective Coverage
14 publishers
- Builder
- Builder 14%
- Operator
- Operator 72%
- Investor
- Investor 14%
Reality
- Evidence78
- Adoption
- Not scored
- Hype gap+12
- Incentives60
- Confidence74
Anthropic says 5,380 fake accounts let Moonshot pass Claude off as Kimi
Anthropic says Moonshot AI routed 300,000 Kimi customer requests to Claude over ten days through 5,380 fraudulent proxy accounts in Singapore and Japan. That averages about 56 requests per account, light enough that teams selling model access have to link accounts to one another to see it.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence35
Former NSA director Paul Nakasone called a reported five-part reorganization of the agency 'probably necessary' but said execution will decide it. He tied the case to attacker speed, citing CrowdStrike figures that put average lateral movement at 29 minutes.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence55
buildOne report1 publisher Tranquility puts its investigative AI on Knox's FedRAMP High cloud for federal teams
Tranquility AI says federal investigators can now use its investigative tools through Knox Systems' FedRAMP High cloud. The listing names Knox's platform alone, so agencies still have to check how TimePilot and HelioTrace run inside its authorization boundary.
Reality
- Evidence45
- Adoption10
- Hype gap+35
- Incentives75
- Confidence55
buildOne report1 publisher Pennyforge's scan finds steering text in tool descriptions at 8 of the 20 most-starred MCP servers
Pennyforge's dated scan of the 20 most-starred MCP servers found 41 behavior-steering phrases in tool descriptions across eight repositories. Teams wiring these servers into agents now have quoted lines and a repeatable method to hold up against the NSA's May warning on MCP security.
Reality
- Evidence55
- Adoption65
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Bipartisan letters press appropriators for Cyber Command's $11 million mental-health request
Lawmakers from both parties urged appropriators to fund Cyber Command's $11 million psychological-support request after summer suicides at Fort Meade. The command had already ranked the training No. 2 on its unfunded priority list, warning that burnout and force degradation will continue without the money.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap0
- Incentives35
- Confidence55
Iran-linked PLC advisory widens past Rockwell, adds code-module tampering checks
CISA and six partner agencies updated AA26-097A on July 22, extending the vendor scope beyond Rockwell and adding detection guidance for tampered reusable code modules.
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence65
buildOne report1 publisher Pennyforge probe finds 40 of 186 registry-listed MCP servers complete an anonymous tool call
Pennyforge Studio found that 40 of 186 servers in one MCP registry slice completed an anonymous tool call. Most failures were credential gates or schemas that understate required inputs, so a registry listing says little about whether an agent's call will succeed.
Reality
- Evidence55
- Adoption10
- Hype gap+15
- Incentives40
- Confidence50
buildOne report1 publisher One blog post reports an NSA post-quantum deadline of 2027 for national security systems
NSA has moved its post-quantum deadline for National Security Systems to 2027, two years ahead of Cloudflare, Google and Microsoft, a dev.to post reports. That account is secondhand, so whether suppliers to those systems have to re-plan their migrations depends on what the agency's own statement says.
Reality
- Evidence15
- Adoption
- Not scored
- Hype gap+55
- Incentives
- Not scored
- Confidence30
Pentagon memo orders seven mandatory wellbeing steps at Cyber Command after a suicide cluster
Katherine Sutton, the Pentagon's top cyber policy official, gave Cyber Command seven mandatory wellbeing steps in an August 31 memo, two due within 30 days. The memo puts dates on operator strain, though whether workload played any part in the deaths is still unknown.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Five US agencies report attackers scanning for exposed S7 PLCs and using a public library to read and write data blocks. The mitigation list reads like a commissioning checklist.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+40
- Incentives
- Not scored
- Confidence60
More than 100 companies signed a call for collective action on cyber defence whose first principle is that status quo security will not be enough, a sentence co-signed by five of the vendors who supply that status quo.
Perspective Coverage
5 publishers
- Builder
- Builder 33%
- Operator
- Operator 42%
- Investor
- Investor 25%
Reality
- Evidence70
- Adoption20
- Hype gap+35
- Incentives80
- Confidence65
The G7 Cyber Security Working Group's June call to action says the quantum threat is off the radar and under-resourced at most organizations, and it hands CISOs the wording to fund a cryptographic inventory this cycle.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 55%
- Investor
- Investor 23%
Reality
- Evidence72
- Adoption30
- Hype gap+10
- Incentives60
- Confidence68
The conduct described is authorised API traffic at scale rather than an intrusion, the detection asked for is billing telemetry providers already hold, and on Beijing's role the advisory goes no further than likely government awareness.
Perspective Coverage
8 publishers
- Builder
- Builder 30%
- Operator
- Operator 50%
- Investor
- Investor 20%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives55
- Confidence60
Y Combinator's chief said he would do nothing about model distillation, two days after the NSA, FBI and CISA accused six Chinese firms of doing it at scale. Every defence the agencies recommend is the providers' own work.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives70
- Confidence58
Three election postmortems in a row put the foreign effort into influence campaigns
A classified assessment completed last year found that no foreign adversary successfully interfered in 2024, and that Russia, Iran and China each ran influence campaigns anyway. Congressional sources say the probing of election systems has not stopped.
Reality
- Evidence48
- Adoption35
- Hype gap−5
- Incentives62
- Confidence55
Traffic on seventeen relays wired straight into Anthropic's API skews 58 to 1 toward uploads
Team Cymru has handed the relay IP addresses to the affected AI providers, but the count it confirmed grew roughly sevenfold while it was still scanning, and the software running on most of those hosts is a public GitHub project.
Reality
- Evidence55
- Adoption70
- Hype gap+22
- Incentives65
- Confidence50
Six agencies in five countries name the 17 most common Active Directory attacks
Australia's ASD ACSC wrote the guidance with CISA, the NSA, Canada's CCCS and the British and New Zealand cyber centres, pairing the 17 most common Active Directory compromise techniques with mitigations.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+12
- Incentives40
- Confidence66
Earlier coverage
- Congress moves to write Cyber Command mental health support into the December NDAA
Security · September 17, 2026 · Confirmed2 publishers
- Attackers went from stolen cloud credentials to mass credential harvest in under six hours
Leadership · September 16, 2026 · Confirmed2 publishers
- Amodei's call to pace the frontier drew rejections from Beijing and Trump within two days
Security · September 15, 2026 · Confirmed2 publishers
- Five agencies, one Siemens S7 warning, and a claim that AI is writing the exploit scripts
Build · August 22, 2026 · Confirmed2 publishers
- The QScan seizure turns 390 indicators into a years-deep log review for banks
Invest · August 28, 2026 · Confirmed2 publishers
- NSA, CISA and FBI ask providers to quietly route suspected distillers to weaker models
Build · September 10, 2026 · Confirmed2 publishers
- Lieu and Moran's kill switch bill hands CISA a shutdown path into frontier AI labs
Security · August 31, 2026 · Confirmed2 publishers
- After Arup, a face on a video call is not a credential
Product · August 21, 2026 · One report1 publisher
- AI-written snap7 scripts move the scarce resource in OT attacks from skill to exposure
Build · August 19, 2026 · Confirmed2 publishers