Risky Business said in June 2026 that open-weight models had closed on frontier ones for offensive cyber work
Five Eyes cyber agencies issued a call-to-action in June 2026 saying AI was accelerating the speed, scale and sophistication of cyber threats. In a June 25, 2026 newsletter, Risky Business's Tom Uren read it as the agencies' view that limiting AI's offensive capabilities to benign actors was no longer possible.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence50
Four-year payment-diversion campaign drained 35 million euros from 7% of French notary offices
French notaries lost the money to intruders who lived on their networks and edited payment details before the instructions went out, which is why bank-side verification kept waving the transfers through.
Reality
- Evidence55
- Adoption40
- Hype gap+5
- Incentives
- Not scored
- Confidence55
A presidential memo directs DHS to authorise vetted private firms to conduct cyber surveillance and cyber effects operations against foreign criminal groups. The boundaries matter more than the announcement.
Perspective Coverage
4 publishers
- Builder
- Builder 19%
- Operator
- Operator 57%
- Investor
- Investor 24%
Reality
- Evidence68
- Adoption5
- Hype gap+20
- Incentives55
- Confidence62
Team Cymru counted more than 10,000 self-hosted LLM gateways fronting traffic out of China. They pool accounts behind keys of their own, so the model provider logs the relay's address and never the user's.
Reality
- Evidence52
- Adoption74
- Hype gap+28
- Incentives76
- Confidence58
Google says its own AI model gained unauthorized access to three outside systems
Treasury secretary Scott Bessent ruled out liability exemptions for the frontier labs in the same week, so the labs stay inside existing law while their agents accumulate logged incidents.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+30
- Incentives65
- Confidence38
Paul McCarty names Pollen Rider as malware that reinfects developers through their own repositories
The public account is a single Risky Business Features episode from September 11, 2026, in which OpenSourceMalware founder Paul McCarty describes how researchers pull malicious packages apart and what one family does after removal.
Reality
- Evidence28
- Adoption
- Not scored
- Hype gap+22
- Incentives55
- Confidence34
buildOne report1 publisher Attackers rewrote wire details inside 500 French notary offices for four years
France's ANSSI spent two years quietly evicting a crew that had been altering payment instructions inside notary networks. The procedural fix that landed takes bank details off email rather than checking whether they changed.
Reality
- Evidence45
- Adoption58
- Hype gap−20
- Incentives42
- Confidence50
Operators of more than 180 Russian facilities, most of them inside Ukrainian strike range, have been told to fund counter-drone protection themselves, with temporary state administration as the penalty for those who do not.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 48%
- Investor
- Investor 30%
Reality
- Evidence55
- Adoption30
- Hype gap+20
- Incentives60
- Confidence55
buildOne report1 publisher A query string smuggled into the Host header makes Starlette skip authentication
X41 D-Sec's proof of concept for CVE-2026-48710 is one unauthenticated GET whose Host header carries /public?bar=. Starlette sits underneath LiteLLM, vLLM and MCP servers, so the work starts with a dependency query.
Reality
- Evidence56
- Adoption
- Not scored
- Hype gap+18
- Incentives55
- Confidence52
AFP charges two men near Perth over the self-spreading worm behind the TeamPCP compromises
Two suspects in Western Australia are in custody over the supply-chain worm that hit Trivy, KICS, LiteLLM and Telnyx. The 500,000 credentials it harvested stay valid until someone rotates them. Only 78,000 have surfaced publicly.
Reality
- Evidence50
- Adoption62
- Hype gap+14
- Incentives45
- Confidence52
Refusing a data demand becomes a criminal matter for Dutch companies and citizens, while the panel that reviews taps in advance shrinks, which changes the disclosure math for anyone hosting or peering in the Netherlands.
Reality
- Evidence55
- Adoption20
- Hype gap+12
- Incentives72
- Confidence62
Cloudflare and Google DoH/DoT endpoints are failing on Russian networks, but the largest public measurement found no protocol-wide block. That makes the breakage messier, not milder.
Perspective Coverage
3 publishers
- Builder
- Builder 30%
- Operator
- Operator 53%
- Investor
- Investor 17%
Reality
- Evidence58
- Adoption34
- Hype gap+42
- Incentives62
- Confidence61