The Week · Aug 17 to Aug 23

A second edition covering Aug 20–22, with no repeats from the morning edition or Aug 21.

80 stories across 6 briefings. The headline is from Sat, the busiest day.

Day by day

All weeks →

Tue 18
CISA adds an actively exploited Ray RCE to the KEV catalog
Correction to our Aug 12 item: Anthropic canceled the Sep 1 Sonnet 5 price increase
Black Hat: one GitHub issue reached CI runner secrets in Claude Code, Gemini CLI, and Codex
Wed 19
Unauthenticated SSRF in MLflow (CVE-2026-64849, CVSS 9.3) is being exploited in the wild
A GitHub outage on Aug 17 took down Actions, Copilot, and SAML/OIDC together
Stripe reportedly finalized a $7B+ acquisition of OpenRouter
Thu 20
Zero-click Grok data theft via "cryptographic context injection"
NSA/CISA/FBI/DOE/EPA joint advisory: attackers are using AI assistants to write Siemens S7 PLC exploit tooling
GitHub's outage post-mortem (update): 7h47m, caused by an autoscaling policy that watched the wrong metric plus a latent VS Code retry bug that amplified traffic ~10x
Fri 21
Slack Code launched: coding agents get their own channels
Critical sandbox escape in isolated-vm
Microsoft patched a one-click Copilot data-theft chain 8 months after disclosure
Sat 22
Unpatched Grok data-exfiltration chain: asking it to summarize a web page can leak your name, location, tier, and conversation
NSA/CISA/FBI/DOE/EPA warn of active AI-generated exploit scripts against Siemens S7 PLCs
GitHub Copilot agent sessions now run inside Slack and Microsoft Teams channels
Sun 23
Claude 3 Haiku shuts down on Vertex AI today
Anthropic and EPFL built self-propagating "mind viruses" that spread between agents through self-modifiable memory files
A 27B-parameter agent from DeepMind alumni beat Claude Opus 4.8 and GPT-5.5 at reproducing published research

Busiest tags

Signal →

Agents 24 stories · +16 vs last week
Infra 18 stories · +9 vs last week
Security 16 stories · +8 vs last week
Policy 12 stories · +5 vs last week
Trending 11 stories · same as last week