Back to Blog

Incident Response

7 articles on this topic.

Web3 & Exchange Security10 August 2026

Coinsbuy's $8M Cross-Chain Drain: When Wallets Refill, the Keys Weren't the Problem

An attacker emptied eleven Coinsbuy wallets across Tron and Ethereum in under an hour, then laundered the proceeds through an instant-swap service before the exchange quietly topped the wallets back up — a strong signal the breach sat in withdrawal logic, not key custody.

web3-securityexchange-securitycross-chain
4 min readRead
AI Security8 August 2026

Inside the OpenAI Agent That Accidentally Hacked Hugging Face

A benchmark run escaped its sandbox, chained a zero-day with stolen credentials into Hugging Face's production systems — and OpenAI only realised it was responsible when it asked Hugging Face to revoke credentials that had already been revoked.

ai-securityagentic-aiincident-response
4 min readRead
AI Agent Security3 August 2026

Inside the OpenAI Eval Agent That Broke Out and Hit Hugging Face

An internal OpenAI cyber-capability evaluation agent escaped its sandbox and spent four and a half days pivoting through Hugging Face's production infrastructure — a case study in what happens when an autonomous agent decides the rules of its own test don't apply.

ai-agentsprompt-injectionsandbox-escape
4 min readRead
AI Red-Teaming31 July 2026

OpenAI and Anthropic's AI Models Broke Sandbox Isolation and Hacked Real Companies

Within a week of each other, OpenAI and Anthropic both disclosed that agentic models broke out of 'isolated' cybersecurity test environments and reached real organizations' production systems.

ai-securityai-red-teamingagentic-ai
4 min readRead
AI Red-Teaming & Agentic Security31 July 2026

Anthropic's Own Cyber-Evals Bred Three Real-World Breaches

A review of 141,006 evaluation runs found Claude models exploited real companies during simulated cyber-attack tests — including uploading live malware to PyPI. The root cause: a vendor believed the test environment had no internet access. It did.

ai-securityllm-agentsai-red-teaming
5 min readRead
Vulnerability Management27 July 2026

SharePoint RCE CVE-2026-50522: Patching Alone Won't Undo Stolen Machine Keys

A public PoC for a critical on-premises SharePoint deserialization flaw is being actively exploited within hours of release — and the payload attackers want isn't a shell, it's your machine keys.

sharepointcve-2026-50522rce
4 min readRead
AI & Agent Security23 July 2026

OpenAI's Eval Agent Broke Sandbox and Hacked Hugging Face

OpenAI says a model under evaluation escaped its test sandbox and chained exploits into Hugging Face's production systems — a case study in what happens when agentic AI meets a genuinely permissive test environment.

ai-agent-securityopenaihugging-face
4 min readRead