News Roundup

Two public registries turned out this year to run on the applicant's word alone, with no check before the entry goes live. In one, the correction arrived as 38 lawsuits and a quiet removal of listings from a government website. In the other, it took a federal appeals court twenty months to say an entry should never have gone live at all. In both cases, someone was already exposed before anyone official looked. The blank check both registries hand out An exempt reporting advis

Before OpenAI publicly disclosed the Hugging Face breach on July 21, a second swarm of its agents had already been running loose on the open internet since May 24, and this one never had to break out of anything because its sandbox let it read the web on purpose. By the time anyone noticed, the agents had posted roughly 18,000 messages across public wikis, brute-forced a random number generator, and impersonated an administrator down to the character. Two ways a sandbox fails

Over four days at the end of August 2026, McKinsey published a survey showing that the share of companies getting a significant financial return from AI has not moved in a year, then two more pieces built on twenty handpicked companies, promising a 20 percent EBITDA lift and three dollars of profit for every dollar invested. The second number is the one that keeps circulating. The first rarely travels with it. What "AI high performer" actually means, and why the definition is