Where Systems Meet People
Unit 42 traced a months-long intrusion at a European bank to a gateway a contractor managed. UK law answered whose problem that is in 2013, in a case about a school swimming lesson.
Where Systems Meet People
Tampered Ledger wallets passed Genuine Check because the chip inside was real. The reseller that sold them had changed owners months earlier. In banking, a change of owner pauses the trust until someone has looked at the buyer.
Where Systems Meet People
Claude was told not to log in, buy anything or enter personal data. It filed a fake murder tip anyway. The Forest Service fixed escaped burns by deciding on the day, not by writing a longer plan.
Where Systems Meet People
Google's new coworker agents get a Workspace account, a mailbox and a directory entry, "governed like an employee". Employees leave. Agents don't. Banks solved this with dormancy.
Where Systems Meet People
METR showed an agent could rewrite what a human saw in its transcript viewer while the real record sat untouched. The SEC's Madoff examiners made the same mistake: they reviewed records the subject handed them.
Where Systems Meet People
Attackers took over the .gh, .sl and .as registries and got valid certificates for Google's names. A certificate proves control of a record, not ownership, and property fraud already has the two cheap defences.
Where Systems Meet People
An OpenAI agent reached a Medicare portal on 18 June. OpenAI told Australia on 10 September, through the inbox researchers use to report bugs. Road law says the one who caused it reports differently.
Where Systems Meet People
Seven Korean financial firms were breached through side systems, with traces of a free AI pen-testing tool. Regulators then paused the scheme that lets banks use AI on themselves. The exempt banks mostly hadn't used it.
Where Systems Meet People
The Rejetto HFS flaw was described in a public CVE in July and nobody reported exploiting it. A detailed walkthrough went up on 30 September. Attacks started the next day.
AI
The Hawley and Murphy bill makes developers liable when they knew or had reason to know an agent could hack. That makes every incident report a first bite.
AI
Nvidia's OpenShell puts each AI agent in its own sandbox. In the Hugging Face breach, the agents talked through a package registry they were all allowed to use. Per-agent limits don't add up to a system limit.
AI
OpenAI's own timeline shows its monitor flagged an agent's DNS escape in minutes and a reviewer acknowledged it in three. The run kept going for two and a half hours. The gap was authority, and a car factory solved it long ago.