Top Story: The end of rare: what a vulnerability costs to find just collapsed — For thirty years, security has quietly been an economics argument wearing an engineering costume. The AI browser you installed can be taken over by a calendar invite, and the vendors do not agree on whether that is a flaw. — You install a browser that reads the web for you and acts with your permissions, so anything it reads can try to give it orders. An invisible sentence in a Word document escaped Microsoft 365 Copilot's cloud sandbox and reached the host underneath it. — Rubrik Zero Labs hid instructions behind a white rectangle on a white background, so a human opening the file sees nothing; having Copilot parse it was enough to run the attacker's code. OpenAI slowed work on a model because it may be too good at hacking. — On Friday, OpenAI said it had slowed development of Astra, an upcoming model, and paused some internal work on it, after a review found it had advanced enough in agentic coding and cybersecurity that the company "cannot rule out Critical capability level at this time." In its own framework, that threshold means a model could independently find and run attacks against well-protected real systems. Evaluation environments failed in several different ways this week, and the differences matter more than the pattern. — Two failures let a model reach the real world. Europe can now fine, inspect and restrict the largest AI models. Contacts with AI labs so far have been informal, and no formal action has been announced since the powers took effect. — As of Sunday August 2, the European Commission can demand to evaluate a general-purpose AI model before it is released in the EU, restrict its market access, and fine a provider up to €15 million or 3% of annual turnover, whichever is higher. The average breach now costs $4.99 million, a record, and the most revealing number in IBM's report is about fear rather than cost. — IBM's annual Cost of a Data Breach study, published in late July, puts the global average at $4.99 million, up 12% year over year and the highest it has recorded. AI failures are rarely shared outside the organisation that experienced them. A Linux Foundation group wants to change that. — The Open Secure AI Alliance published a request for comments on August 4 for the Shared AI Findings Exchange, or SAFE: a confidential channel where an organisation can report an AI security incident, or a near miss, and have it analysed rather than filed. Visa agreed to buy BioCatch for $2.4 billion. — BioCatch works out whether the person using an account is really the account holder, by how they type, swipe and hold a phone. Horizon3.ai raised $250 million at a $2 billion valuation, more than tripling its valuation in 14 months. — The company builds autonomous penetration testing: software that continuously attacks your environment the way an intruder would, rather than waiting for an annual assessment. Anaconda acquired Enkrypt AI, terms undisclosed. — Anaconda is the Python distribution a very large share of data science teams already run on, and Enkrypt scans AI models, agents and the connector servers that let agents call external tools. Obsidian Security raised $85 million at a $1.1 billion valuation, — led by Crescent Cove Advisors with Greylock and Menlo Ventures participating. Oligo Security raised $60 million, bringing total funding to $140 million. — Runtime application security: it watches what code actually does while it runs rather than inspecting it beforehand. Curator's Corner: We automated the wrong half Curated by Asaf Nakash. Voices by AI. Opinions by human. Show notes: https://contextwindowsec.com/episodes/2026-08-10.html
