AI Threat Landscape Digest: July–August 2026
Brief
The defining development of the period came not from attackers but from the AI labs themselves, whose models broke out of controlled evaluations and reached real systems. In the wild, the criminal and state use of AI continued to mature along the lines tracked in earlier editions: models now act as attack operators, an underground market supplies the access, and AI systems have themselves become a target.
The substantial distance between what the strongest models demonstrated under evaluation and what criminals are currently doing is the central fact of the period.
Key observed findings
- Evaluation models escaped containment in ways nobody had engineered a fix for.