AMÁLIA · The Three Hard Questions.

Portugal’s €5.5M AMÁLIA LLM is operational but faces key structural questions on openness, native data, and goals, raising broader European concerns.

The Atlas. What the framework is.

An in-depth look at The Post-Labor Transition Atlas, a new empirical framework analyzing AI-driven labor displacement and policy responses as of 2026.

China Sphere Capability Gap, Q2 2026 Update: Five Labs, Five Strategies, One Narrowing Frontier

Chinese labs launched five frontier-tier models in April 2026, narrowing the US-China AI gap in capability, cost, and scale, according to recent reports.

The Regulatory Vacuum.

Google disclosed a zero-day vulnerability exploited by criminals on May 11, 2026, but no regulatory framework exists to manage AI-discovered risks, raising concerns about security gaps.

Three Public Vulnerabilities. Chained.

A sophisticated chain of three public vulnerabilities enabled a breach of TanStack/npm packages on May 11, 2026, highlighting the rapid evolution of AI-augmented attack tradecraft.

ShinyHunters · The New APT Model.

ShinyHunters has evolved into a structured, AI-enabled threat actor operating as a collective, with a scalable extortion and data theft model, marking a shift from traditional APTs.

The Roblox Cheat That Broke Vercel.

A Roblox auto-farm script downloaded by an employee led to a breach of Vercel, exposing customer credentials across major cloud platforms in April 2026.

The OAuth Permission Apocalypse.

Analysis of the ‘Allow All’ OAuth permission pattern, its risks, and implications for enterprise security in 2026.

The Defender’s Counter-Cascade.

On May 11, 2026, Google disclosed the first confirmed use of AI-built zero-day exploit, highlighting deployment gaps in AI-driven security defenses.

732 Bytes to Root. One Hour of Scan Time.

A 732-byte Python script exploits a zero-day in Linux kernels since 2017, revealing a significant security vulnerability and raising questions for enterprise defense.