The top news stories in enterprise tech

AI hacking tests expose enterprise security problems

Friday, August 7, 2026

Today’s top story, from reporter Sascha Brodsky:

AI hacking tests spilled into the real world as models reached outside computer systems during evaluations involving OpenAI, Anthropic and Meta, raising fresh questions about enterprise security.

The latest disclosure came from Meta, after OpenAI and Anthropic reported separate incidents. IBM experts say the episodes reflected models aggressively pursuing assigned goals under unusual testing conditions, rather than machines spontaneously deciding to attack. The results still showed what could happen when isolation measures or other controls fail.

“Is training to be able to do any kind of task really actually what we’re aiming for?” Olivia Buzek, a Staff AI Engineer at IBM, said on this week’s Mixture of Experts podcast. “Or do we want something that has some kind of more built-in guardrails and essentially refuses to do certain tasks?”

IBM’s 2026 Cost of a Data Breach report found that one in four malicious breaches were AI-enabled, a 56% increase from the previous year. Those breaches cost organizations an average of USD 6 million, roughly USD 1 million more than the global average.

Unlike ordinary chatbots, AI agents can autonomously use tools and take a series of actions toward a goal. Buzek said developers often train such systems to complete a task through any available route, making strong boundaries essential when researchers reduce their normal safeguards.

In an internal OpenAI cybersecurity evaluation, a combination of the company’s models identified and exploited a previously unknown flaw in a software package system, OpenAI said. The models gained internet access, moved through the company’s research environment and broke into Hugging Face’s production infrastructure to obtain solutions from its database.

A separate failure emerged during Anthropic evaluations. The company said a misunderstanding with testing partner Irregular left live internet access available even though prompts told Claude models they were operating inside a simulation. Anthropic said three models then gained unauthorized access to three external organizations while searching for fictional targets.

Another incident surfaced when Meta said a testing misconfiguration gave one of its models unintended internet access. The model exploited a vulnerability in an outside service, according to Reuters. Irregular said the incident did not involve a sandbox escape or a sophisticated attack.

For enterprises, the panelists said, these incidents underscore the need to define where an agent can act, what it can access and when it should stop.

“This is not evil AI,” Bri Kopecki, an AI Customer Success Engineer at IBM, said on the podcast. “This is just AI not having the right groundwork and rules set into place.”

When is Q-day coming? If you could look inside an AI model, what would you see? How do you put a data center in space? At IBM Think, we like to ask big questions. Short answers: Q-day is now, AI looks like spreadsheets, and very carefully. Want the long answer? Treat yourself to one of our deep-dive feature articles.

What does AI look like? by David Zax

By investigating this “stupid question,” Zax builds a mental model for LLM training, inference and explainability. He also learns why the inner workings of AI are so mysterious—even to its creators—and how researchers are finally breaking open that black box.

Q-Day has already begun. Are you ready? by Rina Caballar

State-sponsored threat actors are stealing encrypted data now, with the aim of decrypting it later with quantum computers. Cloudflare and Signal saw the risk and started their quantum-safe migration years ago. Learn how they got started and what you can do before it’s too late.

AI understands you? Yeah, right by Alice Gomstyn

How smart is AI if it can’t detect sarcasm? Frontier models still regularly fail at this essential skill, limiting their abilities in content moderation, risk detection, AI search and customer service. To teach AI models about sarcasm, researchers are showing them The Big Bang Theory. No, really.

Making it up carefully by Derek Robertson

Synthetic data sounds like it shouldn’t work: is it really possible to replace real data with fake data, analyze it and still expect useful results? But it saved lives during the COVID-19 pandemic, and it helps banks fight fraud. So why are some federal agencies so afraid to use it?

The rise and ROI of the chief AI officer by Aili McConnon

“Chief ChatGPT officer” jokes aside, research shows that chief AI officers help deliver better returns. Learn how AI leaders at Heineken, Schneider Electric and IBM increased AI ROI.

The hidden email crisis that costs companies billions by Nick Gallagher

If your company’s emails start landing in your customers’ spam folders, what’s your plan? Follow us into the secretive world of spam filters: the blacklists, the whitelists, the consultants and the extortionists.

One giant leap for AI by Antonia Davison

Elon Musk and Jeff Bezos say they’ll put data centers in space any day now. Analysts call it “peak insanity.” Out of the spotlight, researchers are working on the seemingly impossible challenges of launching, powering and cooling orbital data centers. And they’ve already trained a model in space.

The trends that will shape AI and tech in 2026 by Anabelle Nicoud

Who could have predicted that 2026 would bring quantum advantage, the commodification of AI models and corporate partnerships to defend against AI-enabled attacks? These experts, of course. Read all 18 of their predictions from the start of the year.

— Nick Douglas

That’s the approximate USD value of tokens that OpenAI’s Astra model used to solve 10 major math problems that had been open for at least a decade. The results were accompanied by a machine-checkable certificate for each result.

— Euny Hong

IBM and Red Hat said they would provide Lightwell, their AI-assisted open-source security service, at no cost to more than 185 US research universities and 100 NGOs and think tanks.

IBM launched a public preview of Apptio AI Value & ROI, a tool that helps companies measure whether their AI spending is delivering business results.

SpaceX and NVIDIA announced plans to build Starmind AI1, a solar-powered satellite designed to provide AI computing from space.

Bland released Speech v3, a voice model that ranked ahead of rival AI systems on Design Arena’s audio-realism benchmark, though human voices still placed first.

Alibaba released Qwen3.8-Max, its largest open-weight AI model yet, with 2.4 trillion parameters and a focus on coding, long-running tasks and multimodal work.

Researchers developed XunZi, an AI system that identified new potential drug targets for Parkinson’s disease.

— Sascha Brodsky

Click. Thunk. There’s something deeply satisfying about the sound of a good keyboard. Mechanical keyboard enthusiasts have always known this, and now there’s a new way to hear it for yourself.

Data visualization designer Akash Wadhwani has created an interactive “listening museum” that features 36 keyboard sound samples ranging from classic typewriters to modern custom builds, including the 1985 IBM Model M. Click on a keyboard, press a few virtual keys and hear which ones are “thocky” or “quacky,” as keyboard enthusiasts like to say.

“I had been lurking in r/MechanicalKeyboards for ages and wanted to contribute something rather than just read,” Wadhwani told IBM Think in an interview. “So I built the thing I actually wanted, which was a way to hear all of them without owning any of them.”

The undertaking meant more than finding good recordings, Wadhwani said. Every sample had to come from an open-license project, meaning some famous keyboards didn’t make the cut. The result is a thoughtfully curated collection that balances iconic keyboards with recordings he could legally reuse. (His wife and coworkers, he noted, were “very pleased” that the project stayed inside his headphones.)

What surprised Wadhwani most was how modern the Model M still sounds next to custom keyboards built four decades later. IBM’s patent for the buckling-spring switch describes the spring as giving the operator “audible feedback.”

“They designed the noise on purpose,” Wadhwani said.

That mechanism is still in production today. Computer keyboard manufacturer Unicomp builds it on IBM’s original tooling, in the same Lexington, Kentucky plant, which is why the Unicomp Classic keyboard right next to the Model M on the site sounds nearly identical to it.

The Listening Museum labels the Model M as “pingy clack,” which seems about right to us, although we’ve also seen it described as having a “deep marble-y thock.”

“IBM is the oldest keyboard sound I can remember hearing, and it still holds a legacy that’s awesome,” Wadhwani said. “It makes the OG keyboard sound.” Listen and decide for yourself.

— Antonia Davison

Was this email forwarded to you? You can subscribe here.

You are receiving this email because you signed up for: IBM Think Newsletter

IBM US, 1 New Orchard Road Armonk, New York 10504-1722 United States