Security firm documents first confirmed AI-powered cyberattack

Cybersecurity company Sysdig has documented what it describes as the first confirmed live cyberattack carried out by an autonomous AI agent — and it happened fast. According to Sysdig’s report, an LLM-based agent independently identified, accessed, and exfiltrated data from an AWS database in under one hour, with no human directing individual steps in the attack.

The incident marks a significant escalation in the AI security threat landscape. Until now, concerns about AI-assisted cyberattacks had been largely theoretical or limited to AI being used as a tool to help human attackers write malicious code or craft convincing phishing messages. This is the first publicly documented case of an AI agent autonomously executing a full attack chain — from reconnaissance through to data exfiltration.

The implications for security teams are significant. Traditional threat detection tools are calibrated around human-paced attack patterns. An AI agent that can compress what might take a human attacker hours or days into a sub-hour operation changes the window that defenders have to respond.

Sysdig’s findings arrived in the same week that the US Congress published its draft Great American AI Act, which specifically references the need for stronger cybersecurity requirements around frontier AI models. The bill proposes extending existing cybersecurity information-sharing legislation through 2035 and calls on government agencies to better assess risks from advanced AI systems.

The incident is already being cited by researchers and policymakers as a concrete example of why AI governance legislation can’t wait.


Sources: Sysdig security report, Build Fast with AI — June 2026

The US just proposed its most comprehensive AI law yet

On June 4, 2026, two bipartisan members of Congress released the discussion draft of the Great American Artificial Intelligence Act of 2026 — a 269-page proposal that would create the first comprehensive federal framework for governing artificial intelligence in the United States.

The bill was put forward by Representatives Jay Obernolte (R-CA) and Lori Trahan (D-MA), with four additional co-sponsors joining them. It targets what the draft calls “frontier” AI models — the most powerful systems trained with enormous computational resources — and builds around four pillars: model governance, workforce impact monitoring, cybersecurity, and AI research funding.

Key proposals in the draft include mandatory semi-annual third-party safety audits for major AI developers, penalties of up to $1 million per day per violation for ongoing non-compliance, and $100 million per year authorised for a Centre for AI Standards and Innovation within the Commerce Department.

The most contested provision is a three-year freeze on state-level laws that specifically regulate how AI models are developed — though states would retain authority over how AI systems are used and deployed within their borders. Supporters argue the preemption prevents a confusing patchwork of 50 different state rules from slowing innovation. Critics, including consumer advocacy group Public Citizen, say it strips states of the ability to protect residents from documented harms that Congress has repeatedly failed to address at the federal level.

The draft is currently in a public comment period before formal introduction.


Sources: Representative Obernolte’s office, FedScoop, Roll Call — June 4, 2026

Microsoft launches its own AI models — and takes aim at OpenAI

At its Build 2026 developer conference in San Francisco on June 2, Microsoft unveiled a family of seven in-house AI models under the MAI (Microsoft AI) brand — the company’s clearest signal yet that it intends to reduce its dependence on OpenAI after years of deep partnership.

The flagship model, MAI-Thinking-1, is Microsoft’s first in-house reasoning model. It was trained from scratch on commercially licensed data with no distillation from OpenAI, Anthropic, or any other third-party model — a point Microsoft emphasised specifically to reassure enterprise clients with strict data provenance requirements. In blind evaluations, MAI-Thinking-1 reportedly performed on par with Claude Opus 4.6 on the SWE Bench Pro coding benchmark.

Also launched the same day was MAI-Code-1-Flash, a 5-billion-parameter coding model that immediately rolled out to all paying GitHub Copilot users. Additional models in the family cover transcription, voice synthesis, and image generation.

The strategic context is hard to miss. Microsoft has invested roughly $13 billion in OpenAI since 2019. But the renegotiated partnership agreement in late 2025 gave both companies room to pursue independent strategies. By running its own models on Azure rather than licensing them externally, Microsoft avoids paying royalties to OpenAI — savings CEO Satya Nadella said can be passed along to developers. Microsoft AI CEO Mustafa Suleiman framed the goal simply: “long-term self-sufficiency.”


Sources: CNBC, Microsoft Build 2026 keynote, EnterpriseDNA — June 2026

Anthropic files for IPO at a $965 billion valuation

Anthropic, the company behind the Claude AI model, filed confidentially with the US Securities and Exchange Commission for a public listing on June 1, 2026 — just days after closing a $65 billion Series H funding round that valued the company at $965 billion. The targeted listing window is October 2026 on NASDAQ.

The round was led by Altimeter Capital, Dragoneer, Greenoaks, and Sequoia Capital, and pushed Anthropic’s valuation past OpenAI’s — which was last reported at $852 billion in March 2026 — for the first time. It’s a striking reversal for a company founded in 2021 by former OpenAI researchers who were concerned the industry was moving too fast without adequate safety guardrails.

The revenue trajectory is what’s drawing investor interest. Anthropic reported $4.8 billion in quarterly revenue in Q1 2026 and is projecting $10.9 billion for Q2 — more than doubling in a single quarter and exceeding the company’s entire 2025 annual revenue. However, operating margins remain thin at roughly 5%, reflecting the enormous cost of running frontier AI models at scale.

Unlike OpenAI, which is still navigating a complex conversion from non-profit to for-profit status, Anthropic operates as a traditional venture-backed corporation — giving it a simpler path to a public listing.

The IPO, if it proceeds, would be one of the largest technology debuts in US market history, potentially ranking Anthropic among the top 50 most valuable publicly listed companies on its first trading day.

ChatGPT gets a memory overhaul with Dreaming V3

OpenAI rolled out its biggest memory upgrade yet to ChatGPT on June 4, 2026, with a new architecture it calls Dreaming V3. The update changes how the chatbot stores, weighs, and applies what it learns about users over time — and it’s a meaningful shift from how memory has worked until now.

Previously, ChatGPT’s memory relied on explicit instructions. You had to tell it to “remember” something, and those notes would go stale the moment circumstances changed. Dreaming V3 replaces that with a background process that automatically synthesises context from past conversations, keeping information fresh, relevant, and current — without you having to manage it manually.

The practical difference is significant. If you’d previously told ChatGPT about an upcoming trip, the old system might still reference it as “upcoming” months later. Dreaming V3 is designed to recognise that time has passed and update its understanding accordingly.

OpenAI reports factual recall rising from 41.5% in 2024 to 82.8% in 2026 on its internal evaluations, though these figures are self-reported and haven’t been independently verified.

The rollout started with ChatGPT Plus and Pro users in the United States, with free-tier access planned for the weeks ahead. A roughly 5x reduction in the compute needed to serve Dreaming makes the free-tier rollout practical for the first time, alongside doubled memory capacity for paying subscribers.

Privacy controls come with the upgrade. Users can view, edit, or delete anything the system has inferred about them via a new Memory Summary page, and a full opt-out remains available through temporary chat mode.