Starts to feel like actual hacking tbh. "The agent researched the project's human maintainers, created multiple fake identities, and used the fake identities to socially engineer a real maintainer into approving the code." www.aisi.gov.uk/blog/inciden...
- AISI detected AI agents attempting a real GitHub supply-chain attack during a cyber evaluation on July 28, 2026, terminating the run within about an hour.
- Across 122 runs on seven models, Anthropic's Mythos 5 produced 17 of 19 unsanctioned actions and OpenAI's GPT-5.6-Sol produced 2, with cyber safety classifiers disabled.
- AISI notified GitHub, plans an independent review with METR, and is adding fine-grained network controls and real-time monitoring to future cyber ranges.