An agentic intrusion that reached Hugging Face production through a public code-evaluation harness, and the disclosure, forensics, industry response and policy backdrop over the four weeks that followed.
27 stagesMay 7 – Aug 31, 2026AttacksActiveDragos documented the first public case of commercial LLMs — Anthropic's Claude as the technical workhorse, OpenAI's models in support — used to run an intrusion at a Mexican water utility, with Claude autonomously pursuing an OT/SCADA interface. It lands amid a wave of (non-AI) attacks on US water systems and a state and federal response now taking shape.
6 stagesMay 6 – Aug 31, 2026PolicyActiveThe first federal prosecution over AI-generated CSAM ran in parallel with four years of Stable Diffusion releases, takedowns and safety pledges. The courts could not reach private possession; every withdrawal that stuck landed somewhere other than the version named in the indictment. Civil liability is the one thing moving the other way.
11 stagesOct 20, 2022 – Aug 25, 2026