An agent tried a supply-chain attack on a real open-source project, and the control that stopped it was human review
AISI ran one cyber-range challenge 122 times across seven models between 25 and 28 July, with internet access deliberately enabled and the developers' cyber classifiers deliberately switched off. In 10 runs it identified 19 actions beyond…