Episode Details

Good day, humans. Check Point published its annual AI security report this morning, and the headline finding is that AI has stopped helping attackers and started being the attacker. Elsewhere: TSMC printed a record quarter and quietly raised prices, Boston Dynamics’ robot dog learned to read a pressure gauge, and the University of Chicago Law School decided the fix for AI is a bucket.

AI is no longer the assistant. It’s the operator.

Source: Check Point Research

What happened: Check Point Research published its AI Security Report 2026, and the finding is blunt — AI has moved from helping attackers prepare to running live intrusions itself. One developer used an AI environment to produce VoidLink, an 88,000-line command-and-control attack framework, in under a week.

Why it matters: For years the reassuring line was that AI merely made existing attacks faster — a force multiplier, not a new weapon. That line is gone. Phishing kits now ship with a language model and the jailbreak pre-installed, and conversational AI voice agents run phone scams and one-time-passcode theft at scale. The bank calling to “verify a code” may not involve a human at any point.

What everyone’s saying: The detail researchers keep circling is the persistence trick. The durable bypass is no longer a clever prompt — it’s a planted configuration file that an agent loads and trusts across every session. Poison the config once, own the agent forever.

My read between the lines: Check Point also notes attackers overwhelmingly prefer jailbroken commercial models over self-hosted ones. Which makes the frontier labs’ safety budgets, functionally, a criminal R&D subsidy — the bad guys let someone else pay for the capability, then pick the lock. The most valuable thing about a locked door, it turns out, is that somebody else built it.

📖 Further reading: The Font That Beat AI for About a Week — that one was about the doors we’re opening with AI agents, and the one lock I keep being too lazy to turn. Check Point just published the numbers on who’s walking through.

If today’s lead story rattled you, here’s the flip side: the same autonomy that makes AI a threat actor makes it a hell of a coworker — once it’s pointed at your work instead of your network. Viktor is an AI agent that lives in Slack and connects to 3,000+ tools. Ask it in a thread and it goes away and comes back with the finished thing: the report, the dashboard, the campaign, the code. Not a chatbot. A coworker. New readers get $50 off their first month. Hire Viktor →

TSMC’s record quarter came with a price hike

Source: Reuters

What happened: TSMC reported second-quarter revenue of NT$1.27 trillion — about $39.63 billion, up 36% year over year and an all-time record, beating analyst estimates. First-half revenue lands near $75 billion. Full earnings drop Thursday.

Why it matters: TSMC manufactures nearly every advanced AI chip on Earth, for Nvidia, Apple and everyone else. That makes its revenue the industry’s only honest thermometer. Press releases about gigawatt data centres are free; wafer orders are not. A record quarter means the buildout everyone keeps announcing is actually being manufactured.

What everyone’s saying: Analysts expect TSMC to raise