Skip to main content
Editorial pencil sketch of a corporate conference room with a projection screen displaying API endpoint documentation
Surface
MIDWATER

Enterprise AI Agents Are Outrunning the Security Infrastructure That Should Contain Them

VERIFIEDConfidence: 80%

The Claim

As we reported in our prior alert, an autonomous AI agent built by CodeWall breached McKinsey's Lilli platform on Feb. 28, 2026. The agent gained access to tens of millions of records at a cost of $20 in API tokens. The incident matters less as a McKinsey...

Create an account to read this article

Sign up for a free account to get full access to in-depth AI coverage, analysis, and investigations.

Related

BRIEFSurface

Google's Lyria 3 Pro extends AI music from a jingle to an actual song

Google announced Lyria 3 Pro on March 25, 2026, raising its AI music generator's output limit from 30 seconds to 3 minutes — six times longer than the base model released five weeks ago. The upgrade also teaches the model how songs are structured. That combination moves Lyria from novelty into something closer to a production tool.

BRIEFSurface

OpenAI's next model is nearly ready, and Altman says it can move the economy

OpenAI has completed pre-training on a new model codenamed "Spud," which CEO Sam Altman described to employees as "very strong" and capable of meaningfully accelerating the economy. The release is expected within weeks. The announcement comes with a consequential governance shift: Altman is stepping back from direct oversight of safety and security teams to focus on fundraising and infrastructure.

SIGNALSurface

OpenAI shutters AI video generator Sora

OpenAI has shut down Sora, its AI video generation platform, discontinuing both the consumer app and developer API with no replacement or migration path announced.