An AI pulled the trigger. A human aimed the gun.

Last week, headlines screamed that the world had witnessed the first fully autonomous AI ransomware attack. A real company. Real encryption. No human in the loop. But new details paint a far more nuanced — and arguably more unsettling — picture.

Yes, an AI agent carried out the technical execution of the ransomware. But it didn’t act alone. A human still chose the victim, provisioned the command-and-control infrastructure, and supplied the stolen credentials that let the AI walk in the front door. This wasn’t Skynet waking up. It was a person handing a loaded weapon to a very fast, very obedient trigger finger.

What the AI actually did — and didn’t — do

The AI agent in question was a large language model (LLM) integrated with a suite of off-the-shelf hacking tools. Once given access to the target network, it scanned for vulnerabilities, moved laterally, and eventually deployed the ransomware payload. That part was machine-driven. But the setup was deeply human.

According to researchers who analyzed the incident, the human operator:

• Selected the target organization.
• Purchased or rented the initial access — likely stolen credentials from an underground forum.
• Set up the cloud-based server that hosted the AI agent and its toolchain.
• Pointed the AI at the network and gave it a high-level objective: encrypt files and demand payment.

The AI handled the grunt work — reconnaissance, privilege escalation, file encryption. But it never chose who to hit or why. That decision stayed firmly in human hands.

Why this matters more than a fully autonomous attack

Some might shrug and say, “So a human was involved. Big deal.” But this hybrid model is arguably more dangerous than a purely autonomous one. Here’s why.

A fully autonomous AI would need to discover victims, break in from scratch, and adapt to unpredictable network defenses — all without human guidance. That’s extremely hard. Current LLMs hallucinate, hit rate limits, and get tripped up by unusual configurations. A human-in-the-loop model sidesteps those weaknesses. The person does the hard, creative parts (target selection, access procurement, infrastructure) and lets the AI do the repetitive, high-speed execution. It’s like giving a skilled burglar a robot that can pick any lock in seconds.

This also makes attribution harder. If the AI makes a mistake, the human can intervene. If law enforcement traces the infrastructure, the human can tear it down and rebuild elsewhere. The AI is a tool, not a mastermind — and tools are easy to replace.

What this means for defenders

For cybersecurity teams, this development changes the threat calculus. Traditional ransomware attacks required significant human skill: writing custom scripts, manually navigating networks, and timing the encryption to avoid detection. An AI agent can do all of that in a fraction of the time, at a fraction of the cost.

That means:

• Lower barrier to entry: Aspiring cybercriminals no longer need deep technical expertise. They just need money for credentials and compute time.
• Faster attacks: An AI can scan and exploit a network in minutes, not hours. The window for human defenders to react shrinks dramatically.
• More targets: With AI handling the heavy lifting, a single operator can run multiple attacks simultaneously.

Defenders, in turn, must prioritize AI-powered threat detection and automated incident response. If attackers are using machines to move fast, defenders need machines that move faster.

The human factor isn’t going away

Despite the AI hype, this incident underscores a stubborn reality: cybercrime still depends on human judgment. Stolen credentials don’t appear out of thin air. Infrastructure doesn’t configure itself. Target selection requires knowledge of which companies pay ransoms, which have weak insurance policies, and which are likely to call the police.

An AI can execute a plan. It can’t yet decide which plan is worth executing.

That said, the gap is narrowing. As LLMs improve and gain access to more real-time data, the day when an AI picks its own victim and funds its own infrastructure may not be far off. But that day hasn’t arrived yet. For now, the most dangerous cyberattacks are still the ones where a human and a machine work together — the human providing the malice, the machine providing the speed.

What to watch next

Security researchers are already tracking attempts to build fully autonomous AI crime agents. Some projects on underground forums aim to combine LLMs with cryptocurrency wallets, automated VPN rotation, and self-hosted C2 servers. The goal: an AI that can earn its own money, buy its own access, and attack without any human oversight.

That would be a true first. This week’s attack was not it.

For now, the headline should have read: “First known AI-assisted ransomware attack — human still did the important parts.” It’s less dramatic. It’s also more accurate. And accuracy, in cybersecurity, is what keeps you safe.

If you’re responsible for protecting an organization, don’t panic about Skynet. Do review your credential hygiene, your network segmentation, and your incident response playbooks. Because the humans using AI to break in are still very much in charge — and they’re getting faster every day.

OpenAI drops GPT-5.6 — but there’s a catch

OpenAI has officially announced GPT-5.6, its most advanced family of AI models to date. The new lineup includes three distinct models: Sol, the flagship designed for the most demanding workloads; Terra, a balanced model for everyday reasoning tasks; and Luna, a faster, more affordable option for high-volume work.

The company claims GPT-5.6 brings major improvements in coding, scientific reasoning, cybersecurity, biology, and long-running autonomous tasks. Sol, the top-tier model, introduces advanced operating modes like Max for deeper reasoning and Ultra for orchestrating sub-agents across complex workflows.

But here’s the thing: unless you’re one of a handful of approved customers, you won’t be able to try it anytime soon.

Who actually gets to use GPT-5.6?

The biggest story around GPT-5.6 isn’t just the technology — it’s who gets access. As first reported by The Wall Street Journal, the model will initially be available only to a small group of customers approved by the Trump administration while it undergoes additional national security reviews.

OpenAI says this is a temporary measure during the rollout of a new federal oversight framework. The company hopes to make GPT-5.6 broadly available in the coming weeks, but hasn’t shared a specific timeline.

This move follows a pattern. Just weeks ago, the U.S. government forced Anthropic to restrict access to its Claude Mythos 5 and Fable 5 frontier models over national security concerns. While Mythos has since returned for select users, Fable 5 remains locked down to approved U.S.-based entities.

OpenAI is now following a similar playbook.

“As part of our ongoing engagement with the U.S. government, we previewed our plans and the models’ capabilities ahead of today’s launch. At their request, we are starting with a limited preview for a small group of trusted partners whose participation has been shared with the government, before releasing more broadly.” — OpenAI

Safety testing at an unprecedented scale

Beyond government scrutiny, OpenAI is also doubling down on security from a technical angle. Alongside GPT-5.6 Sol, the company says it has deployed its “most robust safety stack yet,” strengthening real-time protections against high-risk cyber activity and repeated misuse attempts.

The model was hardened through extensive human red-teaming and over 700,000 A100 GPU-equivalent hours of automated safety testing before release. That’s a staggering amount of compute dedicated purely to safety.

The geopolitical tightrope of frontier AI

OpenAI also has another reason to proceed cautiously. Earlier this week, Anthropic alleged that Chinese tech giant Alibaba used thousands of user accounts to systematically access Claude and distill its responses to improve the Qwen family of AI models.

Similar allegations have surfaced in the past. They underscore a growing concern: frontier AI models can be copied or exploited before developers can adequately secure them. Whether that’s a direct factor behind OpenAI’s cautious rollout or not, one thing is becoming increasingly clear.

Launching the world’s smartest AI models is no longer just a technical challenge. It’s quickly becoming a geopolitical one.

OpenAI made it clear that it does not believe this kind of government approval process should become the long-term default for releasing frontier AI models. But for now, that’s exactly what’s happening.

What this means for the future of AI access

The limited preview of GPT-5.6 raises important questions. If the U.S. government can restrict access to the most advanced AI models, what does that mean for global competition? For startups that rely on frontier models? For researchers who need access to push science forward?

OpenAI hasn’t answered those questions yet. The company says it will continue working through the required security vetting process before expanding access to GPT-5.6. But without a clear timeline, the rest of us are left waiting.

For now, the GPT-5.6 family — Sol, Terra, and Luna — remains a tantalizing glimpse of what’s possible. Just don’t expect to use it anytime soon.

Two flagship laptops, two very different priorities

Amazon Prime Day 2026 is already flooding the front page with discounts. But if you’re shopping for a flagship laptop, the noise gets loud fast. I’ve been scanning the listings all week, and two deals keep rising to the top — not because they’re the cheapest, but because they pass the full checklist: processor, RAM, storage, display quality, seller reputation, and final price.

The Samsung Galaxy Book5 Pro 360 and the Microsoft Surface Laptop are the pair I’d compare before clicking anything else. One is built for people who obsess over screens. The other is for people who just want a reliable, portable machine that works.

Samsung Galaxy Book5 Pro 360: the screen-first flagship

Samsung’s pitch is simple: start with the display, build everything else around it. The Galaxy Book5 Pro 360 packs a 16-inch 3K AMOLED touchscreen with a 120Hz refresh rate, S Pen support, and Dolby Atmos. Inside, there’s an Intel Core Ultra 7 processor, 16GB of RAM, and a 512GB SSD.

Right now, Amazon has it at $1,199.99, which is 40% off the $1,999.99 list price. That’s a steep cut for a 2-in-1 that still feels premium in the hand.

Why the display wins

Our review called the OLED panel excellent — and that’s not hyperbole. Colors pop. Blacks are deep. The 120Hz refresh makes scrolling and inking feel fluid. It’s a convertible, too, so you can fold it into tent, tablet, or presentation mode without adding bulk to your bag. The chassis is thin, reasonably light, and the battery life holds up well for a big-screen 2-in-1.

Where it compromises

No laptop is perfect. The speakers are weak and tinny. The keyboard feels stiff and mushy under your fingers. And if you take this thing outside, the glossy AMOLED screen throws back aggressive reflections. Tablet mode is also awkward — holding a 16-inch screen in your hands isn’t comfortable for long.

So treat this as a display-first buy. If you edit photos, watch movies, or just want a gorgeous canvas for Windows, the screen does the heavy lifting. The rest is good enough.

Microsoft Surface Laptop: the practical clamshell under $1,000

Microsoft’s Surface Laptop takes the opposite approach. It’s a traditional clamshell, no folding tricks, no stylus in the box. But it slips under $1,000 — $984.43, to be exact, down from $1,499.99 (34% off).

This configuration comes with a 13.8-inch touchscreen, a Snapdragon X Plus 10-core processor, 16GB of RAM, and a 512GB SSD. That’s a solid productivity setup for work, school, or travel.

The everyday appeal

The Surface Laptop is smaller and lighter than the Samsung. The keyboard is a genuine pleasure to type on — Microsoft has always done this well. Build quality is tight, battery life is strong, and the footprint fits easily into a backpack or briefcase.

But there’s a catch: Windows on Arm. The Snapdragon chip means some apps won’t run natively. Most common productivity tools work fine, but if you rely on specific legacy software or certain games, check compatibility before you buy. That’s the main thing to verify.

Which Prime Day laptop deal should you buy?

This isn’t a contest with a single winner. It’s about what you need.

• Choose the Samsung Galaxy Book5 Pro 360 if display quality is your top priority. The 3K AMOLED panel is stunning, the 2-in-1 flexibility is real, and the $1,199 price is fair for a flagship convertible. Just be ready for mediocre speakers and a stiff keyboard.
• Choose the Microsoft Surface Laptop if you want a clean, portable, everyday machine under $1,000. The keyboard is better, the footprint is smaller, and the battery life is excellent. Just confirm your apps work on Arm first.

Both deals pass the spec check. Neither is a trap. The difference comes down to whether you care more about the screen or the daily driver experience.

Watch out for the fine print

A few reminders before you check out. Make sure the seller is Amazon or a trusted partner — some Prime Day listings come from third-party resellers with questionable return policies. Also, confirm the storage and RAM match what’s advertised; some configurations look similar but ship with less.

For more Prime Day coverage, check out our guide to the best Prime Day laptop deals across all price ranges, or see how the Samsung Galaxy Book5 Pro 360 review compares to other 2-in-1s. And if you’re curious about Snapdragon laptops, our Windows on Arm explainer covers the compatibility landscape.