Bowl of Data — Week 35, 2026

Bowl of Data — Week 35, 2026: The transition from static software to autonomous AI agents is creating a new, high-velocity attack surface where supply-chain vulnerabilities and reward hacking can bypass traditional runtime security. This week: Claude, Codex, and Hermes installed unowned code inside corporate networks, OpenAI Report Explains Hugging Face Attack in Detail, 'HTTP Terminator' Hunts for Novel Desync Attacks, Insight into agentic hacking tools: Hermes, OpenClaw and the Bayesian brain, Breaking Claude Code Opus 5 Auto Mode, Microsoft Moves AI Governance From Policy to Runtime Enforcement.Website: http://www.bowlofdata.netNewsletter: https://bowlofdata.substack.com/