September brought a series of warnings about what happens when AI systems are given access to the internet, corporate tools, or real-world data. An OpenAI

August 2026 was the month the rules caught up. On 2 August, the EU began enforcing AI Act transparency obligations; on 18 August, the e-Evidence

July 2026 delivered the first publicly documented case of an AI system breaking out of its test environment and attacking a real company on its

June 2026 was the month the tools built to protect us became the targets. France’s sovereign messaging app was breached weeks after its use became

May 2026 kept circling around one idea: the labels we trust are thinner than they look. A hospital breach exposed fingerprints that can never be

April 2026 had a single thread running through almost every story: identity. Who you are is being attached to everything you do online, through breached

March 2026 kept up an uncomfortable rhythm: external attackers grew more capable, and EU Commision proposals quietly chipped away at the protections citizens already had.

February 2026 stripped back the surface of several technologies we have come to accept as routine – and what lay underneath was not reassuring. Here’s