An AI agent went rogue at Meta and triggered a Sev 1. Anthropic shipped its own source code to npm by accident — then accidentally DMCA'd 8,100 GitHub repos trying to clean up. A Chinese state group weaponized Claude Code to run an espionage campaign with 90% autonomy. And a Nature Communications paper showed that reasoning models can jailbreak other models without human help. The threat landscape didn't just shift — it inverted.