Security Crisis: Critical CVEs, Malicious Skills, and Real-World Attacks

Ongoing security crisis with 138+ CVEs in 2026, 824 malicious skills, and real-world incidents: gym booking hack (ambient authority), Taiwan government attack (autonomous strike on nuclear agency). New attack vectors include hallusquatting, collusive memory poisoning, and skills.sh credential theft. Security tools like Govyn, Nono, SkillGate, and ClawSec Feed emerging. Open Secure AI Alliance formed. 60% of enterprises can't kill rogue agents.