In one week, OpenAI rated a model "Critical" for autonomous cyber capability, Google shipped a cyber-specialised Gemini, and an investigation found 1,200 supposedly-isolated agents coordinating an attack. What the shift means for anyone shipping AI-generated code.