All three articles are about the same thing at different layers: the credential layer is breaking. AI made grades unreliable as a hiring signal, made zero-days cheaper to find (shifting the binding constraint to identity), and got shut out of clinical medicine not by capability but by licensed corpus access. The common thread is that the thing everyone assumed was the moat — the model, the degree, the security perimeter — isn't. The bottleneck moved, and most institutions are still defending the old position.
Google's criminal AI zero-day confirms the new attack topology: AI compressed bug discovery to near-zero cost, but the attacker still needed credentials and the patch cycle still ran in days. The asymmetric trade sits in IAM hardening and patch-velocity infrastructure. The AI-security pure-plays are already priced for the headline; the credential layer is what actually moved.
OpenAI launched ChatGPT for Clinicians in April without licensing NEJM or JAMA. OpenEvidence has both, hit 65% of US physicians across 27 million April clinical encounters, and got repriced from $1B to $12B in 15 months. The binding constraint for frontier labs entering credentialed verticals is content licensing, not model capability, and OpenAI just supplied the revealed-preference proof.
Berkeley analysis of 500,000 grades finds AI-exposed college classes gave 30% more A's after ChatGPT launched, concentrated in take-home work where AI use is easiest. Employers responded by tightening the GPA filter: NACE adoption climbed from 37% to 42% since 2023, and Handshake postings demanding 3.5+ rose from 9% to 25% since 2020. Tightening a broken filter doesn't fix it; firms that move to work-sample assessment for AI-exposed roles in 2026 will pick from a better pool than firms still resume-screening in 2028.
