https://gridthegrey.com/Real-time AI security intelligence — adversarial ML, LLM vulnerabilities, and supply chain threats mapped to MITRE ATLAS and OWASP LLM Top 10.Hugoen-usTue, 03 Nov 2026 20:53:35 +0530https://gridthegrey.com/posts/crowdstrike-acquires-fiddler-to-launch-falcon-observe-ai-agent-monitoring/Tue, 03 Nov 2026 15:23:04 +0000https://gridthegrey.com/posts/crowdstrike-acquires-fiddler-to-launch-falcon-observe-ai-agent-monitoring/Threat Level: MEDIUMFirst LookAgentic AILLM SecurityIndustry NewsAML.T0080 - AI Agent Context PoisoningAML.T0081 - Modify AI Agent ConfigurationAML.T0084 - Discover AI Agent ConfigurationAML.T0086 - Exfiltration via AI Agent Tool InvocationAML.T0051 - LLM Prompt InjectionAML.T0063 - Discover AI Model OutputsAML.T0110 - AI Agent Tool PoisoningCrowdStrike is acquiring Fiddler AI to deliver Falcon Observe, a dedicated observability capability for AI agents integrated into the Falcon platform. This closes a critical visibility gap for defenders who have had no enterprise-grade tooling to monitor AI agent behaviour, decision chains, and runtime anomalies at scale. The full defensive benefit depends on deployment maturity and how deeply organisations have already instrumented their agentic AI workloads.https://gridthegrey.com/posts/crowdstrike-launches-ai-kill-switch-for-rogue-agent-control/Tue, 03 Nov 2026 15:23:04 +0000https://gridthegrey.com/posts/crowdstrike-launches-ai-kill-switch-for-rogue-agent-control/Threat Level: MEDIUMFirst LookAgentic AILLM SecurityIndustry NewsAML.T0081 - Modify AI Agent ConfigurationAML.T0080 - AI Agent Context PoisoningAML.T0086 - Exfiltration via AI Agent Tool InvocationAML.T0103 - Deploy AI AgentAML.T0110 - AI Agent Tool PoisoningAML.T0084 - Discover AI Agent ConfigurationCrowdStrike has introduced an AI Kill Switch capability designed to give security teams immediate, authoritative control over AI agents that exhibit anomalous or unsafe behaviour at runtime. This closes a critical operational gap: defenders previously had no standardised mechanism to halt or contain agentic AI workloads mid-execution without tearing down the underlying infrastructure. The announcement is accompanied by acquisitions of Dreadnode and Fiddler, suggesting full-stack AI agent observability and automated testing are prerequisites to realising the kill switch's value in production environments.https://gridthegrey.com/posts/crowdstrike-acquires-dreadnode-to-add-ai-red-teaming-to-falcon/Tue, 03 Nov 2026 15:20:52 +0000https://gridthegrey.com/posts/crowdstrike-acquires-dreadnode-to-add-ai-red-teaming-to-falcon/Threat Level: MEDIUMFirst LookAdversarial MLLLM SecurityAgentic AIIndustry NewsAML.T0054 - LLM JailbreakAML.T0051 - LLM Prompt InjectionAML.T0015 - Evade AI ModelAML.T0018 - Manipulate AI ModelAML.T0043 - Craft Adversarial DataAML.T0031 - Erode AI Model IntegrityAML.T0044 - Full AI Model AccessCrowdStrike has announced the acquisition of Dreadnode, an AI security testing specialist, with the goal of integrating automated AI red-teaming and adversarial testing capabilities directly into the Falcon platform. This closes a meaningful gap for defenders who currently lack a unified, platform-native way to stress-test AI systems against adversarial inputs, jailbreaks, and model manipulation at scale. Full realisation of the benefit will depend on how deeply Dreadnode's tooling is integrated into Falcon's workflows and whether coverage extends to third-party and open-source model deployments — not just CrowdStrike-managed environments.https://gridthegrey.com/posts/anthropic-warns-rsi-threshold-is-now-imminent-in-s-1-filing/Tue, 03 Nov 2026 15:19:17 +0000https://gridthegrey.com/posts/anthropic-warns-rsi-threshold-is-now-imminent-in-s-1-filing/Threat Level: HIGHFirst LookRegulatoryIndustry NewsLLM SecurityAgentic AIAML.T0031 - Erode AI Model IntegrityAML.T0018 - Manipulate AI ModelAML.T0010 - AI Supply Chain CompromiseAML.T0020 - Poison Training DataAML.T0059 - Erode Dataset IntegrityAnthropic has disclosed in its S-1/A SEC filing that its internal estimates indicate it may imminently meet its own Responsible Scaling Policy definition of 'dramatically accelerated progress attributable to AI,' marking the first public regulatory-grade admission that recursive self-improvement (RSI) is operationally proximate. For defenders, this disclosure closes a significant situational awareness gap: organisations now have a named, policy-anchored threshold they can reference when stress-testing their AI governance frameworks and escalation procedures. The residual gap is substantial — Anthropic's admission that it has previously failed to recognise capability leaps until after they occurred raises urgent questions about whether any organisation's current monitoring and evaluation infrastructure is mature enough to detect RSI-class acceleration in near-real time.https://gridthegrey.com/posts/drafts/ncsc-uk-ai-enabled-cyber-intrusion-threat-outlook-to-2028/Tue, 03 Nov 2026 12:59:52 +0000https://gridthegrey.com/posts/drafts/ncsc-uk-ai-enabled-cyber-intrusion-threat-outlook-to-2028/Threat Level: HIGHAdversarial MLResearchRegulatoryIndustry NewsAML.T0047 - AI-Enabled Product or ServiceAML.T0043 - Craft Adversarial DataAML.T0088 - Generate DeepfakesAML.T0015 - Evade AI ModelAML.T0063 - Discover AI Model OutputsThe UK's National Cyber Security Centre has published a formal intelligence assessment examining how AI is actively enabling and accelerating cyber intrusion, projecting the threat landscape forward to 2028 through three plausible scenarios. The report draws on classified intelligence, industry knowledge, and academic sources to provide authoritative judgements on AI-driven threat trends. It serves as a key policy-informing document for UK government and industry defenders facing an evolving adversarial AI landscape.https://gridthegrey.com/posts/cve-2026-93680-langflow-rce-via-auth-bypass-hits-all-1-x/Mon, 02 Nov 2026 14:05:23 +0000https://gridthegrey.com/posts/cve-2026-93680-langflow-rce-via-auth-bypass-hits-all-1-x/Threat Level: CRITICALLLM SecurityAgentic AIIndustry NewsAML.T0040 - AI Model Inference API AccessAML.T0084 - Discover AI Agent ConfigurationAML.T0047 - AI-Enabled Product or ServiceAML.T0081 - Modify AI Agent ConfigurationAML.T0086 - Exfiltration via AI Agent Tool InvocationTwo critical vulnerabilities in Langflow, the widely-used open-source AI agent and workflow builder, allow unauthenticated remote attackers to bypass authentication and execute arbitrary code on affected servers running versions 1.0.0 through 1.12.8. A Metasploit module already targets the authentication bypass flaw (CVE-2026-93680) via Langflow's Model Context Protocol endpoint, lowering the bar for exploitation. The only remediation is upgrading to version 1.13.0, with no available workaround for systems that cannot immediately patch.https://gridthegrey.com/posts/muse-ai-agent-exposed-as-covert-commercial-surveillance-tool/Mon, 02 Nov 2026 14:05:23 +0000https://gridthegrey.com/posts/muse-ai-agent-exposed-as-covert-commercial-surveillance-tool/Threat Level: HIGHAgentic AILLM SecurityRegulatoryIndustry NewsAML.T0057 - LLM Data LeakageAML.T0086 - Exfiltration via AI Agent Tool InvocationAML.T0084 - Discover AI Agent ConfigurationAML.T0047 - AI-Enabled Product or ServiceAML.T0063 - Discover AI Model OutputsA Substack analysis alleges that Meta's Muse AI agent functions as a covert commercial surveillance network, harvesting user data under the guise of an AI assistant. The piece raises significant concerns about excessive agency, undisclosed data collection, and the exploitation of user trust in agentic AI systems. If substantiated, this represents a systemic abuse of the AI-as-assistant paradigm to conduct large-scale behavioural profiling.https://gridthegrey.com/posts/volta-infostealer-uses-claude-and-gemini-to-triage-victims/Mon, 02 Nov 2026 14:05:23 +0000https://gridthegrey.com/posts/volta-infostealer-uses-claude-and-gemini-to-triage-victims/Threat Level: CRITICALLLM SecurityJailbreaksAgentic AIIndustry NewsAML.T0047 - AI-Enabled Product or ServiceAML.T0054 - LLM JailbreakAML.T0065 - LLM Prompt CraftingAML.T0057 - LLM Data LeakageAML.T0040 - AI Model Inference API AccessAML.T0063 - Discover AI Model OutputsAML.T0113 - Steal Web Session CookieThe VOLTA-AUTODOXER infostealer represents a significant escalation in malware sophistication, weaponising commercial LLMs via OpenRouter to automatically prioritise stolen victim data by financial value. The malware implements a resilient multi-model fallback chain across Claude, Kimi, and Gemini, actively circumventing individual model refusals to generate monetisation-ranked dossiers. This marks a qualitative shift in infostealer design — transforming raw credential dumps into analyst-grade intelligence reports with minimal human operator effort.https://gridthegrey.com/posts/ai-tools-accelerate-software-vulnerability-discovery-at-record-pace/Mon, 02 Nov 2026 14:03:37 +0000https://gridthegrey.com/posts/ai-tools-accelerate-software-vulnerability-discovery-at-record-pace/Threat Level: HIGHResearchIndustry NewsLLM SecurityAML.T0040 - AI Model Inference API AccessAML.T0047 - AI-Enabled Product or ServiceAML.T0063 - Discover AI Model OutputsAI-assisted vulnerability research is now surfacing critical software security bugs at an unprecedented rate, with roughly 3% of all historically recorded critical vulnerabilities discovered in a single month. At current pace, AI tools are projected to add approximately 100,000 new vulnerabilities to the global total within a year — a 26% increase over the entire historical baseline. This acceleration fundamentally changes the defender calculus, as attack surface expansion now vastly outpaces traditional patch and triage cycles.https://gridthegrey.com/posts/volta-infostealer-uses-llm-chain-to-rank-victim-assets/Sun, 01 Nov 2026 14:19:47 +0000https://gridthegrey.com/posts/volta-infostealer-uses-llm-chain-to-rank-victim-assets/Threat Level: CRITICALLLM SecurityPrompt InjectionJailbreaksAgentic AIAML.T0051 - LLM Prompt InjectionAML.T0054 - LLM JailbreakAML.T0065 - LLM Prompt CraftingAML.T0040 - AI Model Inference API AccessAML.T0047 - AI-Enabled Product or ServiceAML.T0063 - Discover AI Model OutputsAML.T0057 - LLM Data LeakageAML.T0113 - Steal Web Session CookieVOLTA-AUTODOXER is a self-deleting Windows infostealer that integrates a multi-model LLM pipeline to automatically triage stolen credentials and rank victims by monetisation value, functioning as an AI-powered intelligence analyst for cybercriminals. The malware submits a structured victim evidence bundle to OpenRouter-hosted models—defaulting to Claude with Kimi-K2 and Gemini fallbacks—and prompts the model to produce a prioritised 'target assessment' dossier. The fallback chain, specifically engineered to bypass model refusals, represents a meaningful escalation in adversarial LLM abuse within commodity malware.https://gridthegrey.com/posts/northstar-security-launches-ai-agents-to-surface-toxic-risk-combos/Sun, 01 Nov 2026 14:18:28 +0000https://gridthegrey.com/posts/northstar-security-launches-ai-agents-to-surface-toxic-risk-combos/Threat Level: LOWFirst LookAgentic AIIndustry NewsLLM SecurityAML.T0012 - Valid AccountsAML.T0047 - AI-Enabled Product or ServiceAML.T0084 - Discover AI Agent ConfigurationAML.T0086 - Exfiltration via AI Agent Tool InvocationAML.T0110 - AI Agent Tool PoisoningNorthstar Security has emerged from stealth with $7 million in seed funding, offering an AI-agent platform that ingests data from over 70 enterprise security and IT tools to build a real-time Security Context Graph, identifying dangerous combinations of identities, assets, vulnerabilities, and business systems. The platform closes a significant visibility gap for defenders by correlating individually low-severity signals — such as an unmanaged device owned by a privileged user with access to a critical system — into actionable, prioritised findings that traditional siloed tools miss. Residual gaps include the maturity required to govern AI-driven remediation actions safely at scale and the depth of integration needed to ensure the graph reflects an organisation's full environment accurately.https://gridthegrey.com/posts/prompt-injection-in-court-filing-triggers-brazil-lawyer-sanctions/Sun, 01 Nov 2026 14:18:28 +0000https://gridthegrey.com/posts/prompt-injection-in-court-filing-triggers-brazil-lawyer-sanctions/Threat Level: HIGHPrompt InjectionLLM SecurityRegulatoryIndustry NewsAML.T0051 - LLM Prompt InjectionAML.T0068 - LLM Prompt ObfuscationAML.T0043 - Craft Adversarial DataAML.T0067 - LLM Trusted Output Components ManipulationA Brazilian labor court issued the likely world-first judicial sanctions for intentional prompt injection, fining two law firms after they embedded a hidden white-on-white instruction in a court filing designed to manipulate the court's Galileu AI review system. The concealed command directed any AI reading the document to respond superficially and avoid scrutinizing evidence, directly targeting judicial AI infrastructure. The case establishes a legal precedent that the machine-readable integrity of court documents falls within existing procedural good-faith obligations.https://gridthegrey.com/posts/chatgpt-html-preview-xss-enables-account-takeover/Sun, 01 Nov 2026 14:17:24 +0000https://gridthegrey.com/posts/chatgpt-html-preview-xss-enables-account-takeover/Threat Level: HIGHLLM SecurityResearchIndustry NewsAML.T0057 - LLM Data LeakageAML.T0077 - LLM Response RenderingAML.T0067 - LLM Trusted Output Components ManipulationAML.T0113 - Steal Web Session CookieAML.T0114 - AI Service Web InterfaceResearchers at Parameter Labs discovered a multi-stage exploit chain against ChatGPT's HTML preview (Canvas/artifacts) feature that allowed untrusted sandboxed iframe code to escape containment, inject unsandboxed iframes, and achieve JavaScript execution on the ChatGPT origin. By abusing a MathLive postMessage handler that used innerHTML and exploiting YouTube's oEmbed endpoint to bypass CSP script restrictions, attackers could exfiltrate private user data or perform actions on behalf of any signed-in user who visited a malicious shared ChatGPT URL. OpenAI patched the vulnerability and awarded a $5,000 bug bounty, though the severity of the exploit chain arguably warranted a higher payout.https://gridthegrey.com/posts/cathedral-ai-agents-breach-anthropic-systems-in-under-12-hours/Sun, 01 Nov 2026 14:16:23 +0000https://gridthegrey.com/posts/cathedral-ai-agents-breach-anthropic-systems-in-under-12-hours/Threat Level: HIGHAgentic AIIndustry NewsResearchLLM SecurityAML.T0047 - AI-Enabled Product or ServiceAML.T0086 - Exfiltration via AI Agent Tool InvocationAML.T0084 - Discover AI Agent ConfigurationAML.T0103 - Deploy AI AgentAML.T0057 - LLM Data LeakageAML.T0012 - Valid AccountsA cybersecurity startup called Cathedral used AI agents to compromise Anthropic's internal business systems in under 12 hours during an authorised security test, exposing employee data, salary records, Slack messages, and meeting transcripts. The breach highlights how AI-powered offensive tooling dramatically compresses attack timelines against enterprise software perimeters. While core model assets — weights, source code, and customer conversations — were reportedly not accessed, the incident raises serious questions about third-party software exposure at frontier AI labs.https://gridthegrey.com/posts/openai-updates-model-spec-to-sharpen-ai-judgment-and-safety/Fri, 30 Oct 2026 14:00:02 +0000https://gridthegrey.com/posts/openai-updates-model-spec-to-sharpen-ai-judgment-and-safety/Threat Level: LOWFirst LookLLM SecurityRegulatoryIndustry NewsAML.T0054 - LLM JailbreakAML.T0051 - LLM Prompt InjectionAML.T0015 - Evade AI ModelAML.T0018 - Manipulate AI ModelOpenAI has published an updated Model Spec that codifies five core values intended to guide more capable AI systems toward sound judgment, preservation of human agency, and faithful interpretation of human intent. For defenders and AI governance teams, this formalises a structured behavioural baseline that can anchor policy enforcement, red-team evaluation criteria, and vendor accountability frameworks. Residual maturity questions centre on how measurably these specified values translate into verifiable model behaviour, and whether third-party auditors can operationalise the spec independently of OpenAI.https://gridthegrey.com/posts/prompt-injection-targets-ai-agent-planning-in-new-attacks/Fri, 30 Oct 2026 14:00:02 +0000https://gridthegrey.com/posts/prompt-injection-targets-ai-agent-planning-in-new-attacks/Threat Level: HIGHPrompt InjectionAgentic AILLM SecurityResearchAML.T0051 - LLM Prompt InjectionAML.T0080 - AI Agent Context PoisoningAML.T0065 - LLM Prompt CraftingAML.T0068 - LLM Prompt ObfuscationAML.T0086 - Exfiltration via AI Agent Tool InvocationAML.T0110 - AI Agent Tool PoisoningAML.T0084 - Discover AI Agent ConfigurationAML.T0094 - Delay Execution of LLM InstructionsCrowdStrike has published research detailing new prompt injection techniques specifically targeting the planning and reasoning phases of AI agents, representing an evolution beyond simple input manipulation. These agent-planning attacks exploit the multi-step reasoning pipelines that autonomous AI systems use to decompose and execute complex tasks, potentially enabling adversaries to hijack agent actions at scale. The research coincides with broader CrowdStrike findings on adversarial AI campaigns, underscoring a growing threat surface as agentic AI deployments expand across enterprise security operations.https://gridthegrey.com/posts/mistral-releases-mistral-large-4-open-weights-for-cyber-defense/Fri, 30 Oct 2026 13:54:44 +0000https://gridthegrey.com/posts/mistral-releases-mistral-large-4-open-weights-for-cyber-defense/Threat Level: NONEFirst LookAgentic AILLM SecurityIndustry NewsAML.T0044 - Full AI Model AccessAML.T0047 - AI-Enabled Product or ServiceAML.T0010 - AI Supply Chain CompromiseAML.T0103 - Deploy AI AgentMistral has released the open weights for Mistral Large 4 (ML4), a trillion-parameter model purpose-targeted at cybersecurity use cases, available via Hugging Face and its API. This closes a meaningful gap for enterprises and governments seeking sovereign, air-gappable AI capabilities for threat detection, incident analysis, and agentic response — without dependency on a third-party provider's access policies. Residual gaps remain around operational integration maturity, fine-tuning pipelines for domain-specific environments, and the governance frameworks needed to safely deploy a frontier-scale agentic model in production security operations.https://gridthegrey.com/posts/hugging-face-malware-hijacks-gpus-via-trust-remote-code/Fri, 30 Oct 2026 13:53:35 +0000https://gridthegrey.com/posts/hugging-face-malware-hijacks-gpus-via-trust-remote-code/Threat Level: HIGHSupply ChainAdversarial MLIndustry NewsAML.T0010 - AI Supply Chain CompromiseAML.T0115 - Publish Poisoned AI ArtifactsAML.T0111 - AI Supply Chain Reputation InflationAML.T0109 - AI Supply Chain Rug PullAML.T0044 - Full AI Model AccessA persistent cryptomining and backdoor campaign abused Hugging Face's trust_remote_code feature to execute malicious Python code on GPU inference servers, accumulating over 28,000 downloads of its flagship malicious model. The attacker demonstrated resilience by relaunching within days of takedown, introducing container escape capabilities in the second wave. This campaign highlights critical supply chain risks in the AI model ecosystem, particularly for organisations running self-hosted inference infrastructure.https://gridthegrey.com/posts/claude-code-vs-code-extension-trojanized-with-ssh-backdoor/Fri, 30 Oct 2026 13:52:05 +0000https://gridthegrey.com/posts/claude-code-vs-code-extension-trojanized-with-ssh-backdoor/Threat Level: CRITICALSupply ChainLLM SecurityIndustry NewsAML.T0010 - AI Supply Chain CompromiseAML.T0115 - Publish Poisoned AI ArtifactsAML.T0047 - AI-Enabled Product or ServiceAML.T0083 - Credentials from AI Agent ConfigurationThe official Anthropic Claude Code extension on the Cursor IDE marketplace was compromised with a malicious 66-line JavaScript loader that installs a persistent SSH backdoor, affecting up to 5,000 users. The malware establishes reverse tunnels to an attacker-controlled server, harvests environment variable names (including cloud credentials and API keys), and installs cross-platform persistence mechanisms. Anthropic has since released a clean version 2.1.314, but all users of the compromised version remain at risk of persistent access even after removal.https://gridthegrey.com/posts/yc-labs-runs-gpt-6-1-multi-agent-swarms-in-open-game-worlds/Fri, 30 Oct 2026 13:52:05 +0000https://gridthegrey.com/posts/yc-labs-runs-gpt-6-1-multi-agent-swarms-in-open-game-worlds/Threat Level: MEDIUMFirst LookAgentic AIResearchLLM SecurityAML.T0103 - Deploy AI AgentAML.T0080 - AI Agent Context PoisoningAML.T0084 - Discover AI Agent ConfigurationAML.T0099 - AI Agent Tool Data PoisoningAML.T0086 - Exfiltration via AI Agent Tool InvocationYC Labs, in partnership with Olam Labs, ran experiments deploying swarms of up to 50 GPT-6.1 agents in Minecraft and Mindustry, observing emergent coordination behaviours including spontaneous role specialisation, hierarchy formation, and resource governance under scarcity. For defenders, this represents rare empirical data on how multi-agent systems self-organise at scale — behaviours that underpin both beneficial agentic deployments and misuse scenarios that security teams must anticipate. Residual gaps remain around formalised behavioural taxonomies, adversarial resilience testing, and translating sandbox observations into production-grade monitoring signatures.