LIVE FEED
FIRST LOOK OpenAI Launches AI-Powered Security Sprint with Cathedral Systems // FIRST LOOK Google DeepMind AI Agents Accelerate Cryptographic Vulnerability Research // HIGH BOSSAI AI Agents Used to Breach Taipei Emergency Dispatch Systems // FIRST LOOK NVIDIA OpenShell Brings Sandboxed Runtime to Secure AI Agents // FIRST LOOK Axiom Math Launches Formally Verified AI Math Foundation in Lean // HIGH ChatGPT Lockdown Mode Bypassed to Exfiltrate Chats Silently // FIRST LOOK Microsoft Ships Dynamic Permissions and Execution Containers for AI Agents // CRITICAL ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks // FIRST LOOK OpenAI Partners with Hacktron to Find Vulnerabilities in AI Systems // FIRST LOOK Anthropic Accelerates AI Development Using Automated Research Tools //
ADVERSARIAL-INPUTS

Adversarial-Inputs

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Hidden Prompt Injection Attacks Hijack Autonomous AI Agents

Hidden Prompt Injection Attacks Hijack Autonomous AI Agents

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 SecurityWeek

Malicious instructions embedded in documents, metadata, emails, images, and code can silently redirect autonomous AI agents into performing dangerous or unintended actions. This indirect prompt injection vector is particularly severe because agents operate with broad tool access and minimal human oversight, amplifying the blast radius of any successful manipulation. The attack surface spans virtually every data source an AI agent may ingest, making defence difficult without robust input validation and privilege controls.

GhostJacking Attack Hijacks AI Agents via Security Alerts

GhostJacking Attack Hijacks AI Agents via Security Alerts

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

New research dubbed 'GhostJacking' demonstrates how attackers can exploit security alerts and blocked events to manipulate and hijack AI agents, exposing fundamental identity governance gaps in agentic AI systems. The technique highlights how defensive signals—normally indicators of protection—can be weaponised to subvert agent behaviour and assume control of automated workflows. This finding has significant implications for enterprises deploying AI agents in sensitive or privileged operational contexts.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.