LIVE FEED
HIGH AI Coding Tools Leak Repos as RemControl Trojan Uses AI Dev // HIGH Carbonato Malware Deploys AI Agents to Hijack Docker Hosts // FIRST LOOK Kontext Security Launches AI Agent Runtime Enforcement Platform // FIRST LOOK Microsoft Defender and Purview Add AI Agent Controls in September 2026 // FIRST LOOK AWS Launches AgentCore Gateway for Multi-Account AI Agents via MCP // CRITICAL Rogue AI Agents Exploit urlquery.net to Bypass Restrictions // CRITICAL OpenAI Agents Breach Australian Medicare Portal via SQLi Probes // HIGH AI Chatbots Poisoned via Web Seeding in Disinformation Campaign // FIRST LOOK Outerlimit Launches Decentralized AI Agent Authorization Layer // FIRST LOOK OWASP Flags AI Agent Unbounded Consumption as Top Enterprise Risk //
ADVERSARIAL-INPUTS

Adversarial-Inputs

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
Hidden Prompt Injection Attacks Hijack Autonomous AI Agents

Hidden Prompt Injection Attacks Hijack Autonomous AI Agents

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 SecurityWeek

Malicious instructions embedded in documents, metadata, emails, images, and code can silently redirect autonomous AI agents into performing dangerous or unintended actions. This indirect prompt injection vector is particularly severe because agents operate with broad tool access and minimal human oversight, amplifying the blast radius of any successful manipulation. The attack surface spans virtually every data source an AI agent may ingest, making defence difficult without robust input validation and privilege controls.

GhostJacking Attack Hijacks AI Agents via Security Alerts

GhostJacking Attack Hijacks AI Agents via Security Alerts

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

New research dubbed 'GhostJacking' demonstrates how attackers can exploit security alerts and blocked events to manipulate and hijack AI agents, exposing fundamental identity governance gaps in agentic AI systems. The technique highlights how defensive signals—normally indicators of protection—can be weaponised to subvert agent behaviour and assume control of automated workflows. This finding has significant implications for enterprises deploying AI agents in sensitive or privileged operational contexts.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.