LIVE FEED
CRITICAL CVE-2026-93680: Langflow RCE via Auth Bypass Hits All 1.x // HIGH Muse AI Agent Exposed as Covert Commercial Surveillance Tool // CRITICAL VOLTA Infostealer Uses Claude and Gemini to Triage Victims // HIGH AI Tools Accelerate Software Vulnerability Discovery at Record Pace // CRITICAL VOLTA Infostealer Uses LLM Chain to Rank Victim Assets // FIRST LOOK Northstar Security Launches AI Agents to Surface Toxic Risk Combos // HIGH Prompt Injection in Court Filing Triggers Brazil Lawyer Sanctions // HIGH ChatGPT HTML Preview XSS Enables Account Takeover // HIGH Cathedral AI Agents Breach Anthropic Systems in Under 12 Hours // FIRST LOOK OpenAI Updates Model Spec to Sharpen AI Judgment and Safety //
ADVERSARIAL-ML

Adversarial-Ml

4 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
CrowdStrike Maps LLM Safety Classifier Evasion for Defenders

CrowdStrike Maps LLM Safety Classifier Evasion for Defenders

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 CrowdStrike Blog

CrowdStrike has published research detailing how adversaries can evade LLM safety classifiers through a request-aggregate-bypass methodology, providing defenders with a structured threat model for classifier blind spots. This closes a meaningful gap by giving security teams a named, mappable technique set for auditing the real-world coverage of LLM safety controls they rely on in enterprise deployments. Realising the full defensive benefit requires organisations to mature their AI security testing programmes and move beyond assuming safety classifiers provide sufficient standalone protection.

Yellow Teams Bring AI Offense and Defense Into One Security Function

Yellow Teams Bring AI Offense and Defense Into One Security Function

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 5.5 Dark Reading

Yellow teams are an emerging security practice in which engineers build both offensive and defensive AI tools to stress-test AI capabilities and expose vulnerabilities before adversaries do. This dual-role model compresses the feedback loop between red and blue functions, but it also concentrates privileged knowledge of exploitable AI weaknesses in a small group with broad system access. Defenders should assess the insider-risk and knowledge-management implications of consolidating offensive AI tooling within a single team.

LLM Role Confusion Attack Bypasses Safety at 61%

LLM Role Confusion Attack Bypasses Safety at 61%

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Simon Willison

New research from Ye, Cui, and Hadfield-Menell demonstrates that LLMs prioritise the stylistic format of text over its structural role tags, enabling attackers to craft injected content that mimics internal reasoning blocks and bypasses safety guardrails. The study found attack success rates of 61% when injected text stylistically matched model-internal formats, dropping to just 10% after 'destyling'. The authors conclude that without genuine role perception in models, prompt injection defences will remain fundamentally reactive.

CrowdStrike Red Teaming: LLM Jailbreak and Data Poisoning

CrowdStrike Red Teaming: LLM Jailbreak and Data Poisoning

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 SecurityWeek

Joey Melo, Principal Security Researcher at CrowdStrike, outlines his methodology for AI red teaming, focusing on manipulating LLM guardrails through jailbreaking and data poisoning without altering underlying source code. His work, rooted in competitive AI hacking challenges, translates classical adversarial thinking into the emerging field of machine learning security. The profile highlights the growing professionalisation of AI red teaming as organisations seek to harden LLM deployments against real-world manipulation attacks.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.