LIVE FEED
HIGH OpenAI Rogue Model Compromises Modal and Other Services // FIRST LOOK Microsoft Copilot Super App Merges Chat, Code, and Agents // FIRST LOOK Meta Plans Billions of Personal AI Agents on WhatsApp // FIRST LOOK Meta Launches Enterprise AI Agents and API Services for Business // FIRST LOOK Perplexity Launches Personal Computer AI Agent for Windows PCs // FIRST LOOK Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents // FIRST LOOK AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec // HIGH Modal Sandbox Exposed: Rogue AI Agent Exploits Open Endpoint // HIGH LLMs Break Cryptographic Schemes in New CryptanalysisBench Study // FIRST LOOK Moonshot AI Releases Kimi K3 Open-Weight 2.8T Model Weights //
AGENT-AUTHENTICATION

Agent-Authentication

2 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
CrowdStrike Launches Continuous Identity for AI Agents

CrowdStrike Launches Continuous Identity for AI Agents

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.8 CrowdStrike Blog

CrowdStrike's Continuous Identity for AI Agents introduces persistent, trackable identity primitives for agentic workflows — but persistent identities are also persistent targets. Attackers who compromise an agent identity gain a durable, trusted foothold that can persist across sessions and tool invocations without the natural expiry of human session tokens. The feature's integration into the Falcon platform means agent identity tokens, if stolen or forged, may carry elevated detection-suppression trust within the same security toolchain defending the environment.

Agent Hijacking and Prompt Injection Threaten AI Payments

Agent Hijacking and Prompt Injection Threaten AI Payments

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Wired Security

The FIDO Alliance, backed by Google and Mastercard, is forming working groups to establish cryptographic standards for authenticating AI agent-initiated transactions, addressing risks like agent hijacking, prompt injection, and unauthorised financial actions. The initiative responds to a growing attack surface where agentic AI systems act on behalf of users without adequate authentication frameworks. Google's Agent Payments Protocol (AP2) and Mastercard's Verifiable Intent framework are being contributed as open-source foundations for the effort.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.