LIVE FEED
FIRST LOOK OpenAI Launches AI-Powered Security Sprint with Cathedral Systems // FIRST LOOK Google DeepMind AI Agents Accelerate Cryptographic Vulnerability Research // HIGH BOSSAI AI Agents Used to Breach Taipei Emergency Dispatch Systems // FIRST LOOK NVIDIA OpenShell Brings Sandboxed Runtime to Secure AI Agents // FIRST LOOK Axiom Math Launches Formally Verified AI Math Foundation in Lean // HIGH ChatGPT Lockdown Mode Bypassed to Exfiltrate Chats Silently // FIRST LOOK Microsoft Ships Dynamic Permissions and Execution Containers for AI Agents // CRITICAL ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks // FIRST LOOK OpenAI Partners with Hacktron to Find Vulnerabilities in AI Systems // FIRST LOOK Anthropic Accelerates AI Development Using Automated Research Tools //
AI-ASSISTED-EXPLOITATION

Ai-Assisted-Exploitation

4 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI-Accelerated WeChat Zero-Click Worm Spreads via RCE

AI-Accelerated WeChat Zero-Click Worm Spreads via RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Simon Willison

Calif Research has published details of WeWorm, a zero-click worm exploiting WeChat calls on iOS and Android that requires no user interaction to achieve remote code execution. The team reports that AI assistance compressed what would traditionally be months of work for a larger team into roughly nine days, dramatically lowering the barrier to sophisticated worm development. This represents a concrete, documented example of AI being used to accelerate offensive exploit development at scale.

CVE-2026-55040: SharePoint RCE Chain Found via AI Agent

CVE-2026-55040: SharePoint RCE Chain Found via AI Agent

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 7.2 The Hacker News

Rapid7 researchers disclosed a critical unauthenticated RCE exploit chain against Microsoft SharePoint on-premises editions, chaining CVE-2026-55040 (CVSS 9.1) with CVE-2026-63520 (CVSS 8.1). Notably, an AI agent played a significant role in discovering the two-vulnerability path across 24 active research days, though human expert oversight was required to correct model errors and prevent the agent from overstepping its operational boundaries. The disclosure highlights both the offensive utility and current limitations of agentic AI in vulnerability research.

Mythos AI Exploits macOS Kernel Memory Corruption

Mythos AI Exploits macOS Kernel Memory Corruption

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 Schneier on Security

A threat group leveraged Anthropic's Mythos AI model to identify and exploit a kernel memory corruption vulnerability in Apple's M5 chip running macOS. This represents a concrete, reported instance of AI-assisted vulnerability research being used offensively to discover low-level hardware-adjacent exploits. The incident underscores the dual-use danger of increasingly capable AI coding and reasoning models in the hands of adversarial actors.

AI-Generated Zero-Day: 2FA Bypass in Web Admin Tool

AI-Generated Zero-Day: 2FA Bypass in Web Admin Tool

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Google's Threat Intelligence Group has confirmed the first known instance of a threat actor using an AI model to discover and weaponize a zero-day vulnerability — a 2FA bypass in a popular open-source web administration tool. The exploit, delivered via a Python script bearing hallmarks of LLM-generated code (including hallucinated CVSS scores and structured docstrings), was designed for mass exploitation. This marks a significant inflection point in the offensive AI threat landscape, demonstrating that AI-assisted vulnerability discovery and weaponization has moved from theoretical risk to confirmed operational reality.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.