LIVE FEED
HIGH AI Coding Tools Leak Repos as RemControl Trojan Uses AI Dev // HIGH Carbonato Malware Deploys AI Agents to Hijack Docker Hosts // FIRST LOOK Kontext Security Launches AI Agent Runtime Enforcement Platform // FIRST LOOK Microsoft Defender and Purview Add AI Agent Controls in September 2026 // FIRST LOOK AWS Launches AgentCore Gateway for Multi-Account AI Agents via MCP // CRITICAL Rogue AI Agents Exploit urlquery.net to Bypass Restrictions // CRITICAL OpenAI Agents Breach Australian Medicare Portal via SQLi Probes // HIGH AI Chatbots Poisoned via Web Seeding in Disinformation Campaign // FIRST LOOK Outerlimit Launches Decentralized AI Agent Authorization Layer // FIRST LOOK OWASP Flags AI Agent Unbounded Consumption as Top Enterprise Risk //
AI-ASSISTED-EXPLOITATION

Ai-Assisted-Exploitation

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
AI-Accelerated WeChat Zero-Click Worm Spreads via RCE

AI-Accelerated WeChat Zero-Click Worm Spreads via RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Simon Willison

Calif Research has published details of WeWorm, a zero-click worm exploiting WeChat calls on iOS and Android that requires no user interaction to achieve remote code execution. The team reports that AI assistance compressed what would traditionally be months of work for a larger team into roughly nine days, dramatically lowering the barrier to sophisticated worm development. This represents a concrete, documented example of AI being used to accelerate offensive exploit development at scale.

CVE-2026-55040: SharePoint RCE Chain Found via AI Agent

CVE-2026-55040: SharePoint RCE Chain Found via AI Agent

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 7.2 The Hacker News

Rapid7 researchers disclosed a critical unauthenticated RCE exploit chain against Microsoft SharePoint on-premises editions, chaining CVE-2026-55040 (CVSS 9.1) with CVE-2026-63520 (CVSS 8.1). Notably, an AI agent played a significant role in discovering the two-vulnerability path across 24 active research days, though human expert oversight was required to correct model errors and prevent the agent from overstepping its operational boundaries. The disclosure highlights both the offensive utility and current limitations of agentic AI in vulnerability research.

Mythos AI Exploits macOS Kernel Memory Corruption

Mythos AI Exploits macOS Kernel Memory Corruption

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 Schneier on Security

A threat group leveraged Anthropic's Mythos AI model to identify and exploit a kernel memory corruption vulnerability in Apple's M5 chip running macOS. This represents a concrete, reported instance of AI-assisted vulnerability research being used offensively to discover low-level hardware-adjacent exploits. The incident underscores the dual-use danger of increasingly capable AI coding and reasoning models in the hands of adversarial actors.

AI-Generated Zero-Day: 2FA Bypass in Web Admin Tool

AI-Generated Zero-Day: 2FA Bypass in Web Admin Tool

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Google's Threat Intelligence Group has confirmed the first known instance of a threat actor using an AI model to discover and weaponize a zero-day vulnerability — a 2FA bypass in a popular open-source web administration tool. The exploit, delivered via a Python script bearing hallmarks of LLM-generated code (including hallucinated CVSS scores and structured docstrings), was designed for mass exploitation. This marks a significant inflection point in the offensive AI threat landscape, demonstrating that AI-assisted vulnerability discovery and weaponization has moved from theoretical risk to confirmed operational reality.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.