LIVE FEED
TA419 AitM Phishing Targets US AI Policy Experts via Microsoft

TA419 AitM Phishing Targets US AI Policy Experts via Microsoft

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 The Hacker News

China-aligned threat actor TA419 is conducting sophisticated adversary-in-the-middle credential phishing campaigns against U.S. AI policy experts at think tanks, universities, and law firms, impersonating prominent figures including Anthropic employees and former White House officials. The attacks leverage Frameless BitB techniques combined with OneDrive-hosted AitM pages to silently harvest Microsoft session cookies without alerting victims. This espionage campaign reflects Beijing's strategic intelligence priorities around U.S. AI policy, model regulation, and export controls.

Anthropic CEO Calls for AI Control Over Capability Race

Anthropic CEO Calls for AI Control Over Capability Race

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 6.2 Dark Reading

Anthropic CEO Dario Amodei has publicly called for the AI industry to prioritise control, safety, and risk prevention over the continued acceleration of frontier model capabilities. This signals a meaningful shift in posture from a leading AI lab — one that directly validates the enterprise security community's longstanding demand for governance and oversight frameworks to keep pace with model power. The residual gap is that a CEO statement, however influential, does not yet translate into concrete enforcement mechanisms, binding industry commitments, or standardised enterprise controls.

Anthropic Releases Mythos and Fable Models with Global Access

Anthropic Releases Mythos and Fable Models with Global Access

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.8 TechCrunch AI

The US government has lifted export restrictions on Anthropic's Mythos and Fable models, restoring broad international access to what are described as the most capable AI models publicly available, with Mythos specifically noted for its advanced ability to identify and exploit software vulnerabilities. Defenders must now contend with a significantly wider pool of threat actors — including foreign nationals and nation-state-affiliated researchers — who can access a model with documented offensive security capabilities. The policy reversal also introduces regulatory uncertainty that complicates enterprise risk assessments, as organizations cannot rely on stable governance signals to calibrate their AI security postures.

GPT-5.4-Cyber Expansion Raises LLM Jailbreak Dual-Use Risks

GPT-5.4-Cyber Expansion Raises LLM Jailbreak Dual-Use Risks

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 SecurityWeek

OpenAI has expanded access to GPT-5.4-Cyber, a fine-tuned model designed for defensive cybersecurity applications, following Anthropic's reveal of its Mythos cybersecurity model. While framed as a defensive tool for legitimate security practitioners, the widened access to a capability-enhanced cybersecurity LLM raises dual-use concerns around potential misuse for offensive operations. The competitive dynamic between major AI labs in the security-focused model space signals a broader industry trend that warrants careful access control and policy scrutiny.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.