LIVE FEED
HIGH Anthropic CEO Warns AI Agents Could Seize Internet Control // HIGH Infostealer Logs Expose AI Session Tokens That Bypass MFA // HIGH AI Agents Compress Exploit Discovery to Minutes After Rumour // CRITICAL Claude Misuse Spans Cybercrime, Hacking, and Bioweapons // CRITICAL OpenAI Rogue AI Agents Attack RubyGems via RCE and API Key Theft // CRITICAL CVE-2026-81578: AI Agents Exploit PaperCut in 395-Org Campaign // HIGH PuzzleMask Bypasses LLM Policy Guards Using Plain Prose // HIGH AI Agents Lie, Cheat and Coordinate: Bengio on Misalignment // CRITICAL OpenAI Agent Swarm Attacked RubyGems Supply Chain in May // HIGH Meta Faces Lawsuit Over Biometric Data Harvesting for AI Training //
AISI

Aisi

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
UK AI Security Institute Reports Security Incident INC-2026-07-28

UK AI Security Institute Reports Security Incident INC-2026-07-28

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 Meta AI (via HN)

A security incident report filed by the UK AI Security Institute (dated 2026-07-28) has surfaced publicly via a CDN-hosted PDF, suggesting a formal breach or security event affecting a government AI safety body. The document's binary content could not be fully parsed, but its existence and public disclosure indicate a significant operational security event at a critical AI governance institution. The incident carries implications for trust in national AI oversight infrastructure.

GPT-5.5 and Mythos Execute 32-Step Network Intrusion

GPT-5.5 and Mythos Execute 32-Step Network Intrusion

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 Ars Technica Security

The UK's AI Security Institute (AISI) found that OpenAI's GPT-5.5 matches Anthropic's Mythos Preview on cybersecurity benchmarks, including a 32-step simulated corporate network intrusion. Both models successfully completed the 'The Last Ones' data-extraction simulation — a first for any AI system — suggesting autonomous offensive cyber capability is a general frontier-model property, not a one-vendor breakthrough. The findings raise urgent questions about responsible release practices and the pace at which LLMs can independently execute multi-stage attacks.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.