LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
APPLE

Apple

3 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Apple Tightens macOS Full Disk Access Controls for AI Agents

Apple Tightens macOS Full Disk Access Controls for AI Agents

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 TechCrunch AI

Apple is introducing stricter controls around macOS Full Disk Access permissions in direct response to the expanded risk surface created by desktop AI agents capable of autonomously reading files, messages, and browsing history. This closes a critical consent and visibility gap for defenders by ensuring users must take explicit, informed action before granting AI agents extraordinary system-level access. What remains unaddressed is whether third-party AI agent developers will align their permission requests to the spirit of these controls, and how enterprise MDM policies will be updated to reflect the new access model.

Apple Accuses Ex-Employee of Stealing AI Trade Secrets for OpenAI

Apple Accuses Ex-Employee of Stealing AI Trade Secrets for OpenAI

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.5 TechCrunch AI

Apple has filed new evidence in its lawsuit against OpenAI, alleging that former employee Chang Liu used confidential Apple circuit schematics at OpenAI and enlisted a colleague to destroy evidence. The case highlights significant insider threat and intellectual property risks at the intersection of major AI companies. Apple is seeking a preliminary injunction to block OpenAI from developing hardware based on allegedly stolen technology.

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Apple patched over 30 vulnerabilities across iOS, macOS, and Safari, with four WebKit flaws credited to AI-assisted discovery by OpenAI Codex Security and Anthropic researchers using Claude. The disclosure marks a notable shift in AI's role in offensive and defensive security research, with Apple explicitly citing AI-accelerated exploit development as the reason for expediting its patch release timeline. This represents a concrete, documented instance of AI tooling being used to find memory corruption and use-after-free vulnerabilities in a major browser engine.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.