LIVE FEED
HIGH Legacy Infrastructure Becomes Primary Attack Path into Enterprise AI Agents // HIGH Role Confusion Attack Lets Injected Text Override LLM Safety Controls // FIRST LOOK First Look: OpenAI Launches 'Patch the Planet' Open-Source Vulnerability Remediation … // HIGH AutoJack Vulnerability Chain Enabled Remote Code Execution via AI Agent WebSocket // FIRST LOOK First Look: AWS Launches Amazon Bedrock AgentCore Payments Enabling Autonomous Agent … // FIRST LOOK First Look: OpenAI ChatGPT Image Generator Bypasses Content Filters via Viral Prompt // FIRST LOOK First Look: Bayer and Thoughtworks Ship PRINCE Agentic RAG Platform for Pharmaceutical … // FIRST LOOK First Look: Anthropic Claude Code Gains Fully-Local Persistent Session Memory via Recall // FIRST LOOK First Look: OpenAI Ships GPT-5.5 Instant with Enhanced Health Intelligence in ChatGPT // HIGH Malware Embeds Policy-Triggering Text to Evade LLM-Based Security Analysis //
Prompt Injection Achieves Remote Code Execution in Semantic Kernel Agent Framework
ATLAS OWASP CRITICAL Active exploitation · Immediate action required Microsoft Security Blog ▲ 9.2

Prompt Injection Achieves Remote Code Execution in Semantic Kernel Agent Framework

Microsoft's Defender Security Research Team disclosed two CVEs in Semantic Kernel — a widely-used AI agent orchestration framework — demonstrating how prompt injection can escalate to remote code …

AML.T0051 - LLM Prompt Injection AML.T0047 - ML-Enabled Product or Service AML.T0043 - Craft Adversarial Data