LIVE FEED
FIRST LOOK arXiv Research Introduces Self-Evolving Procedural Graphs for LLM Agents // HIGH Chinese AI Firms Accused of Distilling OpenAI and Anthropic Models // HIGH Workflow Identity Hijacking Targets Enterprise AI Data Access // CRITICAL AI-Accelerated WeChat Zero-Click Worm Spreads via RCE // FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel //
AUTO-MODE

Auto-Mode

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
Claude Code Auto Mode Bypassed via Zip Payload at 80% Rate

Claude Code Auto Mode Bypassed via Zip Payload at 80% Rate

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Simon Willison

Security researcher Johann Rehberger demonstrated an 80% success-rate prompt injection attack against Claude Code's auto mode, Anthropic's default safety mechanism for its coding agent. The attack tricks the agent into downloading and decompressing a zip archive containing a malicious local module that hijacks Python's import resolution to execute arbitrary code. Critically, auto mode was observed blocking Claude's own remediation commands after detecting the compromise, rendering the safety layer counterproductive.

Anthropic Enables Claude Code Auto Mode by Default for Pro Users

Anthropic Enables Claude Code Auto Mode by Default for Pro Users

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.8 TechCrunch AI

Anthropic is enabling auto mode as the default for Claude Code on Pro, Max, and Team accounts starting August 14, allowing the agent to proceed autonomously unless an action is deemed irreversible, destructive, or out-of-scope. The move addresses a well-documented defender gap — human approval fatigue in agentic pipelines — backed by testing data showing auto mode caught 89% of harmful actions versus 13.6% under manual review. Residual maturity questions remain around enterprise-level customisation of hard deny rules, integration with existing security tooling, and auditability of autonomous decisions at scale.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.