LIVE FEED
FIRST LOOK Axiom Math Launches Formally Verified AI Math Foundation in Lean // HIGH ChatGPT Lockdown Mode Bypassed to Exfiltrate Chats Silently // FIRST LOOK Microsoft Ships Dynamic Permissions and Execution Containers for AI Agents // CRITICAL ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks // FIRST LOOK OpenAI Partners with Hacktron to Find Vulnerabilities in AI Systems // FIRST LOOK Anthropic Accelerates AI Development Using Automated Research Tools // HIGH LLMJacking Bills Reach $1M as AI Phishing Targets Work Accounts // FIRST LOOK OpenAI Launches GPT-6 Cyber with AI-Driven Vuln Discovery // CRITICAL AI Agents Used in Chainalysis Breach Exposing All User Tokens // HIGH Claude Code Leaks Secrets in Settings File Across 1,122 Repos //
AUTONOMOUS-MALWARE

Autonomous-Malware

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
APT29 Abuses Claude to Auto-Rebuild Malware on Detection

APT29 Abuses Claude to Auto-Rebuild Malware on Detection

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Russian state-sponsored group GTG-20006, linked to APT29/Midnight Blizzard, weaponised Anthropic's Claude to build autonomous AI workflows that detect when their malware is flagged by security products and automatically rebuild and redeploy it to evade static detections. The operation targeted over 20 government, defence, and diplomatic organisations across Ukraine, Europe, the Middle East, and Asia, using phishing, ClickFix lures, and DNS hijacking to deliver cross-platform implants. This represents a qualitative escalation in adversarial AI use: LLMs are no longer just writing malware stubs but orchestrating full detection-evasion feedback loops at machine speed.

PromptSpy Zero-Day: AI-Generated Malware for Mass Exploitation

PromptSpy Zero-Day: AI-Generated Malware for Mass Exploitation

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Mandiant Blog

Google's Threat Intelligence Group (GTIG) has identified, for the first time, a criminal threat actor using a zero-day exploit believed to have been AI-generated, intended for mass exploitation before proactive counter-discovery intervened. The report also documents AI-augmented malware development, autonomous attack orchestration via AI-enabled malware (PROMPTSPY), and obfuscated LLM access pipelines used by adversaries to bypass usage controls. Nation-state actors from China and North Korea are actively pursuing AI-assisted vulnerability discovery, marking a significant escalation in adversarial AI capability.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.