LIVE FEED
FIRST LOOK OpenAI Releases Astra Cybersecurity Evals and Safeguard Controls // FIRST LOOK OpenAI Pauses Astra Model Over Critical Cybersecurity Threshold // CRITICAL OpenAI Agents Exploit Artifactory RCE in Hugging Face Attack // FIRST LOOK Cloudflare Launches Kitesurf, a Cloud Browser Built for AI Agents // FIRST LOOK PortSwigger HTTP Terminator Ships AI-Driven Desync Research // CRITICAL CVE-2026-12537: Gemini CLI RCE and Claude Code Secret Leak // HIGH Atlassian Rovo Prompt Injection Leaks Jira Data to Attackers // CRITICAL Claude and ChatGPT Hijacked via Zero-Click Prompt Injection // HIGH ChatGPT Sandbox C2 Attack Demonstrated at Black Hat 2026 // HIGH Meta AI Hacks External Systems in Cybersecurity Test //
AWS-BEDROCK

Aws-Bedrock

4 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning AI Governance AI Security AI Security Tools Deep Signal Identity & Access Management Intelligence Report Security Operations
AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec

AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 AWS Machine Learning Blog

AWS has released AgentCore Gateway with native support for the Model Context Protocol (MCP) 2026-07-28 specification, enabling standardised tool-use and context-sharing across agentic AI workloads on AWS infrastructure. For defenders, MCP-compliant gateways dramatically expand the inter-agent communication surface, introducing new vectors for prompt injection through tool responses, malicious server impersonation, and privilege escalation across agent boundaries. Security teams operating agentic pipelines on AWS must now treat MCP endpoints as high-value targets requiring the same scrutiny applied to API gateways and identity providers.

AI Agent Hijacking via Legacy Infrastructure Exploits

AI Agent Hijacking via Legacy Infrastructure Exploits

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 The Hacker News

Attackers are bypassing AI-layer defences entirely by exploiting unpatched legacy infrastructure — misconfigured Active Directory, stale credentials, and over-privileged IAM roles — to hijack the resources AI agents depend on. Research cited in the article shows 70% of organisations grant AI systems more access than a human in the same role, driving a 76% incident rate among over-privileged deployments. The article argues that securing AI agents requires closing the underlying infrastructure exposure gap, not just hardening the model layer.

AWS Launches Agent-EvalKit for LLM-Powered Agent Evaluation

AWS Launches Agent-EvalKit for LLM-Powered Agent Evaluation

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.8 AWS Machine Learning Blog

Agent-EvalKit is an open-source AWS toolkit (Apache 2.0) that embeds structured LLM-as-judge evaluation directly into agent development workflows via Claude Code, Kiro CLI, and Kilo Code. It closes a significant defender gap by shifting agent quality assurance left — catching hallucinations, unsafe tool usage, and logic errors during development rather than after deployment, where failures are costlier to remediate. Teams integrating it should establish integrity controls around evaluation datasets and review AI-generated code recommendations as part of standard secure-SDLC practices.

CVE-2026-42208: LiteLLM SQL Injection Exposes API Keys

CVE-2026-42208: LiteLLM SQL Injection Exposes API Keys

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

A critical SQL injection vulnerability (CVE-2026-42208, CVSS 9.3) in BerriAI's LiteLLM AI gateway was actively exploited within 36 hours of public disclosure, targeting database tables storing upstream LLM provider API keys including OpenAI, Anthropic, and AWS Bedrock credentials. Attackers demonstrated prior knowledge of LiteLLM's internal schema, selectively probing credential and configuration tables while ignoring user and team tables. The blast radius extends far beyond a typical web-app SQL injection, as successful extraction equates to cloud-account-level compromise across multiple AI provider accounts.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.