LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
BRAND-IMPERSONATION

Brand-Impersonation

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Chatbots Serve Fake Retail URLs in 15% of Shopping Queries

AI Chatbots Serve Fake Retail URLs in 15% of Shopping Queries

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Verge AI

A study by IP protection firm Podqi found that ChatGPT, Gemini, and Perplexity recommended risky or counterfeit retail websites in up to 15 percent of shopping-related conversations across 6,795 tested answers. The findings highlight a systemic risk where AI chatbot outputs act as an inadvertent distribution channel for phishing and fraud infrastructure targeting consumers. This represents a concrete instance of insecure output handling and AI overreliance, where users trust chatbot-generated URLs without independent verification.

Phantom Squatting: LLM Hallucinations Enable Domain Takeover

Phantom Squatting: LLM Hallucinations Enable Domain Takeover

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

Researchers have identified a novel attack vector dubbed 'Phantom Squatting', in which LLMs consistently hallucinate plausible but non-existent web domains for legitimate brands, which attackers can then register and weaponise. Unlike traditional typosquatting, these hallucinated domains carry implicit trust because they originate from AI-generated outputs that users and developers may act upon without verification. The technique is difficult to detect because the domains are not misspellings but plausible inventions, making automated defences less effective.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.