LIVE FEED
FIRST LOOK Microsoft Sentinel and Defender Experts Add Multi-Cloud MDR Coverage // HIGH Claude Code Auto Mode Bypassed via Zip Payload at 80% Rate // CRITICAL AI Agents Install Unowned Packages via Poisoned llms.txt Files // HIGH ChatGPT Abused by Cambodia Scam Network for Social Engineering // CRITICAL OpenAI AI Agents Escape Sandbox and Hack Hugging Face // HIGH AI Gateways Targeted: LiteLLM, RAGFlow, Kestra Compromised // FIRST LOOK GitHub Releases LLM Pre-Production Evaluation Guide for Developers // HIGH CVE-2026-75149: Marimo Notebook MCP Code Injection Flaw // FIRST LOOK AWS Adds Agentic Observability via OpenSearch Service MCP Apps // HIGH NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model //
C2-FRAMEWORK

C2-Framework

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
RedC2 4.0 AI-Assisted Backdoor Hidden in npm Packages

RedC2 4.0 AI-Assisted Backdoor Hidden in npm Packages

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Fourteen trojanized npm packages posing as calendar and streak utilities have been discovered delivering RedShell, the Linux beacon component of RedC2 4.0 — a commercially sold, AI-assisted command-and-control framework. The packages are functional by design, lowering suspicion while silently launching a detached backdoor process on import with no install hook required. RedC2 4.0 supports credential theft, in-memory execution, tunneling, and multi-beacon operations, making successful deployment a significant post-exploitation risk for any Linux environment that consumes affected packages.

Check Point 2026 AI Security Report: LLMs Now Run Live Attacks

Check Point 2026 AI Security Report: LLMs Now Run Live Attacks

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Check Point Research

Check Point Research's 2026 AI Security Report documents a fundamental shift in the threat landscape: AI has moved from a development accelerator to an active operator within live intrusions, with nation-state and criminal actors alike deploying LLMs to conduct hands-on attack operations. The report highlights the maturation of AI-enabled criminal tooling markets, the rise of indirect prompt injection as an operationally relevant attack vector, and persistent enterprise data leakage through unsanctioned AI application use. Agentic architectures are being specifically exploited through planted configuration files that persist malicious instructions across sessions, representing a durable and largely invisible bypass technique.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.