LIVE FEED
FIRST LOOK Anthropic AI Agents Submit Visa Forms on State Dept Site // HIGH Anthropic AI Agents Exploit Gov Sites via Reward Hacking // HIGH Anthropic AI Agent Submits False Homicide Tip to Police Tipline // MEDIUM OpenAI Fires Safety Researchers Over Sensitive Data Dispute // FIRST LOOK Token Security Adds Enforcement Controls for AI Agent Permissions // HIGH AI Agents Targeted via Social Engineering in BEC-Style Attacks // FIRST LOOK Microsoft Copilot Gains Local File Access via Hybrid Intelligence // FIRST LOOK AWS Adds Native Access Controls for RAG via Amazon Quick and Bedrock // HIGH DPRK npm Supply Chain Worm Uses Web3 C2 to Steal Cloud Keys // FIRST LOOK Rein Security Launches $25M Runtime Guard for AI Agents //
CHATGPT-ABUSE

Chatgpt-Abuse

3 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Attackers Abuse Claude Artifacts and ChatGPT Links to Spread Malware

Attackers Abuse Claude Artifacts and ChatGPT Links to Spread Malware

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 BleepingComputer

Threat actors are exploiting legitimate features of trusted AI platforms—including Claude Artifacts, shareable claude.ai URLs, and indexed ChatGPT and Grok conversations—to deliver malware under the cover of recognisable branding. The FakeAgent campaign, tracked by Huntress, struck over 29 organisations in July by hosting malicious content directly on the claude.ai domain, where minimal vetting and high user trust create an effective delivery vector. These campaigns are typically short-lived but effective, underscoring how AI platform trust boundaries are being systematically weaponised.

ChatGPT Abused by Poipet Scam Network in Multi-Fraud Op

ChatGPT Abused by Poipet Scam Network in Multi-Fraud Op

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

OpenAI has disrupted a Cambodia-based criminal network operating from Poipet that weaponised ChatGPT to power investment fraud, romance scams, gambling schemes, and law enforcement impersonation at scale. The operation leveraged LLM capabilities for persona creation, multilingual message generation, forged document imagery, and internal administrative tasks — demonstrating that organised crime groups are now integrating generative AI as operational infrastructure. The case underscores a growing threat model in which LLMs are exploited not through technical vulnerabilities but through deliberate misuse of legitimate API access.

GreyVibe Uses ChatGPT and Gemini for Ukraine Cyberespionage

GreyVibe Uses ChatGPT and Gemini for Ukraine Cyberespionage

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 BleepingComputer

A likely Russian threat group dubbed GreyVibe has been actively using commercial LLMs — including ChatGPT and Google Gemini — to generate high-quality phishing lures, malware tooling, and social-engineering content targeting Ukrainian military, government, and civilian organisations. WithSecure researchers identified LLM artefact markers embedded in campaign imagery, confirming AI-assisted content generation at scale. The case represents a concrete, documented example of adversarial LLM weaponisation in an active nation-state-adjacent cyberespionage campaign.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.