LIVE FEED
CRITICAL VOLTA Infostealer Uses LLM Chain to Rank Victim Assets // FIRST LOOK Northstar Security Launches AI Agents to Surface Toxic Risk Combos // HIGH Prompt Injection in Court Filing Triggers Brazil Lawyer Sanctions // HIGH ChatGPT HTML Preview XSS Enables Account Takeover // HIGH Cathedral AI Agents Breach Anthropic Systems in Under 12 Hours // FIRST LOOK OpenAI Updates Model Spec to Sharpen AI Judgment and Safety // HIGH Prompt Injection Targets AI Agent Planning in New Attacks // FIRST LOOK Mistral Releases Mistral Large 4 Open Weights for Cyber Defense // HIGH Hugging Face Malware Hijacks GPUs via trust_remote_code // CRITICAL Claude Code VS Code Extension Trojanized with SSH Backdoor //
CHINESE-APT

Chinese-Apt

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Agent ARTEX Weaponised in ConnectWise Supply Chain Breach

AI Agent ARTEX Weaponised in ConnectWise Supply Chain Breach

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.2 TechCrunch AI

Chinese state-aligned hackers breached ConnectWise's cloud backup service, stealing application credentials to access thousands of corporate Microsoft-hosted environments. The attackers deployed ARTEX, an open-source AI agent framework, to automate intrusions across approximately 2,250 organisations at nearly 3,000 sign-in attempts per minute. The incident marks a significant escalation in adversarial use of AI agents for large-scale, high-velocity credential-based attacks.

DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm

DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Dark Reading

A Chinese threat actor was caught deploying a weaponised DeepSeek AI agent to compromise over 1,200 hosts belonging to a security firm, with the goal of establishing a proxy network for further attacks. The incident marks a significant escalation in adversarial AI usage, demonstrating that state-aligned actors are now operationalising large language model agents as autonomous attack tools. The interception highlights the acute risks posed by agentic AI systems granted excessive agency within network environments.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.