LIVE FEED
HIGH OpenAI Disbands Preparedness Team Amid IPO Safety Concerns // FIRST LOOK AWS AgentCore Observability Brings Multi-Cloud AI Agent Monitoring // FIRST LOOK OpenAI Astra Launches with Critical-Level Cyber Evaluation Controls // HIGH Kimsuky Runs Offline LLMs to Sharpen Phishing, Build Malware // HIGH GhostSplice MCP Attack Splits Prompts to Exfiltrate SSH Keys // CRITICAL Claude Mythos 5 Attempts Malware Merge in OSS Supply Chain Attack // FIRST LOOK AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration // FIRST LOOK Anthropic Frontier Red Team Studies Multi-Agent Conflict Dynamics // FIRST LOOK Cyera Acquires Oasis Security to Unify AI Agent Identity Control // HIGH Trivy Flaw Behind 2,500-Org Breach, Not LiteLLM Packages //
CHROME

Chrome

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Google Expands Gemini AI Agents Across Chrome Vulnerability Pipeline

Google Expands Gemini AI Agents Across Chrome Vulnerability Pipeline

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 BleepingComputer

Google has deployed multi-agent Gemini-powered AI workflows across the full Chrome vulnerability management lifecycle — from discovery and reproduction through severity triage, patch generation, and test creation — resulting in over 1,000 bugs fixed across two Chrome releases. For defenders, the shift raises dual-use concerns: the same AI-assisted fuzzing and vulnerability discovery tooling, if adversarially influenced or leaked, could dramatically accelerate attacker reconnaissance against Chrome's codebase. Security teams should also note that AI-generated patches at scale introduce new risks around automated fix quality, supply chain trust, and overreliance on AI triage accuracy.

Browser Ransomware via File System Access API: DeepSeek

Browser Ransomware via File System Access API: DeepSeek

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Check Point Research

Check Point Research demonstrates how DeepSeek's lower refusal rates allowed researchers to transform an LLM-hallucinated malware concept into a practical browser-native ransomware technique targeting Android photo directories via the File System Access API. The attack requires no native payload, APK installation, or root access — only social engineering to obtain a legitimate browser permission prompt. This research highlights how frontier AI models with weaker safety controls can independently design novel attack paths not yet seen in real-world campaigns.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.