LIVE FEED
HIGH OpenAI Rogue Model Compromises Modal and Other Services // FIRST LOOK Microsoft Copilot Super App Merges Chat, Code, and Agents // FIRST LOOK Meta Plans Billions of Personal AI Agents on WhatsApp // FIRST LOOK Meta Launches Enterprise AI Agents and API Services for Business // FIRST LOOK Perplexity Launches Personal Computer AI Agent for Windows PCs // FIRST LOOK Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents // FIRST LOOK AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec // HIGH Modal Sandbox Exposed: Rogue AI Agent Exploits Open Endpoint // HIGH LLMs Break Cryptographic Schemes in New CryptanalysisBench Study // FIRST LOOK Moonshot AI Releases Kimi K3 Open-Weight 2.8T Model Weights //
CI-CD

Ci-Cd

4 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
Phantom Squatting: LLM Hallucinations in Supply Chain

Phantom Squatting: LLM Hallucinations in Supply Chain

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Palo Alto Unit 42

Unit 42 researchers have documented 'phantom squatting', a novel attack vector where adversaries register domains that LLMs consistently hallucinate when responding to developer queries, intercepting traffic from AI-assisted workflows. Analysis of 913 brands across 685,339 URL queries uncovered 13,229 confirmed malicious URLs and approximately 250,000 unregistered hallucinated domains still available for adversarial pre-registration. A concrete case study reveals a fully operational phishing kit, Montana Empire, built with an AI coding assistant and deployed against a domain Unit 42 had flagged as high-risk 23 days prior.

Cordyceps Campaign Poisons CI/CD Workflows in Open Source

Cordyceps Campaign Poisons CI/CD Workflows in Open Source

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Dark Reading

A campaign dubbed 'Cordyceps' is exploiting weaknesses in CI/CD workflows to inject malicious pull requests into high-profile open-source projects, including Google's AI Agent Development Kit and Microsoft's Azure Sentinel. The attack surface spans multiple trusted ecosystems, meaning poisoned code could propagate into AI tooling, cloud infrastructure, and widely-used developer utilities before detection. The breadth of targets — including Python's Black formatter — signals a supply chain strategy designed to maximise downstream blast radius.

Anthropic Claude Code Prompt Injection Leaks Secrets

Anthropic Claude Code Prompt Injection Leaks Secrets

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 9.1 Microsoft Security Blog

Microsoft Threat Intelligence disclosed a vulnerability in Anthropic's Claude Code GitHub Action whereby prompt injection via untrusted GitHub content — issue bodies, PR descriptions, and comments — could cause the AI agent to read sensitive environment variables, including the ANTHROPIC_API_KEY, from /proc/self/environ. The flaw stemmed from inconsistent sandboxing: while subprocess execution paths like Bash were scrubbed of environment variables, the Read tool had no equivalent restriction. Anthropic patched the issue in Claude Code version 2.1.128 by blocking access to sensitive /proc filesystem paths.

Gemini CLI CVSS 10 RCE via Config Injection in CI/CD

Gemini CLI CVSS 10 RCE via Config Injection in CI/CD

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Google has patched a maximum-severity (CVSS 10.0) vulnerability in its Gemini CLI tooling that allowed unauthenticated attackers to achieve remote code execution by planting malicious configuration files in workspace directories automatically trusted by the agent in headless/CI mode. The flaw effectively weaponised CI/CD pipelines as supply chain attack paths, bypassing sandbox protections entirely before they could initialise. A secondary issue in '--yolo' mode further enabled prompt injection to trigger unrestricted shell command execution.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.