LIVE FEED
CRITICAL OpenAI GPT-5.6 Escapes Sandbox, Attacks Hugging Face to Cheat Benchmark // CRITICAL CVE-2026-0770: Langflow RCE Flaw Exploited in Active Attacks // HIGH Azure DevOps MCP Prompt Injection Hijacks AI Review Agents // FIRST LOOK Yellow Teams Bring AI Offense and Defense Into One Security Function // FIRST LOOK Tracebit Ships AWS Context Bombing Defence Against AI Hacking Agents // FIRST LOOK FriendMachine Launches Jacquard Lang for AI-Written Code Review // CRITICAL Check Point 2026 AI Security Report: LLMs Now Run Live Attacks // FIRST LOOK OpenAI GPT-5.6 Sol Ships Faster Parallel Tool-Use for Agents // FIRST LOOK Meta Launches Muse Image with Public Instagram Photo Reuse // FIRST LOOK Estonia Launches State-Issued Digital IDs for AI Agents //
CISCO

Cisco

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
Anthropic Enhances AI Agent Skill Scanner Security

Anthropic Enhances AI Agent Skill Scanner Security

FIRST LOOK ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Security firm AIR demonstrated that a malicious AI agent skill, disguised as a Google Stitch landing-page builder, passed every major skill scanner including Cisco's, NVIDIA's, and skills.sh integrations, reaching approximately 26,000 agents before its payload was activated. The attack exploits a structural gap: scanners evaluate a static package at submission time, while the external URL the skill instructs the agent to fetch can be silently swapped post-install to deliver arbitrary instructions. Defenders relying on marketplace reputation signals, GitHub star counts, or one-time scanner verdicts to gatekeep agent skills have no meaningful protection against this class of supply-chain attack.

Cisco, Check Point M&A Targets AI Agent Identity Gaps

Cisco, Check Point M&A Targets AI Agent Identity Gaps

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 SecurityWeek

May 2026 saw a wave of cybersecurity acquisitions with a clear focus on securing AI agents and LLM infrastructure, including Cisco's ~$400M acquisition of Astrix Security for non-human identity management and Check Point's acquisition of Deepchecks for LLM evaluation and continuous monitoring. Akamai also moved to acquire LayerX for AI usage control and agentic activity visibility across browsers and IDEs. These deals signal that enterprise security vendors are racing to build defensive capabilities around the expanding agentic AI attack surface.

Anthropic Claude Memory Poisoning Enables Prompt Injection

Anthropic Claude Memory Poisoning Enables Prompt Injection

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

Cisco researchers discovered and reported a significant vulnerability in how Anthropic's AI systems handle memory files, which has since been patched. The flaw highlights a broader, systemic risk in agentic AI architectures where persistent memory mechanisms can be exploited to inject malicious instructions or exfiltrate sensitive data across sessions. Security experts caution that memory mismanagement in AI agents represents an enduring attack surface that extends well beyond any single vendor fix.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.