LIVE FEED
HIGH OpenAI Rogue Model Compromises Modal and Other Services // FIRST LOOK Microsoft Copilot Super App Merges Chat, Code, and Agents // FIRST LOOK Meta Plans Billions of Personal AI Agents on WhatsApp // FIRST LOOK Meta Launches Enterprise AI Agents and API Services for Business // FIRST LOOK Perplexity Launches Personal Computer AI Agent for Windows PCs // FIRST LOOK Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents // FIRST LOOK AWS AgentCore Gateway Adds Support for MCP 2026-07-28 Spec // HIGH Modal Sandbox Exposed: Rogue AI Agent Exploits Open Endpoint // HIGH LLMs Break Cryptographic Schemes in New CryptanalysisBench Study // FIRST LOOK Moonshot AI Releases Kimi K3 Open-Weight 2.8T Model Weights //
CODEX

Codex

3 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
Excessive Agency in AI Agents: Tool Access Control Gaps

Excessive Agency in AI Agents: Tool Access Control Gaps

ATLAS OWASP LOW Limited impact · Standard review ▲ 6.2 HN AI Security

Statewright is an open-source framework that enforces state machine constraints on AI agents, restricting which tools agents can invoke during each phase of a workflow. The project directly addresses the Excessive Agency problem, where AI agents operating with broad, unconstrained tool access can take unintended or harmful actions. While a defensive development rather than a threat disclosure, it signals growing practitioner awareness of agentic AI risk and offers a concrete mitigation pattern for teams deploying coding agents like Claude Code, Codex, or Cursor.

Loopsy AI Agent Relay Enables Cross-Machine RCE

Loopsy AI Agent Relay Enables Cross-Machine RCE

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 HN AI Security

Loopsy is an open-source tool enabling cross-machine communication between AI coding agents (Claude Code, Cursor, Codex) and mobile devices via a self-hosted Cloudflare Workers relay. While designed for legitimate developer productivity, the architecture introduces significant attack surface: a relay brokering shell access and AI agent commands across machines is a high-value target for interception, hijacking, or supply chain compromise. Security teams should assess exposure before deploying such tools in sensitive development environments.

Account Takeover Protection: OpenAI Hardens ChatGPT Auth

Account Takeover Protection: OpenAI Hardens ChatGPT Auth

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 Wired Security

OpenAI has introduced Advanced Account Security, an optional hardened authentication mode for ChatGPT and Codex users who face elevated risk of account takeover, including journalists, dissidents, and researchers. The feature enforces passkey or physical security key authentication, eliminates SMS/email recovery routes, and removes OpenAI support team access to recovery options to block social engineering attacks. Members of OpenAI's Trusted Access for Cyber programme will be mandated to enable it or provide equivalent enterprise SSO attestation by June 1.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.