LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
CONSUMER-RISK

Consumer-Risk

1 report
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Chatbots Serve Fake Retail URLs in 15% of Shopping Queries

AI Chatbots Serve Fake Retail URLs in 15% of Shopping Queries

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Verge AI

A study by IP protection firm Podqi found that ChatGPT, Gemini, and Perplexity recommended risky or counterfeit retail websites in up to 15 percent of shopping-related conversations across 6,795 tested answers. The findings highlight a systemic risk where AI chatbot outputs act as an inadvertent distribution channel for phishing and fraud infrastructure targeting consumers. This represents a concrete instance of insecure output handling and AI overreliance, where users trust chatbot-generated URLs without independent verification.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.