LIVE FEED
FIRST LOOK OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions // FIRST LOOK OpenAI Astra Ships Recurrent Depth Reasoning with CoT Monitoring Pledge // CRITICAL OpenAI Agents Coordinate Unsanctioned Hugging Face Hack // CRITICAL CVE-2026-19592: Git Config Flaw Lets Attackers Run Code in Codex // FIRST LOOK CrowdStrike Launches Agentic Identity Provider for AI Agents // FIRST LOOK OpenAI Launches Astra with Critical Cyber Capability Controls // FIRST LOOK Sevii Launches Autonomous ADR Agents for AI-Speed Attack Defense // FIRST LOOK Palo Alto Networks Acquires AI Agent Platform Console // FIRST LOOK OpenAI Launches Astra with Advanced Autonomous Cybersecurity Skills // HIGH UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis //
CREDENTIAL-HARVESTING

Credential-Harvesting

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
AnonyMousKIT PhaaS Deploys Voice AI Agents to Steal iPhone Passcodes

AnonyMousKIT PhaaS Deploys Voice AI Agents to Steal iPhone Passcodes

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.5 BleepingComputer

AnonyMousKIT is a phishing-as-a-service platform that deploys voice AI agents to social-engineer stolen iPhone owners into surrendering their device passcodes and Apple credentials, enabling Activation Lock bypass. The platform has been active since early 2024, operates across 506 domains with 168 reseller storefronts, and conducted at least 200 documented AI-driven vishing calls. This represents a notable escalation in PhaaS sophistication, weaponising autonomous voice AI agents for large-scale, low-cost credential harvesting at roughly $0.10 per call.

AGENTIC AIThe Hacker NewsCRITICALCVE-2025-3248: Langflow RCE Enables AutonomousRansomware Attack

CVE-2025-3248: Langflow RCE Enables Autonomous Ransomware Attack

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.8 The Hacker News

Sysdig has documented what it claims is the first end-to-end ransomware attack orchestrated autonomously by an AI agent, attributed to a threat actor tracked as JADEPUFFER. The agent exploited a known remote code execution flaw in Langflow (CVE-2025-3248) to gain initial access, harvest credentials, pivot laterally, and ultimately encrypt and destroy a production database — all without human intervention at the keyboard. The incident demonstrates that AI agents can now lower the skill floor for complex, multi-stage attacks to near zero, representing a qualitative shift in the ransomware threat landscape.

Google Gemini Prompt Injection Powers Smishing Campaign

Google Gemini Prompt Injection Powers Smishing Campaign

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 The Hacker News

Google has filed suit against a Chinese cybercrime network operating the Outsider phishing-as-a-service kit, which exploited Gemini AI to generate fraudulent phishing pages and power large-scale SMS phishing attacks against Americans. The network used carefully framed prompts — disguised as benign programming requests — to bypass AI safety controls and produce functional credential-harvesting websites. The case illustrates the growing industrialisation of AI-assisted phishing infrastructure, with over 1.59 million malicious URLs and 100,000 victims attributed to the operation.

Scanning for AI Models, (Tue, Apr 14th)

Scanning for AI Models, (Tue, Apr 14th)

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 SANS Internet Storm Center

A single threat actor (IP 81.168.83.103) has been systematically scanning internet-facing systems since at least January 2026, specifically targeting credential files, API tokens, and configuration data associated with popular AI platforms including OpenAI, Anthropic Claude, HuggingFace, and the Openclaw/Clawdbot tools. The campaign focuses on harvesting AI API credentials and secrets stored in predictable file paths, representing a targeted reconnaissance effort against AI model deployments. If successful, these probes could enable API key theft, model access abuse, and broader compromise of AI-integrated systems.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.