LIVE FEED
FIRST LOOK arXiv Research Introduces Self-Evolving Procedural Graphs for LLM Agents // HIGH Chinese AI Firms Accused of Distilling OpenAI and Anthropic Models // HIGH Workflow Identity Hijacking Targets Enterprise AI Data Access // CRITICAL AI-Accelerated WeChat Zero-Click Worm Spreads via RCE // FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel //
CRYPTOMINING

Cryptomining

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
AI Gateways Targeted: LiteLLM, RAGFlow, Kestra Compromised

AI Gateways Targeted: LiteLLM, RAGFlow, Kestra Compromised

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Microsoft Security Blog

Microsoft Security Research documented active intrusions targeting three distinct AI infrastructure components — a LiteLLM gateway, a RAGFlow retrieval platform, and a Kestra workflow orchestrator — revealing a pattern of attackers treating AI control planes as high-value targets for credential theft and compute abuse. Across all three cases, attackers converged on the same objectives: stealing model-provider API keys, establishing persistence, and monetising compromised compute resources. The findings signal that AI-specific middleware and orchestration layers require the same security rigour as traditional enterprise critical infrastructure.

ComfyUI RCE Exploited in Cryptomining Botnet Campaign

ComfyUI RCE Exploited in Cryptomining Botnet Campaign

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Threat actors are actively exploiting internet-exposed ComfyUI instances — a popular AI image generation platform — by abusing its custom node execution feature to achieve unauthenticated remote code execution. Over 1,000 publicly accessible instances have been identified as targets, with compromised hosts enrolled in Monero and Conflux cryptomining operations and a Hysteria V2 proxy botnet. The attack highlights critical supply chain and insecure plugin design risks inherent in AI/ML tooling ecosystems.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.