LIVE FEED
FIRST LOOK GitHub Releases LLM Pre-Production Evaluation Guide for Developers // HIGH CVE-2026-75149: Marimo Notebook MCP Code Injection Flaw // FIRST LOOK AWS Adds Agentic Observability via OpenSearch Service MCP Apps // HIGH NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model // HIGH AnonyMousKIT PhaaS Deploys Voice AI Agents to Steal iPhone Passcodes // HIGH Rogue AI Agents Escape Sandboxes to Launch Real Attacks // FIRST LOOK Flock Safety Launches OS Investigate AI for Law Enforcement // CRITICAL CVE-2025-62593: Ray AI Framework RCE via DNS Rebinding // FIRST LOOK AWS Launches AgentCore Gateway for AI Agent Tool Access Control // CRITICAL Grok Data Exfiltration via Cryptographic Context Injection //
CVSS-10

Cvss-10

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
CVE-2026-41679: Paperclip AI RCE via Malicious Agent Import

CVE-2026-41679: Paperclip AI RCE via Malicious Agent Import

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Two critical vulnerabilities in Paperclip, an open-source AI agent control plane, allow attackers to execute arbitrary host commands by importing malicious agent configurations — one requiring no authentication whatsoever. A third flaw exposes sensitive data through unenforced API access controls, and Rapid7 has already published a public Metasploit module for the CVSS 10.0 server-side path. The findings underscore a systemic risk in agentic AI platforms: agent configuration is functionally executable code and must be treated as such.

CVE-2026-58073: Veeam and Terraform MCP Critical Flaws Patched

CVE-2026-58073: Veeam and Terraform MCP Critical Flaws Patched

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 6.5 The Hacker News

HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities, with the most critical being a CVSS 10.0 cross-tenant token reuse flaw in Terraform's MCP Server that allows one user's Terraform token to be hijacked for subsequent users' requests. The Veeam Service Provider Console carries a 9.5-rated unauthenticated credential theft bug affecting multi-tenant backup infrastructure. The Terraform MCP Server flaw is particularly notable from an AI security perspective as it directly affects the Model Context Protocol layer connecting AI assistants to infrastructure tooling.

Gemini CLI CVSS 10 RCE via Config Injection in CI/CD

Gemini CLI CVSS 10 RCE via Config Injection in CI/CD

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Google has patched a maximum-severity (CVSS 10.0) vulnerability in its Gemini CLI tooling that allowed unauthenticated attackers to achieve remote code execution by planting malicious configuration files in workspace directories automatically trusted by the agent in headless/CI mode. The flaw effectively weaponised CI/CD pipelines as supply chain attack paths, bypassing sandbox protections entirely before they could initialise. A secondary issue in '--yolo' mode further enabled prompt injection to trigger unrestricted shell command execution.

CVE-2025-59528: Flowise RCE Exploited Across 12,000 Instances

CVE-2025-59528: Flowise RCE Exploited Across 12,000 Instances

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.4 The Hacker News

A maximum-severity (CVSS 10.0) remote code execution vulnerability in Flowise, a widely-used open-source AI agent builder, is under active exploitation with over 12,000 internet-exposed instances at risk. The flaw, CVE-2025-59528, exists in the CustomMCP node and allows unauthenticated JavaScript execution with full Node.js runtime privileges via unsanitised MCP server configuration input. This marks the third Flowise vulnerability exploited in the wild, underscoring systemic security gaps in AI orchestration and agent-building platforms.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.