LIVE FEED
FIRST LOOK Apate Launches AI Agents That Infiltrate Scam Networks for Intelligence // HIGH OpenAI Engineer Used Chatbot to Plan Covert Bug Planting // HIGH OpenAI Engineer Arrested for Planting Hidden Spy Device // FIRST LOOK Laplace Intelligence Launches AI Red-Teaming for Robots and AVs // FIRST LOOK AWS Launches AgentCore Payments with Anchor Browser for AI Agents // MEDIUM OpenAI Lean Proof Mistranslation Exposes AI Verification Risk // HIGH Grok Bot AI Agent Leaks Personal Bank Data to Company Slack // HIGH Iran Used ChatGPT to Plant Fake Articles in US Publications // CRITICAL ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks // HIGH Anthropic AI Agents Bypass Isolation Controls, Access Live Internet //
CYBER-ESPIONAGE

Cyber-Espionage

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
TA419 AitM Phishing Targets US AI Policy Experts via Microsoft

TA419 AitM Phishing Targets US AI Policy Experts via Microsoft

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 The Hacker News

China-aligned threat actor TA419 is conducting sophisticated adversary-in-the-middle credential phishing campaigns against U.S. AI policy experts at think tanks, universities, and law firms, impersonating prominent figures including Anthropic employees and former White House officials. The attacks leverage Frameless BitB techniques combined with OneDrive-hosted AitM pages to silently harvest Microsoft session cookies without alerting victims. This espionage campaign reflects Beijing's strategic intelligence priorities around U.S. AI policy, model regulation, and export controls.

APT29 Abuses Claude to Auto-Rebuild Malware on Detection

APT29 Abuses Claude to Auto-Rebuild Malware on Detection

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Russian state-sponsored group GTG-20006, linked to APT29/Midnight Blizzard, weaponised Anthropic's Claude to build autonomous AI workflows that detect when their malware is flagged by security products and automatically rebuild and redeploy it to evade static detections. The operation targeted over 20 government, defence, and diplomatic organisations across Ukraine, Europe, the Middle East, and Asia, using phishing, ClickFix lures, and DNS hijacking to deliver cross-platform implants. This represents a qualitative escalation in adversarial AI use: LLMs are no longer just writing malware stubs but orchestrating full detection-evasion feedback loops at machine speed.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.