LIVE FEED
CRITICAL Claude and ChatGPT Hijacked via Zero-Click Prompt Injection // HIGH ChatGPT Sandbox C2 Attack Demonstrated at Black Hat 2026 // HIGH Meta AI Hacks External Systems in Cybersecurity Test // HIGH ChatGPT Abused by Poipet Scam Network in Multi-Fraud Op // CRITICAL Anthropic Mythos 5 AI Agent Launches Rogue Supply Chain Attack // FIRST LOOK NVIDIA Launches OSAA and SAFE Open AI Security Framework // HIGH UK AI Security Institute Reports Security Incident INC-2026-07-28 // FIRST LOOK Microsoft Launches Zero Trust for AI Agent Security Tools // FIRST LOOK Varonis Launches Agent IBAC to Constrain AI Agent Actions at Runtime // CRITICAL DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm //
CYBERCRIME

Cybercrime

3 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning AI Governance AI Security AI Security Tools Deep Signal Identity & Access Management Intelligence Report Security Operations
Dolphin X RAT Uses AI Profiler to Rank and Score Victims

Dolphin X RAT Uses AI Profiler to Rank and Score Victims

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 BleepingComputer

The Dolphin X remote access trojan integrates an AI-powered profiling system that automatically scores and ranks infected machines, enabling attackers to efficiently triage thousands of victims and prioritise high-value targets such as corporate networks and cryptocurrency holders. This represents a meaningful escalation in malware sophistication, shifting victim selection from manual review to automated, AI-assisted prioritisation. Security teams face heightened risk as credential-stealing campaigns become operationally more efficient and scalable.

Google Gemini Abused for Phishing-as-a-Service

Google Gemini Abused for Phishing-as-a-Service

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Schneier on Security

A Chinese cybercriminal group called Outsider Enterprise exploited Google's Gemini AI to mass-produce phishing pages impersonating Google, YouTube, and government agencies like E-ZPass, offering nearly 300 scam templates via Telegram. Google has filed suit and coordinated with major US carriers to block the resulting smishing campaigns. The case highlights how generative AI lowers the technical barrier for large-scale phishing operations and stress-tests provider-side content controls.

0x4F0x3A0xFF0x0D0x7B0xC20xA10x550x0D0x7B0xC20xA10x550xE80x120x9F0xA10x550xE80x120x9F0xD40x2E0x880x120x9F0xD40x2E0x880x610xB30x4F0x2E0x880x610xB30x4F0x3A0xFF0x0D0xB30x4F0x3A0xFF0x0D0x7B0xC20xA10xFF0x0D0x7B0xC20xA10x550xE80x12RESEARCHSchneier on SecurityMEDIUMLLM Jailbreak Adoption Surges Across 160+Cybercrime Forums

LLM Jailbreak Adoption Surges Across 160+ Cybercrime Forums

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 Schneier on Security

A new academic paper analysed over 160 cybercrime forum conversations to understand how threat actors are discussing and adopting AI tools for criminal purposes. The research documents both misuse of legitimate AI platforms and attempts to build bespoke criminal AI models, revealing early-stage diffusion of AI capabilities within cybercriminal communities. The findings carry practical implications for law enforcement and security practitioners monitoring the evolving AI-enabled threat landscape.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.