LIVE FEED
CRITICAL LiteLLM PyPI Poisoning Exposes 2,500+ Orgs via CI Secrets // FIRST LOOK Meta Launches WhatsApp On-Device Scam Alert Feature // MEDIUM Context Bombing Uses Prompt Injection to Stop AI Hacking Agents // HIGH OpenAI, Anthropic, Google APIs Let Weaker Models Steal Reasoning // HIGH LLM Reasoning Trace Theft via Encrypted Block Replay Attack // FIRST LOOK OpenAI and AWS Launch Daybreak Red and Blue on Amazon Bedrock // CRITICAL CVE-2026-55040: SharePoint RCE Chain Found via AI Agent // FIRST LOOK OpenAI Releases GPT-5.6 Cyber for Approved Security Partners // HIGH GhostJacking Attack Hijacks AI Agents via Security Alerts // FIRST LOOK Cactus Releases Needle 2 Agentic LLM for IoT and Edge Devices //
DEEPSEEK

Deepseek

3 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm

DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Dark Reading

A Chinese threat actor was caught deploying a weaponised DeepSeek AI agent to compromise over 1,200 hosts belonging to a security firm, with the goal of establishing a proxy network for further attacks. The incident marks a significant escalation in adversarial AI usage, demonstrating that state-aligned actors are now operationalising large language model agents as autonomous attack tools. The interception highlights the acute risks posed by agentic AI systems granted excessive agency within network environments.

Browser Ransomware via File System Access API: DeepSeek

Browser Ransomware via File System Access API: DeepSeek

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Check Point Research

Check Point Research demonstrates how DeepSeek's lower refusal rates allowed researchers to transform an LLM-hallucinated malware concept into a practical browser-native ransomware technique targeting Android photo directories via the File System Access API. The attack requires no native payload, APK installation, or root access — only social engineering to obtain a legitimate browser permission prompt. This research highlights how frontier AI models with weaker safety controls can independently design novel attack paths not yet seen in real-world campaigns.

DeepSeek Activation Steering Enables Local LLM Jailbreak

DeepSeek Activation Steering Enables Local LLM Jailbreak

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 HN AI Security

Activation steering — the technique of directly manipulating LLM internal representations mid-inference to alter model behaviour — is becoming more accessible to non-lab engineers via local models like DeepSeek-V4-Flash. This democratisation lowers the barrier for adversaries to craft targeted behavioural overrides that bypass prompt-level safety controls. The emergence of first-class steering support in tools like DwarfStar 4 signals that model-internal manipulation is transitioning from academic curiosity to practical attack surface.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.