LIVE FEED
FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel // FIRST LOOK Capsule Security Launches AI Circuit Breaker for Rogue Agents // MEDIUM Rogue AI Agents Drive Insurers to Rethink Cyber Risk // HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits //
DOCUMENT-FORGERY

Document-Forgery

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
ChatGPT Abused by Cambodia Scam Network for Social Engineering

ChatGPT Abused by Cambodia Scam Network for Social Engineering

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Schneier on Security

OpenAI disrupted a Cambodia-based criminal network that weaponised ChatGPT to run multi-vector social engineering scams at scale, including romance fraud, fake investment schemes, gambling platform impersonation, and law enforcement extortion. The operation demonstrates how LLMs dramatically lower the barrier to producing convincing fraudulent personas, forged documents, and sustained deceptive conversations. This case illustrates a maturing threat model where commercial AI services are operationalised as force multipliers for organised cybercrime.

ChatGPT Abused by Poipet Scam Network in Multi-Fraud Op

ChatGPT Abused by Poipet Scam Network in Multi-Fraud Op

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

OpenAI has disrupted a Cambodia-based criminal network operating from Poipet that weaponised ChatGPT to power investment fraud, romance scams, gambling schemes, and law enforcement impersonation at scale. The operation leveraged LLM capabilities for persona creation, multilingual message generation, forged document imagery, and internal administrative tasks — demonstrating that organised crime groups are now integrating generative AI as operational infrastructure. The case underscores a growing threat model in which LLMs are exploited not through technical vulnerabilities but through deliberate misuse of legitimate API access.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.