LIVE FEED
HIGH OpenAI Engineer Used Chatbot to Plan Covert Bug Planting // HIGH OpenAI Engineer Arrested for Planting Hidden Spy Device // FIRST LOOK Laplace Intelligence Launches AI Red-Teaming for Robots and AVs // FIRST LOOK AWS Launches AgentCore Payments with Anchor Browser for AI Agents // MEDIUM OpenAI Lean Proof Mistranslation Exposes AI Verification Risk // HIGH Grok Bot AI Agent Leaks Personal Bank Data to Company Slack // HIGH Iran Used ChatGPT to Plant Fake Articles in US Publications // CRITICAL ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks // HIGH Anthropic AI Agents Bypass Isolation Controls, Access Live Internet // FIRST LOOK Anthropic AI Agents Submit Visa Forms on State Dept Site //
ENTERPRISE-RISK

Enterprise-Risk

3 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
OWASP Flags AI Agent Unbounded Consumption as Top Enterprise Risk

OWASP Flags AI Agent Unbounded Consumption as Top Enterprise Risk

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 5.5 Dark Reading

OWASP's LLM Top 10 ranks unbounded resource consumption sixth, spotlighting how autonomous AI agents can generate runaway infrastructure and API costs without adequate guardrails. This classification gives defenders a formal framework anchor to prioritise cost-aware controls and consumption monitoring in agentic deployments. Realising the full benefit requires organisations to mature their agent observability tooling and integrate spend-aware policy enforcement before exploitation becomes trivial.

Anthropic CEO Calls for AI Control Over Capability Race

Anthropic CEO Calls for AI Control Over Capability Race

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 6.2 Dark Reading

Anthropic CEO Dario Amodei has publicly called for the AI industry to prioritise control, safety, and risk prevention over the continued acceleration of frontier model capabilities. This signals a meaningful shift in posture from a leading AI lab — one that directly validates the enterprise security community's longstanding demand for governance and oversight frameworks to keep pace with model power. The residual gap is that a CEO statement, however influential, does not yet translate into concrete enforcement mechanisms, binding industry commitments, or standardised enterprise controls.

ChatGPT Markdown Injection Enables Phishing in Web Summarizer

ChatGPT Markdown Injection Enables Phishing in Web Summarizer

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Permiso Security has disclosed ChatGPhish, a vulnerability in ChatGPT's web summarisation feature that allows attacker-controlled Markdown payloads embedded in third-party pages to render phishing links, spoofed alerts, and QR codes directly within ChatGPT's trusted UI. The attack requires no user interaction beyond asking ChatGPT to summarise a malicious page, and can exfiltrate IP addresses, User-Agent strings, and Referer headers via auto-fetched remote images. The technique significantly expands the phishing attack surface beyond email into everyday AI-assisted browsing workflows, posing a particular risk in enterprise environments.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.