LIVE FEED
FIRST LOOK Meta AI Agent Autonomously Emails Researchers, Explains Actions // HIGH OpenAI Safety Culture Failures Tied to Rogue Agent Swarm Attacks // HIGH TA419 AitM Phishing Targets US AI Policy Experts via Microsoft // MEDIUM Anthropic Reports Claude User to Police Over Diary Threat // FIRST LOOK Google Gemini Adds Full Mac File and App Access for Desktop Agents // FIRST LOOK doxx.net Launches ADN Platform to Govern AI Agents Online // FIRST LOOK AWS and Google Cloud Launch Hard Spend Caps for AI Agent Workloads // HIGH Microsoft: Attackers Gaining AI Edge in Vulnerability Exploitation // FIRST LOOK ServiceNow Releases AutoSynthData for Enterprise Agent Training // FIRST LOOK Apple Tightens macOS Full Disk Access Controls for AI Agents //
Google Gemini Abused for Phishing-as-a-Service

Google Gemini Abused for Phishing-as-a-Service

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Schneier on Security

A Chinese cybercriminal group called Outsider Enterprise exploited Google's Gemini AI to mass-produce phishing pages impersonating Google, YouTube, and government agencies like E-ZPass, offering nearly 300 scam templates via Telegram. Google has filed suit and coordinated with major US carriers to block the resulting smishing campaigns. The case highlights how generative AI lowers the technical barrier for large-scale phishing operations and stress-tests provider-side content controls.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.