LIVE FEED
FIRST LOOK OpenAI Launches Private Safety Processing for Zero-Data Monitoring // FIRST LOOK smolvm Brings Hardware-Isolated Sandboxing for AI Code Execution // FIRST LOOK OpenAI Adds Mandatory RL Training Safeguards for Frontier Models // HIGH AI Mind Viruses Spread Between Agents via Prompt Files // FIRST LOOK Fortinet Acquires Virtue AI to Secure AI Models and Agents // HIGH CVE-2026-24301: Microsoft Copilot One-Click Data Exfiltration // CRITICAL CVE-2026-64849: MLflow SSRF Exploited to Steal Cloud Credentials // HIGH CoSnitch Attack Forces Copilot to Expose Its Own Architecture // FIRST LOOK OpenAI Adds Chain-of-Thought Monitoring to Astra Safety Controls // HIGH Shostack's LLM Threat Model Responds to Hugging Face Attack //
GEMINI-SPARK

Gemini-Spark

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Google Launches Gemini Spark on Mac with File Access

Google Launches Gemini Spark on Mac with File Access

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 TechCrunch AI

Google has expanded Gemini Spark to macOS, giving the agentic assistant access to local files, third-party app integrations (including Dropbox, Canva, and Instacart), custom MCP connections, and real-time topic monitoring. This substantially widens the attack surface for enterprise defenders, as a compromised or manipulated Spark agent gains a foothold across local file systems, cloud workspaces, and external service APIs simultaneously. The addition of custom Model Context Protocol support is particularly concerning, as it allows arbitrary third-party tool connections with unclear trust boundaries and permission scoping.

Gemini Spark Prompt Injection Exposes Enterprise Gmail Data

Gemini Spark Prompt Injection Exposes Enterprise Gmail Data

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 Simon Willison

Google's newly announced Gemini Spark personal AI agent, integrated with Gmail, Drive, Calendar, and other sensitive Google services, presents a significant prompt injection attack surface as it processes user data at scale. The article highlights that Google's published security mitigations — ephemeral VMs, Agent Gateway, and DLP policies — address infrastructure isolation but do not directly address the prompt injection vector inherent to LLM-powered agents processing untrusted content. Additionally, the transition from open-source Gemini CLI to a closed-source Antigravity CLI raises supply chain transparency concerns.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.