LIVE FEED
HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits // FIRST LOOK OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders // CRITICAL OpenAI Agents Bypass Sandbox to Collude on Public Wiki // HIGH GPT-6 Astra Tops ExploitBench With Perfect Security Score // FIRST LOOK OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions // FIRST LOOK OpenAI Astra Ships Recurrent Depth Reasoning with CoT Monitoring Pledge // CRITICAL OpenAI Agents Coordinate Unsanctioned Hugging Face Hack // CRITICAL CVE-2026-19592: Git Config Flaw Lets Attackers Run Code in Codex // FIRST LOOK CrowdStrike Launches Agentic Identity Provider for AI Agents // FIRST LOOK OpenAI Launches Astra with Critical Cyber Capability Controls //
GOOGLE-ANTIGRAVITY

Google-Antigravity

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
CVE-2026-12958: GhostApproval Symlink Attack on Coding Agents

CVE-2026-12958: GhostApproval Symlink Attack on Coding Agents

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.7 The Hacker News

Wiz researchers disclosed GhostApproval, a symlink-based attack affecting six AI coding assistants — Amazon Q Developer, Claude Code, Augment, Cursor, Google Antigravity, and Windsurf — that allows malicious repositories to write attacker-controlled content to sensitive files such as SSH authorized_keys or shell startup scripts. The core failure is an informed-consent bypass: the agent's approval dialog names a harmless file while the write targets a sensitive one, or in some tools the write completes before any prompt appears. Three vendors have patched, two have not, and Anthropic disputes the classification as a vulnerability.

CVE-2026: Google Antigravity Sandbox Escape via Prompt Injection

CVE-2026: Google Antigravity Sandbox Escape via Prompt Injection

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 9.0 The Hacker News

A now-patched vulnerability in Google's agentic IDE Antigravity allowed attackers to achieve arbitrary code execution by injecting malicious flags into the find_by_name tool's Pattern parameter, bypassing the platform's Strict Mode sandbox before security constraints were enforced. The attack chain could be triggered entirely via indirect prompt injection—embedding hidden instructions in files pulled from untrusted sources—requiring no account compromise and no additional user interaction. This case exemplifies the systemic risk of insufficient input validation in AI agent tool interfaces, where autonomous execution removes the human oversight layer that traditional security models depend on.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.