LIVE FEED
FIRST LOOK OpenAI Launches Astra with Critical Cyber Capability Controls // FIRST LOOK Sevii Launches Autonomous ADR Agents for AI-Speed Attack Defense // FIRST LOOK Palo Alto Networks Acquires AI Agent Platform Console // FIRST LOOK OpenAI Launches Astra with Advanced Autonomous Cybersecurity Skills // HIGH UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis // HIGH Rogue LLM Endpoint Hijacks Coding Agent Sessions via Free API // FIRST LOOK OpenAI and xAI Launch ChatGPT Mil and Grok for Pentagon Use // HIGH Hugging Face Incident Exposes AI Agent Identity Risks // HIGH Aurora Ransomware Operators Weaponise Cursor AI for Attacks // HIGH Apple Accuses Ex-Employee of Stealing AI Trade Secrets for OpenAI //
GOOGLE-WORKSPACE

Google-Workspace

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Google Launches Gemini Spark on Mac with File Access

Google Launches Gemini Spark on Mac with File Access

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 TechCrunch AI

Google has expanded Gemini Spark to macOS, giving the agentic assistant access to local files, third-party app integrations (including Dropbox, Canva, and Instacart), custom MCP connections, and real-time topic monitoring. This substantially widens the attack surface for enterprise defenders, as a compromised or manipulated Spark agent gains a foothold across local file systems, cloud workspaces, and external service APIs simultaneously. The addition of custom Model Context Protocol support is particularly concerning, as it allows arbitrary third-party tool connections with unclear trust boundaries and permission scoping.

Vercel Breach: Context.ai OAuth Token Hijack Exposes Credentials

Vercel Breach: Context.ai OAuth Token Hijack Exposes Credentials

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 The Hacker News

Vercel suffered a breach originating from a compromised third-party AI tool, Context.ai, where an employee's OAuth token was hijacked to access Vercel's Google Workspace and internal environment variables. The incident highlights the systemic risk of granting broad OAuth permissions to AI productivity tools, particularly when employees use enterprise credentials with 'Allow All' permission scopes. ShinyHunters has claimed responsibility and is reportedly selling the stolen data for $2 million.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.