LIVE FEED
FIRST LOOK OpenAI Launches Private Safety Processing for Zero-Data Monitoring // FIRST LOOK smolvm Brings Hardware-Isolated Sandboxing for AI Code Execution // FIRST LOOK OpenAI Adds Mandatory RL Training Safeguards for Frontier Models // HIGH AI Mind Viruses Spread Between Agents via Prompt Files // FIRST LOOK Fortinet Acquires Virtue AI to Secure AI Models and Agents // HIGH CVE-2026-24301: Microsoft Copilot One-Click Data Exfiltration // CRITICAL CVE-2026-64849: MLflow SSRF Exploited to Steal Cloud Credentials // HIGH CoSnitch Attack Forces Copilot to Expose Its Own Architecture // FIRST LOOK OpenAI Adds Chain-of-Thought Monitoring to Astra Safety Controls // HIGH Shostack's LLM Threat Model Responds to Hugging Face Attack //
GOVERNANCE

Governance

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
OpenAI Disbands Preparedness Team Amid IPO Safety Concerns

OpenAI Disbands Preparedness Team Amid IPO Safety Concerns

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.2 The Verge AI

OpenAI has disbanded its dedicated preparedness team, which was responsible for assessing catastrophic model risks and developing mitigations, redistributing its functions across domain-specific teams for areas like bio and cyber. This follows the dissolution of its AGI readiness and superalignment teams, and the departure of multiple senior safety and ethics leaders. Critics warn the pattern signals a systematic de-prioritisation of frontier AI safety oversight in favour of commercial growth ahead of a major IPO.

Token Security Launches AI Agent Identity Platform

Token Security Launches AI Agent Identity Platform

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 BleepingComputer

Token Security has published analysis and launched a platform addressing the growing security gap created by AI agents operating as unmanaged identities within enterprise environments, connecting to critical systems like Salesforce, GitHub, Snowflake, and production databases with minimal governance. Most organizations have deployed AI agents using credentials provisioned for other purposes, creating high-privilege, low-visibility actors outside the scope of existing IAM controls. Defenders now face a sprawling, machine-speed identity layer that existing lifecycle management, least-privilege enforcement, and audit tooling were never designed to handle.

AI Agent Identity Sprawl Bypasses Enterprise IAM Systems

AI Agent Identity Sprawl Bypasses Enterprise IAM Systems

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 Dark Reading

As AI agents proliferate across enterprise environments, their associated non-human identities are introducing governance and security gaps that traditional IAM frameworks were not designed to handle. New Omdia research highlights that AI agent identity management demands distinct budget allocations and security controls separate from conventional IAM programs. The failure to properly secure and govern these machine identities exposes organisations to credential abuse, privilege escalation, and lateral movement risks.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.