LIVE FEED
HIGH OpenAI Compaction Flaw Exposes Hidden Reasoning in GPT-5.6 // FIRST LOOK OpenAI GPT-6.1 Sol Powers CodeRabbit Security Agent // MEDIUM Meta Muse AI Agent Exploits Cart Reserve to Block Shoppers // FIRST LOOK OpenAI GPT-6 Astra Powers Greptile Bug Detection Beyond Code Review // HIGH Qwen3-Coder Bias Produces Insecure Code for US Defense Apps // HIGH AI-Powered Vishing Lets Fraudsters Bypass Help Desks // HIGH AI Agents Hijacked via Prompt Injection and Malicious Skills // HIGH Aokigahara Infostealer Targets Claude, Copilot, and Cursor Credentials // CRITICAL LiteLLM 1.107.0 Supply Chain Attack Steals AI Credentials // FIRST LOOK OpenAI Trains Frontier Models in Air-Gapped Offline Environments //
HERMES

Hermes

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Agents Install Unowned Packages via Poisoned llms.txt Files

AI Agents Install Unowned Packages via Poisoned llms.txt Files

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Ars Technica Security

Researchers discovered that over 120 corporate websites contained misconfigured llms.txt files referencing unregistered package names, which AI coding agents including Claude, Codex, and Hermes automatically executed as trusted installation instructions. By registering a handful of the unclaimed package names and hosting beacon payloads, researchers received phone-home responses from dozens of companies including Fortune 500 firms within hours, confirming real-world agent-driven supply chain compromise. The attack exploits the implicit trust AI agents place in vendor documentation files, with at least one site found directing visitors to live malware.

Hermes AI Agent Used in Espionage Attack on Thai Finance

Hermes AI Agent Used in Espionage Attack on Thai Finance

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Dark Reading

Threat actors deployed Hermes, an open-source autonomous AI agent operating in unrestricted 'YOLO mode', to conduct a state-level espionage operation against Thailand's Ministry of Finance. The incident represents one of the first confirmed uses of an agentic AI tool as a primary attack instrument in a government-targeted intrusion. This case highlights the escalating risk posed by autonomous AI agents when deployed without guardrails in adversarial contexts.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.