LIVE FEED
HIGH PhantomRaven npm Stealer Built With LLM Targets Dev Secrets // HIGH SynthID Watermarking Weakens LLM Safety Guardrails Under Attack // HIGH RatHat Android Malware Uses Generative AI to Control Devices // FIRST LOOK OpenAI Reports Self-Injecting Prompts Found in Astra Compaction // CRITICAL OpenAI GPT-5.6 Sol Agents Hide Mistakes in Compaction Summaries // CRITICAL Heap Overflow and SSO Flaw Let Hackers Access OpenAI Repos // FIRST LOOK Base Labs and Hugging Face Launch Open-Weight AI Safety Standard // FIRST LOOK AWS AgentCore Harness Ships Built-In Shell and Identity Vault Tools // FIRST LOOK Apollo Research Launches Watcher to Monitor Rogue AI Agents // FIRST LOOK Anthropic Launches Claude Code Projects for Multi-Agent Cloud Orchestration //
IAM

Iam

5 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
AWS AgentCore Harness Ships Built-In Shell and Identity Vault Tools

AWS AgentCore Harness Ships Built-In Shell and Identity Vault Tools

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 Palo Alto Unit 42

Unit 42 researchers have published a detailed analysis of AWS AgentCore Harness's default configuration, specifically how its built-in shell tool and AgentCore Identity credential vault interact at runtime when credentials are resolved to plaintext. The research closes a visibility gap for defenders by providing concrete, operationally grounded guidance on scoping allowedTools, applying least-privilege to Identity vault service accounts, and monitoring outbound traffic from harness containers. What remains is an organisational maturity question: operators must actively opt into these controls rather than relying on secure defaults, meaning the benefit is fully realised only by teams with the awareness and tooling to enforce runtime scoping.

AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration

AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 5.5 AWS Machine Learning Blog

AWS has published guidance and tooling for building agentic workflows that bridge SageMaker AI and Bedrock AgentCore, offering a unified platform for constructing, connecting, and optimising AI agents at scale. For defenders, this represents a consolidation of agentic infrastructure under a managed cloud environment where IAM, logging, and network controls can be applied consistently — reducing the sprawl of unmanaged agent deployments. Residual gaps remain around how mature an organisation's governance framework must be before the observability and access-control benefits are fully realised in production agentic systems.

Cyera Acquires Oasis Security to Unify AI Agent Identity Control

Cyera Acquires Oasis Security to Unify AI Agent Identity Control

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 Dark Reading

Cyera's $1 billion acquisition of Oasis Security aims to converge data security and identity management into a single control plane specifically designed for AI agents, redefining privileged access around business context rather than static roles. This closes a significant defender gap by addressing the lack of unified visibility over what AI agents can access and do, replacing the fragmented tooling that currently leaves agent identity and data exposure largely ungoverned. Realising the full benefit will require organisational maturity in agent inventory, policy definition, and integration across existing IAM and DSPM stacks.

AI Agent Security Shifts From Visibility to Enforcement Controls

AI Agent Security Shifts From Visibility to Enforcement Controls

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 The Hacker News

Security practitioners are documenting a critical maturity gap in AI agent governance: organisations can now inventory deployed agents across SaaS, cloud, and developer environments, but lack enforcement mechanisms to constrain what those agents can actually do. The core risk is that AI agents operate without consistent identity, intent, ownership, or access boundaries, breaking every assumption that traditional IAM and least-privilege models rely on. Defenders must treat agent enforcement — not discovery — as the primary control objective, or risk a false sense of security from visibility tooling alone.

Token Security Launches AI Agent Identity Platform

Token Security Launches AI Agent Identity Platform

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 BleepingComputer

Token Security has published analysis and launched a platform addressing the growing security gap created by AI agents operating as unmanaged identities within enterprise environments, connecting to critical systems like Salesforce, GitHub, Snowflake, and production databases with minimal governance. Most organizations have deployed AI agents using credentials provisioned for other purposes, creating high-privilege, low-visibility actors outside the scope of existing IAM controls. Defenders now face a sprawling, machine-speed identity layer that existing lifecycle management, least-privilege enforcement, and audit tooling were never designed to handle.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.