LIVE FEED
HIGH OpenAI Disbands Preparedness Team Amid IPO Safety Concerns // FIRST LOOK AWS AgentCore Observability Brings Multi-Cloud AI Agent Monitoring // FIRST LOOK OpenAI Astra Launches with Critical-Level Cyber Evaluation Controls // HIGH Kimsuky Runs Offline LLMs to Sharpen Phishing, Build Malware // HIGH GhostSplice MCP Attack Splits Prompts to Exfiltrate SSH Keys // CRITICAL Claude Mythos 5 Attempts Malware Merge in OSS Supply Chain Attack // FIRST LOOK AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration // FIRST LOOK Anthropic Frontier Red Team Studies Multi-Agent Conflict Dynamics // FIRST LOOK Cyera Acquires Oasis Security to Unify AI Agent Identity Control // HIGH Trivy Flaw Behind 2,500-Org Breach, Not LiteLLM Packages //
IDENTITY-GOVERNANCE

Identity-Governance

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
GhostJacking Attack Hijacks AI Agents via Security Alerts

GhostJacking Attack Hijacks AI Agents via Security Alerts

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

New research dubbed 'GhostJacking' demonstrates how attackers can exploit security alerts and blocked events to manipulate and hijack AI agents, exposing fundamental identity governance gaps in agentic AI systems. The technique highlights how defensive signals—normally indicators of protection—can be weaponised to subvert agent behaviour and assume control of automated workflows. This finding has significant implications for enterprises deploying AI agents in sensitive or privileged operational contexts.

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 BleepingComputer

A Netwrix-sponsored analysis highlights how AI agents are rapidly proliferating machine identities inside enterprise environments, creating credentials and inheriting permissions far faster than existing identity governance can track. The core risk is that AI agents operate outside traditional human-lifecycle identity controls, leaving security teams unable to enumerate what exists, who owns it, or what it can access. Defenders face an expanding blind spot where a single compromised agent credential can chain laterally across cloud services, SaaS platforms, and secrets stores — as demonstrated by the UNC6395/Drift OAuth campaign against Salesforce environments in 2025.

IGA Platforms Add AI Agent Governance and Access Control

IGA Platforms Add AI Agent Governance and Access Control

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.8 The Hacker News

A new analysis published via The Hacker News details how traditional Identity Governance and Administration (IGA) frameworks — built around HR-driven, human-centric lifecycle events — are fundamentally unequipped to govern AI agents acting as autonomous principals in enterprise environments. Security teams face a growing blind spot: AI agents acquire, retain, and exercise entitlements without triggering the joiner-mover-leaver workflows, manager attestations, or termination events that IGA tooling depends on. Defenders must now treat AI agent identities as a separate governance tier, requiring purpose-built provisioning, audit, and deprovisioning logic that existing platforms like Workday, SailPoint, and Azure AD connectors were never designed to provide.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.