LIVE FEED
HIGH Claude Used to Breach OpenAI Employee Account via Forum Flaw // FIRST LOOK Anthropic Embeds Accenture as Its First Third-Party AI Safety Evaluator // CRITICAL AI Hallucination in Military Intel Nearly Triggers US Strike // FIRST LOOK arXiv Paper Formalises Linguistic Illegibility in LLM Security // HIGH Gemini AI Agent Breaches Three Companies via Password Guessing // HIGH Google Gemini Breaches Real Systems in AI Security Test Mishap // FIRST LOOK TypeSafe AI Launches Jev, a Non-LLM Model for AI Agent Oversight // MEDIUM Agentic AI Pentesting Closes Gap as Exploit Speed Hits 5 Days // HIGH PhantomRaven npm Stealer Built With LLM Targets Dev Secrets // HIGH SynthID Watermarking Weakens LLM Safety Guardrails Under Attack //
JAVASCRIPT

Javascript

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
smolvm Brings Hardware-Isolated Sandboxing for AI Code Execution

smolvm Brings Hardware-Isolated Sandboxing for AI Code Execution

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 6.2 Simon Willison

smolmachines/smolvm 1.8.3 provides hardware-isolated VM sandboxing for untrusted Python and JavaScript, with enforced CPU/RAM limits, no-network execution, filesystem quotas, and cold starts under 1.5 seconds. For defenders building AI platforms that execute user-supplied or LLM-generated code, this closes the critical gap between shared-kernel container isolation and true VM-level isolation for data transformation workloads. Residual maturity questions remain around orchestration integration, audit logging depth, and the KVM dependency that excludes nested-virtualisation environments like many CI and cloud agent runtimes.

Prompt Injection Malware Evades LLM Security Scanners

Prompt Injection Malware Evades LLM Security Scanners

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Schneier on Security

A malware developer has embedded nuclear and biological weapons-related text inside JavaScript comment blocks within spyware payloads, specifically to trigger refusal behaviour or context confusion in LLM-powered security analysis pipelines. The technique exploits the architectural gap between how interpreters (which skip comments) and language models (which ingest the full file as input) process the same file. While ineffective against traditional static analysis tooling, the tactic represents a practical adversarial countermeasure targeting AI-first triage workflows and analyst copilots.

Malware Uses Prompt Injection in JavaScript to Evade LLM Tools

Malware Uses Prompt Injection in JavaScript to Evade LLM Tools

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Schneier on Security

A malware developer has been observed embedding fake system instructions and policy-triggering content — including references to nuclear and biological weapons — inside JavaScript comment blocks to confuse or trigger refusal behaviour in LLM-powered security analysis pipelines. The technique does not affect code execution but is specifically designed to disrupt naive AI-first triage tools that feed raw file content to language models without isolating it as untrusted data. Traditional static analysis methods remain unaffected, but the approach signals an emerging class of anti-AI-analysis evasion techniques.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.