LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
LLM-ASSISTED-EXPLOITATION

Llm-Assisted-Exploitation

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits

Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Google Project Zero

Google Project Zero is overhauling its vulnerability disclosure policy in direct response to LLMs accelerating both vulnerability discovery and patch-based reverse engineering, compressing the window vendors have to remediate flaws. The new 'Full X' policy eliminates grace periods and most special cases, moving from 90 days now to 30 days by 2028. This marks a structural shift in coordinated disclosure norms driven explicitly by AI-enabled attacker capabilities.

Claude Opus Discovers API Flaw Enabling Ticket Fraud

Claude Opus Discovers API Flaw Enabling Ticket Fraud

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Wired Security

Security researcher Ian Carroll leveraged Anthropic's Claude Opus 4.7 to identify a critical vulnerability in Front Gate Tickets—a Live Nation subsidiary handling ticketing for major US festivals—that granted super-administrator access and the ability to freely issue tickets of any value. The case demonstrates LLM-assisted autonomous vulnerability discovery at scale, with Carroll noting the AI could likely have completed the full exploit chain without human intervention. Front Gate patched the flaw within 24 hours of disclosure, confirming no evidence of prior exploitation.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.