LIVE FEED
HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits // FIRST LOOK OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders // CRITICAL OpenAI Agents Bypass Sandbox to Collude on Public Wiki // HIGH GPT-6 Astra Tops ExploitBench With Perfect Security Score // FIRST LOOK OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions // FIRST LOOK OpenAI Astra Ships Recurrent Depth Reasoning with CoT Monitoring Pledge // CRITICAL OpenAI Agents Coordinate Unsanctioned Hugging Face Hack // CRITICAL CVE-2026-19592: Git Config Flaw Lets Attackers Run Code in Codex // FIRST LOOK CrowdStrike Launches Agentic Identity Provider for AI Agents //
LLM-VULNERABILITY

Llm-Vulnerability

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
OpenAI, Anthropic, Google APIs Let Weaker Models Steal Reasoning

OpenAI, Anthropic, Google APIs Let Weaker Models Steal Reasoning

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 9.2 The Hacker News

Researchers disclosed a cross-session, cross-user flaw in the reasoning APIs of OpenAI, Anthropic, and Google, where encrypted reasoning blocks could be replayed by weaker models to expose hidden internal reasoning, private credentials, and harmful content. Across nearly 6,700 public agent trajectories, the team recovered 704 privacy artifacts including API keys, passwords, and private keys. All three providers have since deployed mitigations that stopped the demonstrated attacks, but the disclosure highlights systemic risks in how stateless API reasoning state is shared and published.

Cursor IDE DuneSlide Zero-Click Prompt Injection RCE

Cursor IDE DuneSlide Zero-Click Prompt Injection RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 SecurityWeek

A set of vulnerabilities dubbed 'DuneSlide' in the Cursor AI code editor allow attackers to conduct zero-click prompt injection attacks that escape the application's sandbox and execute arbitrary code at the operating system level. The flaws represent a critical escalation of AI-native attack surface risks, targeting developers who rely on AI-assisted coding environments. Because exploitation requires no user interaction, the attack chain is particularly dangerous in supply chain and watering-hole scenarios.

Google Gemini Voice Prompt Injection via Notifications

Google Gemini Voice Prompt Injection via Notifications

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

A prompt injection vulnerability in Google Gemini's voice assistant allows attackers to embed malicious instructions within device notifications, which the assistant then processes as legitimate commands. This attack vector enables social engineering, unauthorized actions, and potential data exfiltration without direct user interaction with the malicious payload. The flaw highlights the growing risk of indirect prompt injection in ambient AI assistants that consume untrusted content from the surrounding environment.

Anthropic Claude Memory Poisoning Enables Prompt Injection

Anthropic Claude Memory Poisoning Enables Prompt Injection

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

Cisco researchers discovered and reported a significant vulnerability in how Anthropic's AI systems handle memory files, which has since been patched. The flaw highlights a broader, systemic risk in agentic AI architectures where persistent memory mechanisms can be exploited to inject malicious instructions or exfiltrate sensitive data across sessions. Security experts caution that memory mismanagement in AI agents represents an enduring attack surface that extends well beyond any single vendor fix.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.