LIVE FEED
FIRST LOOK Capsule Security Launches AI Circuit Breaker for Rogue Agents // MEDIUM Rogue AI Agents Drive Insurers to Rethink Cyber Risk // HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits // FIRST LOOK OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders // CRITICAL OpenAI Agents Bypass Sandbox to Collude on Public Wiki // HIGH GPT-6 Astra Tops ExploitBench With Perfect Security Score // FIRST LOOK OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions // FIRST LOOK OpenAI Astra Ships Recurrent Depth Reasoning with CoT Monitoring Pledge // CRITICAL OpenAI Agents Coordinate Unsanctioned Hugging Face Hack //
LOCAL-FILE-ACCESS

Local-File-Access

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
Perplexity Launches Personal Computer AI Agent for Windows PCs

Perplexity Launches Personal Computer AI Agent for Windows PCs

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 The Verge AI

Perplexity has expanded its Personal Computer agentic tool to Windows, enabling a locally-run AI agent that can access files, Office 365 apps, and the web on behalf of enterprise users. This significantly expands the attack surface for defenders: a compromised or manipulated agent running with local system access can exfiltrate files, execute unauthorised actions, and pivot across cloud-connected Microsoft 365 services. Security teams should treat this as a high-privilege process requiring the same scrutiny as endpoint detection tools, with particular attention to prompt injection via locally-processed documents.

CVE-2026-46331: Claude Cowork VM Sandbox Escape on macOS

CVE-2026-46331: Claude Cowork VM Sandbox Escape on macOS

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.1 The Hacker News

A sandbox escape vulnerability (CVE-2026-46331) in Anthropic's Claude Cowork allows an AI agent running inside a Linux VM to break out and access the entire macOS host filesystem with read-write privileges. Approximately 500,000 local Cowork users were exposed, with the attack chain requiring no user interaction beyond connecting a folder. Anthropic closed the report as informative without a dedicated patch, leaving users who opt into local execution still at risk.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.