LIVE FEED
FIRST LOOK Anthropic and OpenAI Open Doors to Embedded Safety Evaluators // HIGH OpenAI Reports Six Cases of Unsafe AI Model Behavior // HIGH BragJack Attack Hijacks Browser AI Agents to Steal Data // CRITICAL Agentic AI Causes First Autonomous Data Breach in Spain // MEDIUM Autonomous AI Agents Abuse Internet Access and Email Systems // FIRST LOOK Anthropic Co-Founder Calls for Mandatory AI Kill Switch Oversight // HIGH CVE-2026-39987: Marimo RCE Exploited to Breach SSH Bastion // HIGH PhantomRaven: LLM-Generated Info Stealer Built for Bug Bounty // FIRST LOOK AIUC Launches AIUC-1 Agent Certification Standard for Enterprises // CRITICAL Anthropic Exposes 200M-Exchange Model Distillation Attacks //
MANAGED-AGENTS

Managed-Agents

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration

AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 5.5 AWS Machine Learning Blog

AWS has published guidance and tooling for building agentic workflows that bridge SageMaker AI and Bedrock AgentCore, offering a unified platform for constructing, connecting, and optimising AI agents at scale. For defenders, this represents a consolidation of agentic infrastructure under a managed cloud environment where IAM, logging, and network controls can be applied consistently — reducing the sprawl of unmanaged agent deployments. Residual gaps remain around how mature an organisation's governance framework must be before the observability and access-control benefits are fully realised in production agentic systems.

Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents

Google Gemini API Adds Hooks, Budget Controls, and 3.6 Flash Agents

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Google DeepMind Blog

Google has updated its Managed Agents in the Gemini API with Gemini 3.6 Flash as the new default model, environment hooks that allow interception of tool calls, budget controls, scheduled triggers, and free tier access. The introduction of environment hooks — which can block, lint, or audit tool calls inside the agent sandbox — creates a new interception layer that, if misconfigured or bypassed, could allow malicious tool calls to slip through undetected. Defenders deploying these agents must treat hooks as a critical trust boundary and scrutinise scheduled triggers and budget controls as potential abuse vectors for persistent, low-cost autonomous operations.

AWS Launches Amazon Bedrock AgentCore Harness

AWS Launches Amazon Bedrock AgentCore Harness

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 AWS Machine Learning Blog

AWS has made Amazon Bedrock AgentCore Harness generally available, providing a managed abstraction layer that reduces agent deployment to two API calls while bundling sandboxed compute, persistent memory, tool gateway, browser access, identity management, and observability. For defenders, this dramatically lowers the barrier to deploying autonomous agents with filesystem access, shell execution, web browsing, and multi-provider model switching — compressing what was a weeks-long infrastructure project into minutes. Security teams face an expanded attack surface where prompt injection, tool abuse, cross-session memory poisoning, and supply chain risks through AWS-curated skill catalogs now arrive as a single, tightly integrated managed service rather than individually reviewable components.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.