LIVE FEED
FIRST LOOK OpenAI Launches AI-Powered Security Sprint with Cathedral Systems // FIRST LOOK Google DeepMind AI Agents Accelerate Cryptographic Vulnerability Research // HIGH BOSSAI AI Agents Used to Breach Taipei Emergency Dispatch Systems // FIRST LOOK NVIDIA OpenShell Brings Sandboxed Runtime to Secure AI Agents // FIRST LOOK Axiom Math Launches Formally Verified AI Math Foundation in Lean // HIGH ChatGPT Lockdown Mode Bypassed to Exfiltrate Chats Silently // FIRST LOOK Microsoft Ships Dynamic Permissions and Execution Containers for AI Agents // CRITICAL ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks // FIRST LOOK OpenAI Partners with Hacktron to Find Vulnerabilities in AI Systems // FIRST LOOK Anthropic Accelerates AI Development Using Automated Research Tools //
MASS-EXPLOITATION

Mass-Exploitation

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
CVE-2026-81578: PaperCut Exploited by AI Agents at Scale

CVE-2026-81578: PaperCut Exploited by AI Agents at Scale

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 6.2 The Hacker News

Two actively exploited PaperCut vulnerabilities (CVE-2026-81578 and CVE-2026-82078) are being weaponised by a suspected Russian-speaking threat actor using hundreds of AI agents powered by OpenAI Codex and a DeepSeek model to conduct large-scale authentication bypass and code execution attacks. The campaign has compromised at least 395 organisations across 48 countries, with a heavy focus on the U.S. education sector. PaperCut has released full maintenance releases superseding earlier emergency patches, and immediate upgrade is advised.

AI-Generated Zero-Day: 2FA Bypass in Web Admin Tool

AI-Generated Zero-Day: 2FA Bypass in Web Admin Tool

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Google's Threat Intelligence Group has confirmed the first known instance of a threat actor using an AI model to discover and weaponize a zero-day vulnerability — a 2FA bypass in a popular open-source web administration tool. The exploit, delivered via a Python script bearing hallmarks of LLM-generated code (including hallucinated CVSS scores and structured docstrings), was designed for mass exploitation. This marks a significant inflection point in the offensive AI threat landscape, demonstrating that AI-assisted vulnerability discovery and weaponization has moved from theoretical risk to confirmed operational reality.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.