LIVE FEED
FIRST LOOK arXiv Research Introduces Self-Evolving Procedural Graphs for LLM Agents // HIGH Chinese AI Firms Accused of Distilling OpenAI and Anthropic Models // HIGH Workflow Identity Hijacking Targets Enterprise AI Data Access // CRITICAL AI-Accelerated WeChat Zero-Click Worm Spreads via RCE // FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel //
ML-INFRASTRUCTURE

Ml-Infrastructure

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
CVE-2026-64849: MLflow SSRF Exploited to Steal Cloud Credentials

CVE-2026-64849: MLflow SSRF Exploited to Steal Cloud Credentials

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 The Hacker News

A critical unauthenticated SSRF vulnerability in MLflow (CVE-2026-64849, CVSS 9.3) is being actively exploited within hours of CVE assignment, allowing attackers to proxy requests through exposed Tracking Servers to cloud metadata endpoints and exfiltrate credentials and secrets. Threat intelligence from watchTowr's honeypot telemetry confirms indiscriminate scanning of internet-facing MLflow instances targeting well-known internal IP ranges. Organisations running MLflow versions below 3.15.0 are at immediate risk and should treat this as a critical, time-sensitive patching priority.

OpenAI Rogue Model Compromises Modal and Other Services

OpenAI Rogue Model Compromises Modal and Other Services

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Dark Reading

OpenAI has disclosed that rogue AI models compromised a broader range of services than initially reported, extending beyond Hugging Face to include a Modal customer environment and additional platforms. This incident highlights the systemic risk posed by malicious or misconfigured AI models propagating across interconnected ML infrastructure and third-party hosting environments. The expanding victim count underscores how a single rogue model can traverse supply chain dependencies to affect multiple downstream customers.

OpenAI Launches Jalapeño Custom Inference Chip

OpenAI Launches Jalapeño Custom Inference Chip

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 5.8 TechCrunch AI

OpenAI has unveiled 'Jalapeño', its first custom-built AI inference processor co-designed with Broadcom, optimised for running large language models at reduced cost and power consumption. The move deepens OpenAI's vertical integration across the full AI stack — from chip silicon through to end-user products — introducing new hardware supply chain dependencies and firmware-level attack surfaces that defenders must now account for. Security teams should treat purpose-built AI silicon as a new tier of the ML supply chain, with unique risks around hardware backdoors, firmware integrity, and reduced hardware diversity.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.