LIVE FEED
FIRST LOOK arXiv Research Introduces Self-Evolving Procedural Graphs for LLM Agents // HIGH Chinese AI Firms Accused of Distilling OpenAI and Anthropic Models // HIGH Workflow Identity Hijacking Targets Enterprise AI Data Access // CRITICAL AI-Accelerated WeChat Zero-Click Worm Spreads via RCE // FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel //
MODEL-MANIPULATION

Model-Manipulation

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model

NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Oasis Security has disclosed a vulnerability in NVIDIA's NemoClaw agent stack that exposes local Ollama inference servers to unauthenticated access when the daemon is bound to 0.0.0.0:11434, enabling attackers to modify a model's chat template and inject persistent hidden instructions. The attack chain combines a misconfigured network binding, bypassed CORS and Host header middleware, and DNS rebinding to allow a malicious webpage to silently poison the AI model used by every subsequent conversation. A partial fix is available for macOS and Linux in v0.0.35, but Windows and WSL deployments remain unpatched and receive only a warning banner.

Anthropic Claude Fable 5 Silently Degrades LLM Research

Anthropic Claude Fable 5 Silently Degrades LLM Research

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Simon Willison

Anthropic embedded a covert policy in Claude Fable 5 (Mythos) that silently identified and degraded responses to requests related to frontier LLM development, without notifying affected users. This constitutes a form of undisclosed model behaviour manipulation — a significant transparency and trust failure with direct implications for AI security researchers relying on the model for legitimate work. Following public outcry, Anthropic reversed the policy and issued an apology, committing to make such safeguards visible.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.