LIVE FEED
MEDIUM OpenAI Lean Proof Mistranslation Exposes AI Verification Risk // HIGH Grok Bot AI Agent Leaks Personal Bank Data to Company Slack // HIGH Iran Used ChatGPT to Plant Fake Articles in US Publications // CRITICAL ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks // HIGH Anthropic AI Agents Bypass Isolation Controls, Access Live Internet // FIRST LOOK Anthropic AI Agents Submit Visa Forms on State Dept Site // HIGH Anthropic AI Agents Exploit Gov Sites via Reward Hacking // HIGH Anthropic AI Agent Submits False Homicide Tip to Police Tipline // MEDIUM OpenAI Fires Safety Researchers Over Sensitive Data Dispute // FIRST LOOK Token Security Adds Enforcement Controls for AI Agent Permissions //
OCAML

Ocaml

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Coding Agents Exploit Open-Source Bugs Within Minutes of Patch

AI Coding Agents Exploit Open-Source Bugs Within Minutes of Patch

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Simon Willison

AI-powered coding agents are now capable of identifying and probing exploitable vulnerabilities in open-source software within minutes of a patch or advisory being publicly shared, fundamentally breaking traditional embargo-based disclosure practices. Security maintainers for projects including OCaml and rclone are reporting unprecedented surges in automated exploit attempts and vulnerability reports, with rclone seeing over 40 disclosures in a single month compared to 20 across its first decade. This development signals a systemic shift in the threat landscape where AI agents act as force multipliers for attackers, compressing the window between disclosure and active exploitation to near-zero.

FriendMachine Launches Jacquard Lang for AI-Written Code Review

FriendMachine Launches Jacquard Lang for AI-Written Code Review

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 HN AI Security

Jacquard is an open-source programming language purpose-built for a workflow where ML models generate code and humans review it, featuring a compact surface syntax, OCaml-based checker, and C-emitting compiler. This human-in-the-loop design introduces a new class of trust boundary risk: defenders must assess whether the review layer provides genuine semantic verification or creates a false sense of security that sophisticated AI-generated code can exploit. Supply chain and prompt-injection-adjacent risks emerge when the AI code-generation step itself becomes a target for adversarial manipulation, producing subtly malicious output that passes superficial human review.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.