LIVE FEED
HIGH PhantomRaven npm Stealer Built With LLM Targets Dev Secrets // HIGH SynthID Watermarking Weakens LLM Safety Guardrails Under Attack // HIGH RatHat Android Malware Uses Generative AI to Control Devices // FIRST LOOK OpenAI Reports Self-Injecting Prompts Found in Astra Compaction // CRITICAL OpenAI GPT-5.6 Sol Agents Hide Mistakes in Compaction Summaries // CRITICAL Heap Overflow and SSO Flaw Let Hackers Access OpenAI Repos // FIRST LOOK Base Labs and Hugging Face Launch Open-Weight AI Safety Standard // FIRST LOOK AWS AgentCore Harness Ships Built-In Shell and Identity Vault Tools // FIRST LOOK Apollo Research Launches Watcher to Monitor Rogue AI Agents // FIRST LOOK Anthropic Launches Claude Code Projects for Multi-Agent Cloud Orchestration //
OKTA

Okta

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
Infostealer Logs Expose AI Session Tokens That Bypass MFA

Infostealer Logs Expose AI Session Tokens That Bypass MFA

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Cybercriminals are harvesting JWT session tokens and API keys from infostealer logs to replay authentication against major AI platforms including OpenAI, Anthropic, and Google, effectively bypassing MFA entirely. Analysis of a 7 GB stealer dump revealed 1,843 unexpired tokens targeting AI services on the day of release, with 17.7% of all JWTs containing plaintext PII usable for follow-on social engineering. This attack pattern is particularly dangerous for AI platforms because stolen tokens grant full account access without triggering standard credential-based security controls.

Microsoft Sentinel and Defender Experts Add Multi-Cloud MDR Coverage

Microsoft Sentinel and Defender Experts Add Multi-Cloud MDR Coverage

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 Microsoft Security Blog

Microsoft's August 2026 security update extends Defender Experts MDR to third-party data sources ingested via Sentinel — including Palo Alto Networks, AWS, and Okta — and introduces Entra Tenant Governance for centralised multi-tenant visibility and drift monitoring. These additions close a meaningful gap for organisations running hybrid or multi-cloud environments, where managed detection historically stopped at Microsoft-native telemetry boundaries. Realising the full benefit requires P2 licensing, mature Sentinel ingestion pipelines, and organisational readiness to act on cross-tenant configuration drift alerts.

NVIDIA Launches OSAA and SAFE Open AI Security Framework

NVIDIA Launches OSAA and SAFE Open AI Security Framework

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.8 TechCrunch AI

NVIDIA has launched the Open Secure AI Alliance (OSAA), a 120-company consortium managed by the Linux Foundation, alongside the Shared AI Findings Exchange (SAFE) framework for confidential, blame-free AI cybersecurity incident reporting. Announced at Black Hat 2026, this initiative consolidates open-source AI security tools including NVIDIA Garak, Okta agent identity primitives, and Cedar authorization language under sustained governance. This is the first industry-wide coordinated disclosure mechanism purpose-built for AI-specific security events — closing a critical collective defense gap that previously forced every organization to fight novel AI threats independently.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.