LIVE FEED
CRITICAL Anthropic Exposes 200M-Exchange Model Distillation Attacks // FIRST LOOK OpenAI Launches Agents API with Sandboxes and Multi-Agent Orchestration // FIRST LOOK CISOs Deploy AI Agent Governance Controls to Cut Privilege Risk // FIRST LOOK AWS Brings Model-Agnostic PII Detection to LLM Pipelines // MEDIUM OpenAI Training Opt-Out Setting Silently Re-Enabled for Users // HIGH Anthropic CEO Warns AI Agents Could Seize Internet Control // HIGH Infostealer Logs Expose AI Session Tokens That Bypass MFA // HIGH AI Agents Compress Exploit Discovery to Minutes After Rumour // CRITICAL Claude Misuse Spans Cybercrime, Hacking, and Bioweapons // CRITICAL OpenAI Rogue AI Agents Attack RubyGems via RCE and API Key Theft //
OT-SECURITY

Ot-Security

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders

OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders

FIRST LOOK ATLAS OWASP LOW Limited impact · Standard review ▲ 7.2 SecurityWeek

OpenAI's Daybreak initiative commits $1 billion to provide subsidised frontier AI capabilities, training, and technical assistance specifically to critical infrastructure defenders. This directly addresses the resource asymmetry gap where well-funded adversaries have increasingly leveraged AI tooling while under-resourced defenders in sectors like energy, water, and transport have lacked comparable access. Key unknowns around eligibility criteria, cost structures, and delivery timelines mean operational benefit remains contingent on programme execution details not yet disclosed.

AI-Generated Scripts Exploit Siemens S7 PLCs in US Infrastructure

AI-Generated Scripts Exploit Siemens S7 PLCs in US Infrastructure

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 7.8 The Hacker News

U.S. federal agencies including NSA, CISA, and FBI have issued a joint advisory warning that threat actors are using AI-generated exploit scripts to target Siemens S7 Series PLCs across critical infrastructure sectors. The AI-assisted tooling lowers the barrier to ICS attacks by automating exploit generation against known vulnerabilities, with scripts masquerading as legitimate industrial monitoring utilities. The scope extends beyond Siemens hardware to broader OT environments spanning energy, water, manufacturing, food, and chemical sectors.

Dragos Launches EmberAI, an OT-Specific AI Platform

Dragos Launches EmberAI, an OT-Specific AI Platform

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 SecurityWeek

Dragos has launched EmberAI, an AI module embedded within its OT security platform that allows analysts to query threat intelligence, asset data, and network activity in plain language, grounded in a decade of proprietary OT-specific data. The system introduces new attack surface considerations because it aggregates highly sensitive OT network telemetry, vulnerability data, and adversary intelligence into a single AI-queryable layer — making the platform itself a high-value target. Defenders must weigh the risks of prompt injection, over-reliance on AI-generated recommendations in safety-critical environments, and the intelligence value this consolidated dataset represents to nation-state adversaries.

NVIDIA Launches XR AI for Agentic AR Glasses

NVIDIA Launches XR AI for Agentic AR Glasses

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 NVIDIA AI Blog

NVIDIA XR AI is a public-beta developer SDK that embeds persistent multimodal AI agents into AR glasses, fusing live video, audio, depth, and pose sensor streams with enterprise knowledge retrieval and tool execution to give frontline workers in manufacturing, healthcare, and research hands-free access to contextual intelligence. This closes a longstanding gap between enterprise knowledge systems and the physical point of work, enabling real-time decision support directly in a worker's field of view without interrupting task flow. Realising the full security benefit of the platform requires establishing input validation baselines, scoped retrieval permissions, and plugin governance practices that are not yet standardised for physical-world agent deployments.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.