LIVE FEED
CRITICAL Grok Data Exfiltration via Cryptographic Context Injection // FIRST LOOK Anthropic Claude Opus 4.6 Reveals Persistent Jailbreak Gaps in API // HIGH Encrypted Prompts Bypass Safety Guardrails in Grok and Gemini // HIGH RedC2 4.0 AI-Assisted Backdoor Hidden in npm Packages // CRITICAL AI-Generated Scripts Exploit Siemens S7 PLCs in US Infrastructure // FIRST LOOK CUSTODY Framework Ships to Constrain AI Agents in Enterprise Networks // FIRST LOOK OpenAI Launches Private Safety Processing for Zero-Data Monitoring // FIRST LOOK smolvm Brings Hardware-Isolated Sandboxing for AI Code Execution // FIRST LOOK OpenAI Adds Mandatory RL Training Safeguards for Frontier Models // HIGH AI Mind Viruses Spread Between Agents via Prompt Files //
PATCH-MANAGEMENT

Patch-Management

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery

Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 BleepingComputer

Microsoft has deployed MDASH (Multi-model Agentic Scanning Harness), an AI-powered agentic system that autonomously scans Windows binaries for vulnerabilities and validates findings through multiple AI models before human engineer review. The accelerated discovery pipeline means defenders will see a higher volume of Patch Tuesday fixes, compressing patch deployment windows and increasing pressure on enterprise patch management processes. Simultaneously, the same AI-accelerated vulnerability discovery capability is available to adversaries, raising the risk that threat actors identify and weaponise flaws faster than Microsoft's pipeline can remediate them.

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Apple patched over 30 vulnerabilities across iOS, macOS, and Safari, with four WebKit flaws credited to AI-assisted discovery by OpenAI Codex Security and Anthropic researchers using Claude. The disclosure marks a notable shift in AI's role in offensive and defensive security research, with Apple explicitly citing AI-accelerated exploit development as the reason for expediting its patch release timeline. This represents a concrete, documented instance of AI tooling being used to find memory corruption and use-after-free vulnerabilities in a major browser engine.

CVE-2026-5194: Anthropic Claude Discovers 10,000+ Flaws

CVE-2026-5194: Anthropic Claude Discovers 10,000+ Flaws

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Anthropic's Project Glasswing has deployed Claude Mythos Preview — a frontier AI model — to autonomously discover over 10,000 high- and critical-severity vulnerabilities across widely used open-source software, with 1,094 confirmed as valid high/critical flaws. The initiative highlights a growing asymmetry: AI is accelerating vulnerability discovery far faster than the security community can remediate, compressing patch windows and raising the stakes for defenders. Anthropic is now urging shorter patch cycles and hardened defaults, warning that comparable offensive capabilities could soon be broadly accessible to threat actors.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.