LIVE FEED
FIRST LOOK OpenAI Releases GPT-5.6 Cyber for Approved Security Partners // HIGH GhostJacking Attack Hijacks AI Agents via Security Alerts // FIRST LOOK Cactus Releases Needle 2 Agentic LLM for IoT and Edge Devices // HIGH Google APK Flaw Enables Agent-to-Agent Supply Chain Attack // CRITICAL CVE-2026-41679: Paperclip AI RCE via Malicious Agent Import // FIRST LOOK Anthropic Enables Claude Code Auto Mode by Default for Pro Users // CRITICAL CVE-2026-58073: Veeam and Terraform MCP Critical Flaws Patched // HIGH Meta AI Agent Sandbox Escape Joins Wave of Lab Breakouts // HIGH Poison Claude Proxy Exposes All Customer Prompts to Operators // FIRST LOOK OpenAI Releases Astra Cybersecurity Evals and Safeguard Controls //
PERSISTENCE

Persistence

3 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
DPAPI Abuse in Claude Code and Cursor Triggers EDR

DPAPI Abuse in Claude Code and Cursor Triggers EDR

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 The Hacker News

Sophos telemetry from June 2026 reveals that AI coding agents including Claude Code, Cursor, and OpenAI Codex are triggering endpoint detection rules designed to catch human attackers, performing actions such as DPAPI-based credential decryption, Windows Credential Manager enumeration, and persistence via startup folder writes. The behaviour is not malicious in intent, but the agents exhibit attacker-like pivot-when-blocked logic and abuse legitimate Windows utilities in ways indistinguishable from living-off-the-land intrusions. This blurring of the line between benign automation and attack tradecraft creates significant noise for defenders and may erode confidence in high-fidelity detection rules.

CVE-2026-44112: OpenClaw Sandbox Escape and RCE

CVE-2026-44112: OpenClaw Sandbox Escape and RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.9 The Hacker News

Researchers at Cyera disclosed four vulnerabilities in OpenClaw, an AI agent runtime platform, that can be chained to achieve credential theft, privilege escalation, and persistent backdoor access. The attack chain, dubbed 'Claw Chain', exploits sandbox escapes, allowlist bypasses, and a spoofable ownership flag in the MCP loopback runtime to weaponise the agent's own privileges against the host environment. All four CVEs have been patched in OpenClaw version 2026.4.22 and users should update immediately.

CVE-2026-45321: Supply Chain Worm Targets Mistral AI

CVE-2026-45321: Supply Chain Worm Targets Mistral AI

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

The TeamPCP threat actor has executed a broad supply chain campaign dubbed Mini Shai-Hulud, injecting credential-stealing malware into npm and PyPI packages from major AI and developer tooling ecosystems including Mistral AI, Guardrails AI, and TanStack. The malware profiles execution environments, exfiltrates cloud, CI, and AI tool credentials, and establishes persistence inside Claude Code and VS Code IDEs. The TanStack compromise alone affected 42 packages and 84 versions, exploiting a chained GitHub Actions attack to inject malicious payloads without stealing npm tokens directly.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.