LIVE FEED
HIGH Hermes AI Agent Automates Post-Exploitation Attack on Thai Finance Ministry // FIRST LOOK Google Gemma Tech Brings 28.9M LLM to ESP32 Microcontrollers // HIGH AI Coding Agents Exploited via Hallucinated Package Names // FIRST LOOK AWS Adds Bedrock Guardrails Best Practices for Code Generation // FIRST LOOK Anthropic Brings Voice Mode to Claude Opus and Sonnet Models // FIRST LOOK Anthropic and OpenAI Open Vetted Cyber Programs for Offensive Researchers // HIGH Threat Actor Trim Weaponises AI Jailbreaks for Offensive Ops // HIGH Fake Claude App via Bing Ads Delivers SectopRAT Malware // HIGH Dolphin X RAT Uses AI Profiler to Rank and Score Victims // CRITICAL CVE-2026-46331: Claude Cowork VM Sandbox Escape on macOS //
PLUGIN-SECURITY

Plugin-Security

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
Iroh Launches Mesh LLM for Distributed AI Across Peer Nodes

Iroh Launches Mesh LLM for Distributed AI Across Peer Nodes

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 HN AI Security

Mesh LLM on iroh enables teams to pool GPUs across arbitrary machines into a single OpenAI-compatible inference endpoint, distributing model layers peer-to-peer over authenticated QUIC connections with no central server. This dramatically expands the attack surface for defenders: the decentralised, pluggable architecture introduces new vectors for node impersonation, malicious plugin injection, inter-stage activation tampering, and supply chain compromise across every participating endpoint. Security teams evaluating self-hosted or federated AI deployments must treat each mesh peer as a potential adversary boundary, not a trusted internal resource.

Excessive Agency in AI Agents: Tool Access Control Gaps

Excessive Agency in AI Agents: Tool Access Control Gaps

ATLAS OWASP LOW Limited impact · Standard review ▲ 6.2 HN AI Security

Statewright is an open-source framework that enforces state machine constraints on AI agents, restricting which tools agents can invoke during each phase of a workflow. The project directly addresses the Excessive Agency problem, where AI agents operating with broad, unconstrained tool access can take unintended or harmful actions. While a defensive development rather than a threat disclosure, it signals growing practitioner awareness of agentic AI risk and offers a concrete mitigation pattern for teams deploying coding agents like Claude Code, Codex, or Cursor.

CVE-2026-26030: Semantic Kernel RCE via Prompt Injection

CVE-2026-26030: Semantic Kernel RCE via Prompt Injection

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Microsoft Security Blog

Microsoft's Defender Security Research Team disclosed two CVEs in Semantic Kernel — a widely-used AI agent orchestration framework — demonstrating how prompt injection can escalate to remote code execution via compromised plugins. The vulnerabilities (CVE-2026-26030 and CVE-2026-25592) expose a systemic risk in the agentic AI layer: because frameworks like Semantic Kernel abstract tool orchestration, a single flaw in how LLM outputs are mapped to system tools can propagate across every application built on that foundation. This research signals a critical shift in AI threat modelling, where prompt injection is no longer a content risk but an execution risk.

Supply Chain Risk: Gradio MCP Server Exposes AI Agents

Supply Chain Risk: Gradio MCP Server Exposes AI Agents

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 Hugging Face Blog

Hugging Face's Gradio MCP server integration enables LLMs to connect to thousands of third-party AI tools via Hugging Face Spaces, significantly expanding the attack surface for agentic AI systems. This architecture introduces supply chain risks, excessive agency concerns, and potential for malicious tool servers to manipulate LLM behaviour through crafted outputs. While presented as a productivity feature, the open, community-driven nature of the 'MCP App Store' raises serious vetting and trust boundary concerns.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.