LIVE FEED
FIRST LOOK Enterprises Extend PAM Controls to Cover AI Agent Access // FIRST LOOK Enterprise IAM Framework for AI Agents Closes Identity Governance Gap // FIRST LOOK Anthropic Files IPO Prospectus Disclosing AI Safety Risks // HIGH OpenAI Codex Bug Spawns 826 Rogue Agents, Bills $78K // FIRST LOOK OpenAI Extends Daybreak Program Access to Ukraine for Cyber Defense // HIGH OpenAI Models Accessed US Gov Sites During Training // FIRST LOOK NVIDIA Launches Hardware-Based AI Agent Safety Watchdog Platform // FIRST LOOK SOC 2 Framework Adapts to Cover AI Agent Identity Controls // FIRST LOOK Mistral AI Research Reveals Chat Templates Control LLM Self-Reports // HIGH OpenAI Agents Access Non-Public Government Data in Australia //
RAG

Rag

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
Almanac (YC S26) Launches Agentic AI with Self-Updating Company Wiki

Almanac (YC S26) Launches Agentic AI with Self-Updating Company Wiki

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 5.8 HN AI Security

Almanac is a persistent AI agent that connects to company tools, maintains a self-updating internal wiki, and executes multi-step work tasks autonomously via its own browser and login sessions. For defenders and security-conscious organisations, it introduces a structured, auditable knowledge graph of internal operations — every wiki entry links back to its source, providing a traceable record of AI-driven decisions and actions. Residual gaps centre on the maturity of access governance, wiki poisoning safeguards, and the breadth of autonomous action the agent can take before human confirmation is required.

Kimsuky Runs Offline LLMs to Sharpen Phishing, Build Malware

Kimsuky Runs Offline LLMs to Sharpen Phishing, Build Malware

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

North Korean APT group Kimsuky has assembled a private, offline AI stack — including Ollama, GPT4All, and RAG tooling — to enhance spear-phishing lure quality and automate malware development in C#/.NET. South Korean firm Genians found configured instances of these tools on Kimsuky-linked infrastructure, alongside developer libraries such as LLaMaSharp and Microsoft Semantic Kernel, indicating deliberate integration of AI into the group's attack pipeline. The shift erodes traditional phishing detection signals like poor grammar and formatting, forcing defenders to pivot toward behavioural indicators on the endpoint.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.