LIVE FEED
FIRST LOOK OpenAI Launches AI-Powered Security Sprint with Cathedral Systems // FIRST LOOK Google DeepMind AI Agents Accelerate Cryptographic Vulnerability Research // HIGH BOSSAI AI Agents Used to Breach Taipei Emergency Dispatch Systems // FIRST LOOK NVIDIA OpenShell Brings Sandboxed Runtime to Secure AI Agents // FIRST LOOK Axiom Math Launches Formally Verified AI Math Foundation in Lean // HIGH ChatGPT Lockdown Mode Bypassed to Exfiltrate Chats Silently // FIRST LOOK Microsoft Ships Dynamic Permissions and Execution Containers for AI Agents // CRITICAL ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks // FIRST LOOK OpenAI Partners with Hacktron to Find Vulnerabilities in AI Systems // FIRST LOOK Anthropic Accelerates AI Development Using Automated Research Tools //
RUSSIA-NEXUS

Russia-Nexus

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
GreyVibe Deploys ChatGPT and Gemini in LLM Attack Chain

GreyVibe Deploys ChatGPT and Gemini in LLM Attack Chain

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 SecurityWeek

WithSecure has documented GreyVibe, a Russia-nexus threat actor systematically deploying ChatGPT, Google Gemini, and Ideogram AI across every phase of its attack chain — from phishing lure creation to custom malware development — against Ukrainian targets since August 2025. The group's LLM-assisted malware, LegionRelay, contained design flaws introduced during AI-generated development, which paradoxically allowed researchers to track the group over an extended period. The case illustrates both the operational leverage AI provides to moderately skilled threat actors and the novel forensic signatures that AI-assisted development can inadvertently introduce.

PromptSpy Zero-Day: AI-Generated Malware for Mass Exploitation

PromptSpy Zero-Day: AI-Generated Malware for Mass Exploitation

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Mandiant Blog

Google's Threat Intelligence Group (GTIG) has identified, for the first time, a criminal threat actor using a zero-day exploit believed to have been AI-generated, intended for mass exploitation before proactive counter-discovery intervened. The report also documents AI-augmented malware development, autonomous attack orchestration via AI-enabled malware (PROMPTSPY), and obfuscated LLM access pipelines used by adversaries to bypass usage controls. Nation-state actors from China and North Korea are actively pursuing AI-assisted vulnerability discovery, marking a significant escalation in adversarial AI capability.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.