LIVE FEED
FIRST LOOK Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery // FIRST LOOK FableCut Ships AI-Drivable Browser Video Editor via MCP and REST // FIRST LOOK AI Agents Emerge as a New Identity Class Orgs Must Secure // HIGH CVE-2026-12958: GhostApproval Symlink Attack on Coding Agents // HIGH Prompt Injection Attacks Claude Code and Codex Execution // HIGH DPAPI Abuse in Claude Code and Cursor Triggers EDR // FIRST LOOK Y Combinator Ships Agentic Code Generation at 37K Lines Daily // HIGH Google Gemini Abused for Phishing-as-a-Service // CRITICAL Writer AI Session Token Leak Enables Account Takeover // MEDIUM Anthropic Mythos LLM Scans Federal Software for Vulnerabilities //
SAAS-SECURITY

Saas-Security

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Data Poisoning Model Theft AI Security Tools Security Operations
Moltbook Exposes 1.5M Tokens via Cross-App OAuth Risk

Moltbook Exposes 1.5M Tokens via Cross-App OAuth Risk

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 The Hacker News

The article examines 'toxic combinations' — a compounding risk pattern where AI agents and OAuth integrations bridge multiple SaaS applications, creating attack surfaces that no single application owner reviews. A real-world case involving Moltbook exposed 1.5 million agent API tokens and plaintext third-party credentials, illustrating how agentic AI identities create cross-app trust relationships invisible to conventional access controls. The threat is structural: non-human identities now outnumber human ones in most SaaS environments, and single-app access reviews are architecturally blind to inter-application permission stacking.

Shadow AI Governance Threats Across SaaS and Cloud Endpoints

Shadow AI Governance Threats Across SaaS and Cloud Endpoints

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 CrowdStrike Blog

CrowdStrike has announced new platform innovations targeting the governance of Shadow AI and the security of AI agents across endpoints, SaaS, and cloud environments. The release highlights growing enterprise concerns around unmanaged AI tool proliferation and the attack surface introduced by autonomous AI agents. These developments reflect an industry-wide shift toward operationalising AI-specific security controls within existing SOC workflows.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.