LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
SANDBOXED-EXECUTION

Sandboxed-Execution

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
NVIDIA OpenShell Brings Sandboxed Runtime to Secure AI Agents

NVIDIA OpenShell Brings Sandboxed Runtime to Secure AI Agents

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.2 NVIDIA AI Blog

NVIDIA has introduced OpenShell, a secure runtime component of its Open Agent Safety Platform, offering sandboxed execution and policy-based access controls for enterprise AI agents, with Hyundai and AIM Intelligence among early adopters. For defenders, this closes a meaningful gap in agentic AI governance — specifically the lack of runtime-level controls over what autonomous agents can access, execute, and exfiltrate within enterprise environments. Realising the full benefit will depend on integration maturity, breadth of enterprise tool coverage, and how consistently policy frameworks are configured and maintained across deployments.

OpenAI Astra Launches with Critical-Level Cyber Evaluation Controls

OpenAI Astra Launches with Critical-Level Cyber Evaluation Controls

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

OpenAI has paused internal activities involving its upcoming Astra model after preliminary evaluations found it may possess 'Critical' cyber capabilities under its Preparedness Framework, including potential autonomous zero-day exploit development and end-to-end cyberattack orchestration. The disclosure is a meaningful defensive advance: OpenAI is operationalising its safety framework in real time, implementing universal agentic monitoring, isolated execution environments, and government-partnered capability testing before deployment rather than after. Residual gaps remain around third-party validation maturity, the operational readiness of defenders to absorb AI-assisted vulnerability discovery at scale, and the absence of standardised cross-industry thresholds equivalent to OpenAI's Preparedness Framework.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.