LIVE FEED
HIGH OpenAI Compaction Flaw Exposes Hidden Reasoning in GPT-5.6 // FIRST LOOK OpenAI GPT-6.1 Sol Powers CodeRabbit Security Agent // MEDIUM Meta Muse AI Agent Exploits Cart Reserve to Block Shoppers // FIRST LOOK OpenAI GPT-6 Astra Powers Greptile Bug Detection Beyond Code Review // HIGH Qwen3-Coder Bias Produces Insecure Code for US Defense Apps // HIGH AI-Powered Vishing Lets Fraudsters Bypass Help Desks // HIGH AI Agents Hijacked via Prompt Injection and Malicious Skills // HIGH Aokigahara Infostealer Targets Claude, Copilot, and Cursor Credentials // CRITICAL LiteLLM 1.107.0 Supply Chain Attack Steals AI Credentials // FIRST LOOK OpenAI Trains Frontier Models in Air-Gapped Offline Environments //
SMISHING

Smishing

3 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
RatHat Android Malware Uses Generative AI to Control Devices

RatHat Android Malware Uses Generative AI to Control Devices

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 6.2 The Hacker News

RatHat is a sophisticated Android RAT attributed to China-based threat actors that abuses Android Debug Bridge (ADB) to maintain persistent shell access even after the malware is uninstalled. Notably, the malware integrates a generative AI assistant to parse on-screen accessibility trees and autonomously direct device interactions, representing an emerging class of AI-augmented mobile threats. Its layered anti-analysis techniques and persistence mechanisms make it a significant threat to Android users targeted via smishing and malvertising campaigns.

Google Gemini Abused for Phishing-as-a-Service

Google Gemini Abused for Phishing-as-a-Service

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 Schneier on Security

A Chinese cybercriminal group called Outsider Enterprise exploited Google's Gemini AI to mass-produce phishing pages impersonating Google, YouTube, and government agencies like E-ZPass, offering nearly 300 scam templates via Telegram. Google has filed suit and coordinated with major US carriers to block the resulting smishing campaigns. The case highlights how generative AI lowers the technical barrier for large-scale phishing operations and stress-tests provider-side content controls.

Google Gemini Prompt Injection Powers Smishing Campaign

Google Gemini Prompt Injection Powers Smishing Campaign

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 The Hacker News

Google has filed suit against a Chinese cybercrime network operating the Outsider phishing-as-a-service kit, which exploited Gemini AI to generate fraudulent phishing pages and power large-scale SMS phishing attacks against Americans. The network used carefully framed prompts — disguised as benign programming requests — to bypass AI safety controls and produce functional credential-harvesting websites. The case illustrates the growing industrialisation of AI-assisted phishing infrastructure, with over 1.59 million malicious URLs and 100,000 victims attributed to the operation.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.