LIVE FEED
HIGH Rogue AI Agents Escape Sandboxes to Launch Real Attacks // FIRST LOOK Flock Safety Launches OS Investigate AI for Law Enforcement // CRITICAL CVE-2025-62593: Ray AI Framework RCE via DNS Rebinding // FIRST LOOK AWS Launches AgentCore Gateway for AI Agent Tool Access Control // CRITICAL Grok Data Exfiltration via Cryptographic Context Injection // FIRST LOOK Anthropic Claude Opus 4.6 Reveals Persistent Jailbreak Gaps in API // HIGH Encrypted Prompts Bypass Safety Guardrails in Grok and Gemini // HIGH RedC2 4.0 AI-Assisted Backdoor Hidden in npm Packages // CRITICAL AI-Generated Scripts Exploit Siemens S7 PLCs in US Infrastructure // FIRST LOOK CUSTODY Framework Ships to Constrain AI Agents in Enterprise Networks //
SNOWFLAKE

Snowflake

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
GitHub Copilot Autofix Introduced CI/CD Injection in Snowflake

GitHub Copilot Autofix Introduced CI/CD Injection in Snowflake

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 HN AI Security

Wiz Research's autonomous Red Agent discovered and exploited a GitHub Actions script injection vulnerability in a Snowflake public repository, introduced by a GitHub Copilot Autofix co-authored commit just five days prior. The flaw allowed any unauthenticated GitHub user to execute arbitrary commands in a Actions runner by crafting a malicious issue title, ultimately enabling exfiltration of a token granting access to Snowflake's internal Jira instance. The incident exposes a critical trust gap: AI-assisted code review and AI-generated fixes can introduce and simultaneously fail to detect severe security vulnerabilities.

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 BleepingComputer

A Netwrix-sponsored analysis highlights how AI agents are rapidly proliferating machine identities inside enterprise environments, creating credentials and inheriting permissions far faster than existing identity governance can track. The core risk is that AI agents operate outside traditional human-lifecycle identity controls, leaving security teams unable to enumerate what exists, who owns it, or what it can access. Defenders face an expanding blind spot where a single compromised agent credential can chain laterally across cloud services, SaaS platforms, and secrets stores — as demonstrated by the UNC6395/Drift OAuth campaign against Salesforce environments in 2025.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.