LIVE FEED
FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel // FIRST LOOK Capsule Security Launches AI Circuit Breaker for Rogue Agents // MEDIUM Rogue AI Agents Drive Insurers to Rethink Cyber Risk // HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits //
UKRAINE

Ukraine

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis

UAC-0099 GuardBreaker Trips LLM Safety to Block Malware Analysis

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Russia-aligned threat actor UAC-0099 has deployed a technique called GuardBreaker that embeds nuclear weapon prompts inside malicious VBS scripts to deliberately trigger LLM safety guardrails and prevent AI-assisted malware analysis. This represents a maturing offensive tradecraft where adversarial prompt injection is weaponised not to extract information but to induce refusal states in AI security tooling. The technique mirrors similar tactics observed in the TeamPCP supply chain campaigns, signalling that LLM-first security pipelines are becoming a recognised and actively exploited weak point.

GreyVibe Uses ChatGPT and Gemini for Ukraine Cyberespionage

GreyVibe Uses ChatGPT and Gemini for Ukraine Cyberespionage

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 BleepingComputer

A likely Russian threat group dubbed GreyVibe has been actively using commercial LLMs — including ChatGPT and Google Gemini — to generate high-quality phishing lures, malware tooling, and social-engineering content targeting Ukrainian military, government, and civilian organisations. WithSecure researchers identified LLM artefact markers embedded in campaign imagery, confirming AI-assisted content generation at scale. The case represents a concrete, documented example of adversarial LLM weaponisation in an active nation-state-adjacent cyberespionage campaign.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.