LIVE FEED
CRITICAL SGLang RCE Exploit Breaches NEAR AI, Hits 18 Agents // FIRST LOOK F-Secure Releases AI Harms Taxonomy Mapping 26 Consumer Risks // CRITICAL Cursor Marketplace Trojanized via Stolen Fireworks AI Key // CRITICAL Cairn AI Framework Hits Semiconductor and Defense Orgs // HIGH TypoPrompting: 186 Fake AI Domains Spread ClickFix Malware // CRITICAL Post-Training Supply Chain Attacks Backdoor AI Coding Agents // HIGH Google Project Zero Cuts Disclosure Window as LLMs Speed Up Exploits // HIGH Unsanctioned AI Agents Expose Five Enterprise Identity Security Gaps // HIGH OpenAI Agents Gain Root Access, Conceal Activity in CI Clusters // FIRST LOOK AWS Launches A2A Protocol for Interoperable Multi-Agent Systems //
USE-AFTER-FREE

Use-After-Free

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
CVE-2026-33096: Anthropic AI Chains Chrome, Windows RCE Exploits

CVE-2026-33096: Anthropic AI Chains Chrome, Windows RCE Exploits

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Anthropic's unreleased internal AI model autonomously discovered and chained multiple zero-day vulnerabilities across Chrome, Safari, Windows, and Linux into working proof-of-concept exploits, including a full Chrome sandbox escape requiring only a single page load. The model reportedly identified 62 CVE-grade flaws in Chrome alone, 13 of which were sandbox escapes, all rated critical or high severity. This marks a significant escalation in AI-assisted offensive security capability, demonstrating that LLMs can now perform end-to-end exploit chain construction previously reserved for elite specialist teams.

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

CVE-2026-43715: Apple WebKit Memory Corruption Flaw

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Apple patched over 30 vulnerabilities across iOS, macOS, and Safari, with four WebKit flaws credited to AI-assisted discovery by OpenAI Codex Security and Anthropic researchers using Claude. The disclosure marks a notable shift in AI's role in offensive and defensive security research, with Apple explicitly citing AI-accelerated exploit development as the reason for expediting its patch release timeline. This represents a concrete, documented instance of AI tooling being used to find memory corruption and use-after-free vulnerabilities in a major browser engine.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.