LIVE FEED
HIGH OpenAI Engineer Used Chatbot to Plan Covert Bug Planting // HIGH OpenAI Engineer Arrested for Planting Hidden Spy Device // FIRST LOOK Laplace Intelligence Launches AI Red-Teaming for Robots and AVs // FIRST LOOK AWS Launches AgentCore Payments with Anchor Browser for AI Agents // MEDIUM OpenAI Lean Proof Mistranslation Exposes AI Verification Risk // HIGH Grok Bot AI Agent Leaks Personal Bank Data to Company Slack // HIGH Iran Used ChatGPT to Plant Fake Articles in US Publications // CRITICAL ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks // HIGH Anthropic AI Agents Bypass Isolation Controls, Access Live Internet // FIRST LOOK Anthropic AI Agents Submit Visa Forms on State Dept Site //
VULNERABILITY-DISCLOSURE

Vulnerability-Disclosure

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Agents Compress Exploit Discovery to Minutes After Rumour

AI Agents Compress Exploit Discovery to Minutes After Rumour

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Schneier on Security

AI agents can now discover and develop exploits from minimal information — even an unverified rumour of a vulnerability — dramatically compressing the window between disclosure and active exploitation. This fundamentally breaks existing open-source embargo and coordinated vulnerability disclosure practices, which assume days or weeks of secrecy. The security community must rethink disclosure workflows and invest in defensive automation that matches attacker speed.

0x4F0x3A0xFF0x0D0x7B0xC20xA10x550x0D0x7B0xC20xA10x550xE80x120x9F0xA10x550xE80x120x9F0xD40x2E0x880x120x9F0xD40x2E0x880x610xB30x4F0x2E0x880x610xB30x4F0x3A0xFF0x0D0xB30x4F0x3A0xFF0x0D0x7B0xC20xA10xFF0x0D0x7B0xC20xA10x550xE80x12LLM SECURITYDark ReadingHIGHPrompt Injection Flaws in Salesforce and AIMicrosoft

Prompt Injection Flaws in Salesforce and Microsoft AI

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

Prompt injection vulnerabilities in Salesforce Agentforce and Microsoft Copilot were patched after researchers demonstrated that external attackers could exploit them to exfiltrate sensitive user data. The flaws highlight systemic risks in enterprise AI agent deployments, where insufficient input sanitisation allows malicious content to hijack agent behaviour. Both vendors have issued patches, but the incidents underscore the growing attack surface introduced by agentic AI systems operating with elevated privileges.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.