LIVE FEED
FIRST LOOK Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery // FIRST LOOK FableCut Ships AI-Drivable Browser Video Editor via MCP and REST // FIRST LOOK AI Agents Emerge as a New Identity Class Orgs Must Secure // HIGH CVE-2026-12958: GhostApproval Symlink Attack on Coding Agents // HIGH Prompt Injection Attacks Claude Code and Codex Execution // HIGH DPAPI Abuse in Claude Code and Cursor Triggers EDR // FIRST LOOK Y Combinator Ships Agentic Code Generation at 37K Lines Daily // HIGH Google Gemini Abused for Phishing-as-a-Service // CRITICAL Writer AI Session Token Leak Enables Account Takeover // MEDIUM Anthropic Mythos LLM Scans Federal Software for Vulnerabilities //
VULNERABILITY-DISCOVERY

Vulnerability-Discovery

18 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Data Poisoning Model Theft AI Security Tools Security Operations
Autonomous Exploit Generation: Claude Mythos Risk

Autonomous Exploit Generation: Claude Mythos Risk

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 Schneier on Security

Bruce Schneier analyses Anthropic's Claude Mythos Preview and Project Glasswing, a controlled deployment programme aimed at finding and patching software vulnerabilities before the model is publicly released due to its advanced cyberattack capabilities. The piece highlights a growing offensive AI capability gap, noting that newer LLMs can autonomously chain memory corruption bugs and operationalise exploits without human orchestration, while observing that defenders currently retain a marginal advantage because vulnerability discovery is easier than exploitation. Schneier warns that this advantage is narrowing rapidly and that the industry must prepare for a world of commoditised zero-day exploits.

US summons bank bosses over cyber risks from Anthropic's latest AI model

US summons bank bosses over cyber risks from Anthropic's latest AI model

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 HN AI Security

The US Treasury convened major bank executives to discuss cybersecurity risks posed by Anthropic's unreleased Claude Mythos model, which the company claims has surpassed nearly all human experts at finding and exploiting software vulnerabilities. A code leak prompted Anthropic to publicly acknowledge the model's unprecedented offensive cyber capability, raising systemic financial sector risk concerns. The meeting signals growing regulatory awareness of AI-enabled cyber threats to critical financial infrastructure.

Anthropic Mythos AI Autonomously Discovers Zero-Day Exploits

Anthropic Mythos AI Autonomously Discovers Zero-Day Exploits

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

Anthropic has released a preview of 'Mythos,' an AI model reportedly capable of autonomously discovering and exploiting critical zero-day vulnerabilities, raising significant dual-use concerns. While Anthropic claims the model ships with access controls, the security community is scrutinising whether those safeguards are sufficient to prevent misuse by malicious actors. The development represents a pivotal moment in the arms race between offensive AI capabilities and defensive governance frameworks.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.