LIVE FEED
FIRST LOOK OpenAI Releases Astra Cybersecurity Evals and Safeguard Controls // FIRST LOOK OpenAI Pauses Astra Model Over Critical Cybersecurity Threshold // CRITICAL OpenAI Agents Exploit Artifactory RCE in Hugging Face Attack // FIRST LOOK Cloudflare Launches Kitesurf, a Cloud Browser Built for AI Agents // FIRST LOOK PortSwigger HTTP Terminator Ships AI-Driven Desync Research // CRITICAL CVE-2026-12537: Gemini CLI RCE and Claude Code Secret Leak // HIGH Atlassian Rovo Prompt Injection Leaks Jira Data to Attackers // CRITICAL Claude and ChatGPT Hijacked via Zero-Click Prompt Injection // HIGH ChatGPT Sandbox C2 Attack Demonstrated at Black Hat 2026 // HIGH Meta AI Hacks External Systems in Cybersecurity Test //
WINDOWS

Windows

4 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning AI Governance AI Security AI Security Tools Deep Signal Identity & Access Management Intelligence Report Security Operations
Perplexity Launches Personal Computer AI Agent for Windows PCs

Perplexity Launches Personal Computer AI Agent for Windows PCs

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 The Verge AI

Perplexity has expanded its Personal Computer agentic tool to Windows, enabling a locally-run AI agent that can access files, Office 365 apps, and the web on behalf of enterprise users. This significantly expands the attack surface for defenders: a compromised or manipulated agent running with local system access can exfiltrate files, execute unauthorised actions, and pivot across cloud-connected Microsoft 365 services. Security teams should treat this as a high-privilege process requiring the same scrutiny as endpoint detection tools, with particular attention to prompt injection via locally-processed documents.

Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery

Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 BleepingComputer

Microsoft has deployed MDASH (Multi-model Agentic Scanning Harness), an AI-powered agentic system that autonomously scans Windows binaries for vulnerabilities and validates findings through multiple AI models before human engineer review. The accelerated discovery pipeline means defenders will see a higher volume of Patch Tuesday fixes, compressing patch deployment windows and increasing pressure on enterprise patch management processes. Simultaneously, the same AI-accelerated vulnerability discovery capability is available to adversaries, raising the risk that threat actors identify and weaponise flaws faster than Microsoft's pipeline can remediate them.

Claude Mythos Generates Working Exploits for Firefox, Windows

Claude Mythos Generates Working Exploits for Firefox, Windows

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 SecurityWeek

Anthropic's Claude Mythos Preview model demonstrated the ability to generate functional proof-of-concept exploits targeting known Firefox and Windows vulnerabilities within minutes to hours, compressing the traditional patch gap window dramatically. Testing also revealed that public Anthropic models with safety guardrails disabled could produce working exploits, though at a lower success rate than Mythos. The findings underscore how frontier LLMs are shifting the threat landscape for unpatched N-day vulnerabilities by automating and accelerating exploit development previously bottlenecked by scarce reverse engineering expertise.

Typosquatted OpenAI Repo Delivers Rust Infostealer to 244K Users

Typosquatted OpenAI Repo Delivers Rust Infostealer to 244K Users

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 The Hacker News

A malicious Hugging Face repository impersonated OpenAI's legitimate Privacy Filter model, cloning its description verbatim to gain credibility and reach the platform's trending list with 244,000 downloads. The repository delivered a multi-stage attack chain culminating in a Rust-based information stealer targeting browser credentials, cryptocurrency wallets, and Discord data on Windows machines. The attack leveraged a dead-drop resolver pattern via a public JSON paste service, allowing operators to swap payloads without modifying the repository itself.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.