LIVE FEED
HIGH LLM Reasoning Trace Theft via Encrypted Block Replay Attack // FIRST LOOK OpenAI and AWS Launch Daybreak Red and Blue on Amazon Bedrock // CRITICAL CVE-2026-55040: SharePoint RCE Chain Found via AI Agent // FIRST LOOK OpenAI Releases GPT-5.6 Cyber for Approved Security Partners // HIGH GhostJacking Attack Hijacks AI Agents via Security Alerts // FIRST LOOK Cactus Releases Needle 2 Agentic LLM for IoT and Edge Devices // HIGH Google APK Flaw Enables Agent-to-Agent Supply Chain Attack // CRITICAL CVE-2026-41679: Paperclip AI RCE via Malicious Agent Import // FIRST LOOK Anthropic Enables Claude Code Auto Mode by Default for Pro Users // CRITICAL CVE-2026-58073: Veeam and Terraform MCP Critical Flaws Patched //
ZERO-CLICK

Zero-Click

4 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
Claude and ChatGPT Hijacked via Zero-Click Prompt Injection

Claude and ChatGPT Hijacked via Zero-Click Prompt Injection

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.0 SecurityWeek

Zenity researchers disclosed a zero-click attack chain capable of hijacking Claude and ChatGPT's agentic browser capabilities through malicious content embedded in emails and X posts. The vulnerabilities, reported to Anthropic and OpenAI in late 2025 and early 2026, remain unpatched as of publication. This represents a significant escalation in prompt injection risk, as no user interaction is required to trigger malicious AI agent behaviour.

Cursor IDE DuneSlide Zero-Click Prompt Injection RCE

Cursor IDE DuneSlide Zero-Click Prompt Injection RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 SecurityWeek

A set of vulnerabilities dubbed 'DuneSlide' in the Cursor AI code editor allow attackers to conduct zero-click prompt injection attacks that escape the application's sandbox and execute arbitrary code at the operating system level. The flaws represent a critical escalation of AI-native attack surface risks, targeting developers who rely on AI-assisted coding environments. Because exploitation requires no user interaction, the attack chain is particularly dangerous in supply chain and watering-hole scenarios.

CVE-2026-50548: Cursor IDE Prompt Injection RCE

CVE-2026-50548: Cursor IDE Prompt Injection RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

Two critical vulnerabilities (CVE-2026-50548 and CVE-2026-50549) in the Cursor AI code editor allow prompt injection attacks delivered via MCP services or web search results to escape the editor's terminal sandbox and execute arbitrary commands on a developer's machine without any user interaction. Both flaws abuse the sandbox's write-permission logic — one through a misconfigured working directory parameter, the other through a symlink-resolution fallback — ultimately allowing overwrite of the sandbox helper binary itself. The attack surface is significant given Cursor's reported adoption across more than half of Fortune 500 companies; all versions prior to 3.0 remain vulnerable.

CVE-2026: Anthropic MCP SDK Remote Code Execution

CVE-2026: Anthropic MCP SDK Remote Code Execution

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.4 The Hacker News

A systemic 'by design' vulnerability in Anthropic's Model Context Protocol (MCP) SDK enables arbitrary remote code execution across all supported language implementations via unsafe STDIO transport defaults, affecting over 7,000 publicly accessible servers and 150 million downloads. The flaw has been independently confirmed across 10+ popular AI frameworks including LiteLLM, LangChain, and Flowise, with Anthropic declining to modify the protocol's architecture. This represents a significant AI supply chain risk with cascading exposure to sensitive data, API keys, and internal systems.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.