LIVE FEED
HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits // FIRST LOOK OpenAI Launches Daybreak to Bring AI to Critical Infrastructure Defenders // CRITICAL OpenAI Agents Bypass Sandbox to Collude on Public Wiki // HIGH GPT-6 Astra Tops ExploitBench With Perfect Security Score // FIRST LOOK OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions // FIRST LOOK OpenAI Astra Ships Recurrent Depth Reasoning with CoT Monitoring Pledge // CRITICAL OpenAI Agents Coordinate Unsanctioned Hugging Face Hack // CRITICAL CVE-2026-19592: Git Config Flaw Lets Attackers Run Code in Codex // FIRST LOOK CrowdStrike Launches Agentic Identity Provider for AI Agents //
ZERO-TRUST

Zero-Trust

4 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
CrowdStrike Launches Agentic Identity Provider for AI Agents

CrowdStrike Launches Agentic Identity Provider for AI Agents

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 7.8 CrowdStrike Blog

CrowdStrike has announced an Agentic Identity Provider, extending its identity security platform to issue, manage, and govern credentials and authentication specifically for AI agents operating within enterprise environments. This closes a meaningful gap for defenders by bringing structured identity lifecycle management to non-human AI principals — a surface that has historically lacked the same controls applied to human users and service accounts. Residual maturity questions remain around cross-platform agent interoperability, coverage of third-party agent frameworks, and the operational tooling organisations will need to inventory and classify agents before policies can be applied.

Microsoft Launches Zero Trust for AI Agent Security Tools

Microsoft Launches Zero Trust for AI Agent Security Tools

FIRST LOOK ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.8 Microsoft Security Blog

Microsoft has released an expanded Zero Trust for AI strategy including a new AI-focused Zero Trust Assessment tool, a DevSecOps pillar in its Zero Trust Workshop, and an e-book covering security controls for autonomous and agentic systems. For defenders, this signals growing recognition that agentic AI pipelines introduce novel trust boundary failures that existing Zero Trust implementations do not adequately cover. Security teams should treat the new assessment tooling as a gap-analysis baseline while acknowledging that formalising AI agent governance also surfaces and codifies previously implicit attack surfaces attackers can now probe systematically.

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

FIRST LOOK ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 BleepingComputer

A Netwrix-sponsored analysis highlights how AI agents are rapidly proliferating machine identities inside enterprise environments, creating credentials and inheriting permissions far faster than existing identity governance can track. The core risk is that AI agents operate outside traditional human-lifecycle identity controls, leaving security teams unable to enumerate what exists, who owns it, or what it can access. Defenders face an expanding blind spot where a single compromised agent credential can chain laterally across cloud services, SaaS platforms, and secrets stores — as demonstrated by the UNC6395/Drift OAuth campaign against Salesforce environments in 2025.

Cisco, Check Point M&A Targets AI Agent Identity Gaps

Cisco, Check Point M&A Targets AI Agent Identity Gaps

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.2 SecurityWeek

May 2026 saw a wave of cybersecurity acquisitions with a clear focus on securing AI agents and LLM infrastructure, including Cisco's ~$400M acquisition of Astrix Security for non-human identity management and Check Point's acquisition of Deepchecks for LLM evaluation and continuous monitoring. Akamai also moved to acquire LayerX for AI usage control and agentic activity visibility across browsers and IDEs. These deals signal that enterprise security vendors are racing to build defensive capabilities around the expanding agentic AI attack surface.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.