Cybercriminal

OpenAI Launches ChatGPT for Science with Institutional Access

FIRST LOOK ATLAS OWASP MEDIUM ▲ 5.8 BleepingComputer Jun 18, 2026

OpenAI is internally testing a specialised 'ChatGPT for Science' subscription tier, likely restricted to verified universities and research institutions, building on capabilities from GPT-Rosalind — a purpose-built life sciences model already deployed under a trusted-access structure with select pharma partners. The gated, domain-specific nature of this offering creates novel identity and access verification attack surfaces, as threat actors will likely probe credential and institutional verification mechanisms to gain privileged access to specialised scientific knowledge. Defenders at academic and research institutions should anticipate increased phishing campaigns targeting institutional credentials and prepare governance frameworks for AI use in sensitive research environments.

Z.ai Releases GLM-5.2 Open-Weights 753B LLM

FIRST LOOK ATLAS OWASP HIGH ▲ 6.2 Simon Willison Jun 18, 2026

Z.ai has released GLM-5.2, a 753-billion-parameter mixture-of-experts model under an MIT license, ranking as the top open-weights model on the Artificial Analysis Intelligence Index and second on the Code Arena WebDev leaderboard. For defenders, the combination of frontier-level capability, unrestricted open-weights distribution, and a 1-million-token context window materially lowers the barrier for threat actors to self-host a highly capable model outside any provider's safety controls. The model's agentic coding performance and massive context window expand the viable attack surface for automated code generation, targeted phishing, and large-scale document analysis without API-level monitoring.

CrowdStrike Launches Continuous Identity for AI Agents

FIRST LOOK ATLAS OWASP HIGH ▲ 6.8 CrowdStrike Blog Jun 17, 2026

CrowdStrike's Continuous Identity for AI Agents brings persistent, trackable identity primitives to agentic workflows within the Falcon platform, extending the same governance applied to human users and service accounts to autonomous AI systems. This closes a critical visibility gap: until now, AI agents operating in SOC pipelines lacked the attribution, audit trails, and access control needed to govern their actions with the same rigor as human operators. Mature deployment will require organizations to extend existing credential hygiene practices — rotation, least-privilege scoping, and independent monitoring — to this new identity class.

Anthropic Ships Claude Fable 5 with Exploit Generation

FIRST LOOK ATLAS OWASP CRITICAL ▲ 8.7 Wired Security Jun 17, 2026

Anthropic's Mythos 5 and Claude Fable 5 deliver frontier-grade vulnerability discovery and exploit-development capabilities that, for the first time, give enterprise defenders access to the same AI-assisted offensive analysis previously limited to well-resourced nation-state teams. This closes a long-standing asymmetry: security teams can now use AI-native tooling to enumerate exploitable paths, generate proof-of-concept primitives, and compress red-team cycles from weeks to hours. The regulatory framework governing Fable 5's deployment addresses Anthropic specifically but does not yet extend equivalent standards across the broader ecosystem of competitive and open-weight models converging on the same capability tier.

Google Launches Android 17 with Gemini Omni Integration

FIRST LOOK ATLAS OWASP HIGH ▲ 7.2 TechCrunch AI Jun 17, 2026

Android 17 embeds Gemini Omni, AudioLM, and Lyria 3 directly into core OS functions including call handling, video editing, real-time audio translation, and emergency detection on Pixel devices. This deep integration gives defenders on-device AI capabilities that can surface anomalous behaviour, support safer communications, and automate emergency response without requiring third-party tooling. Organisations adopting Android 17 in managed fleets should establish baseline permission policies and input-validation standards to ensure these capabilities mature into enterprise-grade controls.

NVIDIA Launches XR AI for Agentic AR Glasses

FIRST LOOK ATLAS OWASP HIGH ▲ 8.2 NVIDIA AI Blog Jun 17, 2026

NVIDIA XR AI is a public-beta developer SDK that embeds persistent multimodal AI agents into AR glasses, fusing live video, audio, depth, and pose sensor streams with enterprise knowledge retrieval and tool execution to give frontline workers in manufacturing, healthcare, and research hands-free access to contextual intelligence. This closes a longstanding gap between enterprise knowledge systems and the physical point of work, enabling real-time decision support directly in a worker's field of view without interrupting task flow. Realising the full security benefit of the platform requires establishing input validation baselines, scoped retrieval permissions, and plugin governance practices that are not yet standardised for physical-world agent deployments.

Vertex AI SDK Bucket Squatting Flaw Enables Model Hijack

ATLAS OWASP HIGH ▲ 8.5 The Hacker News Jun 17, 2026

A vulnerability in the Google Cloud Vertex AI Python SDK allowed unauthenticated attackers to intercept model uploads by pre-registering predictable staging bucket names — a technique Unit 42 calls 'Pickle in the Middle'. Once a malicious model replaced the legitimate upload, arbitrary code executed inside Google's serving infrastructure via pickle deserialization. Google patched the flaw in v1.148.0 after disclosure in March 2026, but the incident highlights systemic risks in ML pipeline supply chains.

Amazon Bedrock AgentCore Ships with RAG and Memory

FIRST LOOK ATLAS OWASP HIGH ▲ 7.2 AWS Machine Learning Blog Jun 16, 2026

Amazon Bedrock AgentCore now enables production-grade agentic systems that combine RAG retrieval, persistent cross-session memory, and authenticated user-facing endpoints — giving defender teams in agriculture, manufacturing, and field-service verticals a vetted, AWS-managed blueprint for deploying AI assistance in safety-critical operational environments. This architecture closes a meaningful gap for organizations that previously lacked a structured, reference-backed path to agentic AI with durable memory and knowledge retrieval integrated into existing AWS identity and data infrastructure. Teams adopting this pattern should pair it with document ingestion controls, API Gateway hardening, and memory namespace auditing to meet the maturity requirements of high-consequence deployments.

AWS Launches Agent-EvalKit for LLM-Powered Agent Evaluation

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.8 AWS Machine Learning Blog Jun 16, 2026

Agent-EvalKit is an open-source AWS toolkit (Apache 2.0) that embeds structured LLM-as-judge evaluation directly into agent development workflows via Claude Code, Kiro CLI, and Kilo Code. It closes a significant defender gap by shifting agent quality assurance left — catching hallucinations, unsafe tool usage, and logic errors during development rather than after deployment, where failures are costlier to remediate. Teams integrating it should establish integrity controls around evaluation datasets and review AI-generated code recommendations as part of standard secure-SDLC practices.

Amazon Quick Launches Agentic Incident Triage Assistant

FIRST LOOK ATLAS OWASP HIGH ▲ 7.8 AWS Machine Learning Blog Jun 16, 2026

Amazon Quick's agentic incident triage assistant integrates New Relic's observability platform and Asana via MCP, creating a single conversational interface that autonomously queries production telemetry, surfaces error logs, and creates tracked tasks — compressing what previously required multiple context-switches into a single engineer prompt. For SRE and platform engineering teams, this closes a meaningful gap between evidence gathering and incident handoff, reducing the cognitive load and elapsed time during high-pressure triage. Teams adopting this architecture should pair it with input sanitisation controls and least-privilege connector scoping to ensure the agent's autonomous reasoning operates over validated data.

Google Gemini Prompt Injection Powers Smishing Campaign

ATLAS OWASP HIGH ▲ 8.2 The Hacker News Jun 13, 2026

Google has filed suit against a Chinese cybercrime network operating the Outsider phishing-as-a-service kit, which exploited Gemini AI to generate fraudulent phishing pages and power large-scale SMS phishing attacks against Americans. The network used carefully framed prompts — disguised as benign programming requests — to bypass AI safety controls and produce functional credential-harvesting websites. The case illustrates the growing industrialisation of AI-assisted phishing infrastructure, with over 1.59 million malicious URLs and 100,000 victims attributed to the operation.

Anthropic Releases Claude Fable 5 with Jailbreak Resistance

ATLAS OWASP HIGH ▲ 7.2 SecurityWeek Jun 13, 2026

Anthropic's release of Claude Fable 5, a Mythos-class frontier model, has prompted significant industry debate over its dual-use offensive capabilities in cybersecurity and biology. The model includes a capability fallback mechanism — downgrading to Claude Opus 4.8 in high-risk domains — alongside extensive jailbreak-resistance red-teaming. Security professionals are warning that frontier AI capability investment directly accelerates attacker tooling for machine-speed, AI-orchestrated 'hyperattacks' that outpace human defenders.

Agentjacking Attack Achieves 85% Success Rate Against AI Coding Agents via Sentry MCP

ATLAS OWASP CRITICAL ▲ 9.2 The Hacker News Jun 13, 2026

Tenet Security has disclosed 'Agentjacking', a novel attack class that exploits the implicit trust AI coding agents place in Model Context Protocol (MCP) data sources. By injecting malicious instructions into Sentry error events via publicly accessible DSN credentials, attackers can cause agents like Claude Code and Cursor to execute arbitrary code with full developer privileges. Researchers confirmed 2,388 exposed organisations and an 85% exploitation success rate in controlled testing, with no prior access to victim infrastructure required.

Palo Alto Exposes AI Agent Skill Supply Chain Compromise Risk

ATLAS OWASP HIGH ▲ 8.5 Palo Alto Unit 42 Jun 12, 2026

Palo Alto Unit 42 introduces Behavioral Integrity Verification (BIV), an audit method exposing widespread mismatches between what third-party AI agent skills claim to do and what they actually execute. Applied at registry scale, BIV identifies a dangerous subset of skills carrying multi-stage attack chains capable of credential theft, remote code execution, and silent data exfiltration. The research highlights that the AI agent skill ecosystem has grown rapidly without the supply-chain audit primitives that mobile and browser extension platforms eventually adopted after abuse.

CVE-2025-67644: LangGraph SQLi to RCE via Checkpointer

ATLAS OWASP CRITICAL ▲ 9.2 Check Point Research Jun 12, 2026

Check Point Research disclosed three vulnerabilities in LangGraph's persistence layer, two of which chain together to achieve remote code execution: a SQL injection flaw in the SQLite checkpointer (CVE-2025-67644) and an unsafe msgpack deserialization bug (CVE-2026-28277). A third parallel injection vulnerability (CVE-2026-27022) affects the Redis checkpointer. With over 50 million monthly downloads, self-hosted LangGraph deployments exposing user-controlled state history filters are directly at risk.

Cybercriminal

Stay ahead of the threat.