LIVE FEED
FIRST LOOK GitHub Releases LLM Pre-Production Evaluation Guide for Developers // HIGH CVE-2026-75149: Marimo Notebook MCP Code Injection Flaw // FIRST LOOK AWS Adds Agentic Observability via OpenSearch Service MCP Apps // HIGH NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model // HIGH AnonyMousKIT PhaaS Deploys Voice AI Agents to Steal iPhone Passcodes // HIGH Rogue AI Agents Escape Sandboxes to Launch Real Attacks // FIRST LOOK Flock Safety Launches OS Investigate AI for Law Enforcement // CRITICAL CVE-2025-62593: Ray AI Framework RCE via DNS Rebinding // FIRST LOOK AWS Launches AgentCore Gateway for AI Agent Tool Access Control // CRITICAL Grok Data Exfiltration via Cryptographic Context Injection //
INSIDER

Insider

109 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
AI Browser Extensions 60% Riskier Than Standard Tools

AI Browser Extensions 60% Riskier Than Standard Tools

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.5 The Hacker News

A LayerX report reveals that AI browser extensions represent a largely unmonitored attack surface in enterprise environments, with 1-in-6 enterprise users already running at least one AI extension. These extensions are statistically riskier than standard extensions — 60% more likely to carry a CVE, 3x more likely to access cookies, and capable of exfiltrating sensitive data without triggering DLP or SaaS monitoring controls. The finding highlights a critical governance gap in AI consumption channels that bypasses traditional enterprise security tooling.

botctl Process Manager Enables Prompt Injection Attacks

botctl Process Manager Enables Prompt Injection Attacks

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 HN AI Security

botctl is an open-source process manager that enables persistent, autonomous AI agents (currently Claude-backed) to run continuously as background daemons with tool access, file system write permissions, and internet connectivity. While marketed as a productivity tool, the architecture introduces substantial attack surface through unattended agentic execution, a skills marketplace with third-party prompt injection, and a locally-exposed web dashboard. The combination of persistent autonomy, extensible skill modules from arbitrary GitHub repositories, and session memory creates compounding risk vectors relevant to agentic AI security.

Shadow AI Governance Threats Across SaaS and Cloud Endpoints

Shadow AI Governance Threats Across SaaS and Cloud Endpoints

ATLAS OWASP MEDIUM Moderate risk · Monitor closely ▲ 6.5 CrowdStrike Blog

CrowdStrike has announced new platform innovations targeting the governance of Shadow AI and the security of AI agents across endpoints, SaaS, and cloud environments. The release highlights growing enterprise concerns around unmanaged AI tool proliferation and the attack surface introduced by autonomous AI agents. These developments reflect an industry-wide shift toward operationalising AI-specific security controls within existing SOC workflows.

Claude Source Code Leak Reveals AI Supply Chain Risk

Claude Source Code Leak Reveals AI Supply Chain Risk

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.2 Dark Reading

A reported source code leak affecting Claude, Anthropic's large language model, underscores systemic weaknesses in AI software supply chains and the absence of robust oversight mechanisms at critical development and distribution layers. The incident highlights how proprietary model code, training pipelines, and system prompts can become high-value targets for adversarial actors seeking to enable model theft, backdoor insertion, or competitive intelligence gathering. This event serves as a broader warning about treating AI development infrastructure with the same rigor applied to other critical systems.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.