AI Sec News
The week in AI security, read for you. Stories, tools and research, each with a note on why it matters.
Get it every Monday
Issue #30 · 221 sources · Free
Recent issues
Latest · 12 Oct 2026● new issue
Poisoned AI SDKs, Cross-Agent Access, and Untriaged Bug Reports
Issue #30 · 221 sources scanned
Read the issue
- StoryTensorlake SDK Compromise Delivered Shai-Hulud With a Destructive Token Monitor
- StoryAgentCorruption Turned One Agent’s Credentials Into Cross-Agent AWS Access
- StoryResearchers Link ARTEX and Claude Code to South Korean Bank Attacks
- ToolOSS Scanner Sends Model-Generated Findings Without Human Triage
- ToolAgentCore Carries User Identity Into Lake Formation Queries
- 5 Oct 2026SQL Copilot’s read-only bypass, Astra’s safety failures, and AI-found exploits#29
- 28 Sep 2026An AI agent crosses the line, a package worm, and reasoning-model safety#28
- 21 Sep 2026AI hurricane is here, Codex escapes and the Plugin4Shell supply-chain gap#27
- 14 Sep 2026Claude-driven malware evasion and the LiteLLM supply-chain#26
- 7 Sep 2026OpenAI agents hijacked 25‑year‑old DSEwiki to coordinate#25
- 31 Aug 2026OpenAI agents exploit CVE‑2026‑53362 for container escape#24
- 24 Aug 2026Rust's arrayref backdoored: fake proc-macro1 slipped into build.rs#23
- 17 Aug 2026Weaker models decode OpenAI’s reasoning.encrypted_content#22
- 11 Aug 2026ChainDrop worm poisons npm's keyv, rotates C2 keys on Ethereum#21
- 3 Aug 2026Copilot for Word worm quietly rewrites reports and self‑propagates#20
- 28 Jul 2026OpenAI’s guardrail‑off eval agent breached Hugging Face during a test#19
- 22 Jun 2026Microsoft Defender’s AutoJack: one webpage RCEs the AI agent host#14
- 15 Jun 2026US export order yanks Anthropic’s Fable 5 over jailbreak fears#13
- 9 Jun 2026Miasma worm poisons 73 Microsoft GitHub repos, including azure-functions-host#12
- 2 Jun 2026ChatGPT's Markdown trust bug turns summaries into live phish#11
- 26 May 2026Transformers CVE‑2026‑4372: model load RCE via _attn_implementation_internal#10
- 18 May 2026GitHub Actions cache poisoning let 84 hacked TanStack npm releases ship#9
- 11 May 2026M365 Copilot CVE-2026-24299: Preview to Exfiltration and Persistence#8
- 4 May 2026AI Coding Tools are Becoming a New Persistence Layer#7
- 27 Apr 2026Shai-Hulud worm rode @bitwarden/cli 2026.4.0, abusing GitHub Actions secrets#6
- 20 Apr 2026AI Tools Are Reading… and Writing Back#5
- 14 Apr 2026Anthropic's Mythos Model Claims 72% Zero-Day Exploit Rate. Now what?#4
- 7 Apr 2026Claude Code's Permission System Flipped by Prompt Injection#3
- 2 Apr 2026Cisco Breached After Trivy Supply Chain Attack Hits AI Product Source#2
- 25 Mar 2026TeamPCP Backdoors LiteLLM on PyPI, Harvests Cloud Creds at Scale#1
Want more than a weekly read?
Meet the people behind the stories at a local chapter, or join the conversation on Discord.