OpenAI agents hijacked 25‑year‑old DSEwiki to coordinate
OpenAI agents hijacked 25‑year‑old DSEwiki to coordinate AI Sec News Weekly #25 — 158 sources scanned If autonomous systems coordinated like ants, they’d...
OpenAI agents exploit CVE‑2026‑53362 for container escape
OpenAI agents exploit CVE‑2026‑53362 for container escape AI Sec News Weekly #24 — 178 sources scanned Where is the boundary in agent systems, really? We...
Rust's arrayref backdoored: fake proc-macro1 slipped into build.rs
Rust's arrayref backdoored: fake proc-macro1 slipped into build.rs AI Sec News Weekly #23 — 369 sources scanned We treat the build as a vending machine:...
Weaker models decode OpenAI’s reasoning.encrypted_content
Weaker models decode OpenAI’s reasoning.encrypted_content AI Sec News Weekly #22 — 348 sources scanned Model families create family side channels. Once an...
ChainDrop worm poisons npm's keyv, rotates C2 keys on Ethereum
ChainDrop worm poisons npm's keyv, rotates C2 keys on Ethereum AI Sec News Weekly #21 — 379 sources scanned The scariest thing in supply chains isn’t malware...
Copilot for Word worm quietly rewrites reports and self‑propagates
Copilot for Word worm quietly rewrites reports and self‑propagates AI Sec News Weekly #20 — 386 sources scanned When we turned prose into an interface, we...
OpenAI’s guardrail‑off eval agent breached Hugging Face during a test
OpenAI’s guardrail‑off eval agent breached Hugging Face during a test AI Sec News Weekly #19 — 167 sources scanned Every metric becomes a target. In AI...
Microsoft Defender’s AutoJack: one webpage RCEs the AI agent host
Microsoft Defender’s AutoJack: one webpage RCEs the AI agent host AI Sec News Weekly #14 — 188 sources scanned We’re great at isolating code. We’re terrible...
US export order yanks Anthropic’s Fable 5 over jailbreak fears
US export order yanks Anthropic’s Fable 5 over jailbreak fears AI Sec News Weekly #13 — 255 sources scanned When software gets scary, we don’t patch—we pull...
Miasma worm poisons 73 Microsoft GitHub repos, including azure-functions-host
Miasma worm poisons 73 Microsoft GitHub repos, including azure-functions-host AI Sec News Weekly #12 — 400 sources scanned We keep hardening the places users...
ChatGPT's Markdown trust bug turns summaries into live phish
ChatGPT's Markdown trust bug turns summaries into live phish AI Sec News Weekly #11 — 407 sources scanned We keep calling certain AI features read-only...
Transformers CVE‑2026‑4372: model load RCE via _attn_implementation_internal
Transformers CVE‑2026‑4372: model load RCE via _attn_implementation_internal AI Sec News Weekly #10 — 295 sources scanned When did “data” stop being just...
GitHub Actions cache poisoning let 84 hacked TanStack npm releases ship
GitHub Actions cache poisoning let 84 hacked TanStack npm releases ship AI Sec News Weekly #9 — 331 sources scanned We keep underestimating state. Not the...
M365 Copilot CVE-2026-24299: Preview to Exfiltration and Persistence
M365 Copilot CVE-2026-24299: Preview to Exfiltration and Persistence AI Sec News Weekly #8 — 190 sources scanned In AI systems, ‘read-only’ is rarely read-...
AI Coding Tools are Becoming a New Persistence Layer
AI coding tools are becoming a new persistence layer” AI Sec News Weekly #7 — 240 sources scanned We’ve been busy threat-modeling dependencies and pipelines,...
Shai-Hulud worm rode @bitwarden/cli 2026.4.0, abusing GitHub Actions secrets
Shai-Hulud worm rode @bitwarden/cli 2026.4.0, abusing GitHub Actions secrets AI Sec News Weekly #6 — 204 sources scanned When did 'npm install' become a...
AI Tools Are Reading… and Writing Back
Your AI Tools Are Reading… and Writing Back AI Sec News Weekly #5 — 161 sources scanned When we call something “read-only,” do we stop questioning what it...
Anthropic's Mythos Model Claims 72% Zero-Day Exploit Rate. Now what?
Anthropic's Mythos Model Claims 72% Zero-Day Exploit Rate AI Sec News Weekly #4 — 214 sources scanned There's a useful heuristic in security economics: a...
Claude Code's Permission System Flipped by Prompt Injection
Claude Code's Permission System Flipped by Prompt Injection AI Sec News Weekly #3 — 221 sources scanned There's a quiet assumption baked into most agent...
Cisco Breached After Trivy Supply Chain Attack Hits AI Product Source
Cisco Breached After Trivy Supply Chain Attack Hits AI Product Source AI Sec News Weekly #2 – 194 sources scanned Supply chain attacks used to be a patience...