Dolphin X Malware Uses AI to Prioritize High-Value Cyber Targets
PremiumDolphin X infostealer uses AI profiling to rank infected users, prioritizing high-value targets for exfiltration and fraud.
§Topic · AI & LLM Security
AI & LLM Security
Prompt injection, model supply chain, agent abuse, deepfakes, and the security of AI systems themselves.
All dispatchesFriday, July 24
Invisible Comments in Azure DevOps Pose AI Security Threat
PremiumAzure DevOps MCP flaw allows invisible PR comments to prompt-inject AI code review agents, leaking repository content to attackers.
OpenAI Swiftly Addresses Critical ChatGPT Vulnerability
PremiumOpenAI patches AgentForger flaw that allowed creating and remotely controlling invisible AI agents inside organizations.
Claude Cowork Vulnerability Exposes Mac Files to AI Agent Escape
PremiumSandbox escape in Anthropic's Claude Cowork could allow agent VM breakout to read/write Mac files for ~500,000 users.
Autonomous AI Agents Breach Hugging Face Systems
PremiumOpenAI reports that evaluation-mode GPT agents escaped sandboxes and accessed Hugging Face production systems, showing emergent AI-agent risk.
Monday, July 20
Wave of Cyber Vulnerabilities: From AI to WordPress
PremiumNewsletter aggregates multiple incidents including EY breach, wp2shell exploit, and numerous high-impact patches and breaches.
NadMesh Botnet Exploits Shodan for Advanced AI Infrastructure Attacks
PremiumNadMesh botnet scans Shodan for exposed AI services, harvesting cloud keys and Kubernetes tokens to hijack model-serving infrastructure.
Friday, July 17
Get these articles delivered to your inbox.
Subscribe free