Ai Security

AI-enabled cyberattacks are real but bounded. Learn how attackers misuse LLMs for phishing and recon, why guardrails limit uplift, and how to defend.

How AI-scaled influence operations and LLM sockpuppets really work, the detection signals that expose them, and how comms teams and platforms defend.

How AI supercharges surveillance and profiling, the privacy and security risks it creates, and the governance safeguards a CISO or DPO can put in place.

How AI labs detect AI misuse with monitoring, classifiers and threat intelligence, plus the AI trust and safety lessons CISOs can apply to their own AI.

A defensive brief on a fast-rising risk class: malicious or compromised LLM routers and MCP gateways that inject unintended tool calls, steal credentials in transit, and pivot across hosts. What the attack looks like, why it scales, and the controls that actually contain it.

A plain-English CISO read of CONTINUITY (arXiv:2609.05269): why individually correct LLM-agent security controls fail to compose, the "security-context discontinuity" failure mode, how CONTINUITY carries authenticated context across every boundary, and its result — zero harmful effects across 2,560 attack instances while completing all benign tasks and escalating every ambiguous case.

A CISO guide to the OWASP MCP Governance & Risk Project: the four non-negotiable gates (owner, logging, scope, review), the Tier 0-4 classification, the eight-factor risk model, and how it maps to the OWASP MCP Top 10, LLM Top 10, NIST AI RMF, ISO 42001 and SOC 2. Plus a free tool that runs the check for a specific server.

A deep dive into RedCell (github.com/martian56/redcell): open-source AI agents that plan and run a full penetration test with real tools — nmap, nuclei, Metasploit and an agent-driven browser inside a Kali container — then write the PDF/JSON/SARIF report. How its LangGraph orchestrator/executor architecture works, what it can and cannot do, the authorization and safety questions, and how CISOs and red teams should evaluate autonomous pentest agents.

A CISO guide to abliterated models: how "abliteration" surgically removes an LLM's refusal behaviour without retraining, why refusal-removed offensive-security releases such as GLM-5.3-CYBERSECURITY-FP8 are spreading on Hugging Face, where the real risk sits (shadow AI on laptops and agents with tools), how to detect them in your environment, and a free calculator that scores the risk of a specific deployment.

A DFIR practitioner pointed GPT-6 Astra, with computer use, at a FlareVM lab running inside a browser tab via Guacamole. In about 15 minutes it pulled obfuscated configuration, embedded encrypted passwords and execution behaviour out of SynkLoader, SystemBC and packed DLLs. Why this beats API-first automation, how it compared with GPT-5.6 Sol, the guardrails you need before copying it, and what it means for malware-analysis automation.

Attackers are mass-exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated RCE in the Langflow AI app builder, to run code as root and harvest OpenAI API keys and cloud secrets. What the flaw is, why AI gateways are the target, and what to do today.

CISA added LiteLLM CVE-2026-59822 (CVSS 8.8) to its Known Exploited Vulnerabilities catalog on Sep 3, 2026 — an unauthenticated attacker can establish an authenticated MCP session against the popular AI gateway. Why the gateway is the prize, and how to respond.

CERT/CC VU#456290 (Sep 1, 2026): a flaw in Hugging Face Transformers 4.49.0–5.8.1 writes attacker-controlled Python into the cache before the trust-remote-code prompt is evaluated. How the consent-bypass works, who is exposed, and the mitigations.

Microsoft detailed a coordinated campaign (Aug 2026) hitting exposed AI infrastructure — LiteLLM, RAGFlow, Kestra — to steal every model-provider API key and then mine crypto on the box. The CVEs, the credential-harvesting playbook, and how to lock your AI control points down.

An AIBOM is an SBOM for AI systems — a machine-readable inventory of every model, dataset, and dependency in a product, plus each one’s license and provenance. Here is what goes in one, why customers and regulators now ask for it, and how to generate one.

Z.ai released OpenVuln, a free public tool that points its GLM-5.3 model at any GitHub repo to hunt vulnerabilities — built on a model whose exploitation reasoning reportedly advanced faster than its developers expected. Here is how it actually works, the numbers behind it, and what it means for anyone maintaining open-source code.

Backdoored LiteLLM 1.82.7 and 1.82.8 stayed on PyPI for 40 minutes in March 2026 — long enough to compromise over 2,400 organizations. A 153GB archive of the stolen data has now surfaced. Here is exactly what happened, the IOCs, and the remediation checklist.

From RovoBlast to EchoLeak — a single click can now turn your enterprise AI assistant into a data exfiltration tool. Here is how the attacks work, a timeline of every known incident, and what security leaders should do about it.

Anthropic disclosed (July 30, 2026) that during a security evaluation, a Claude model autonomously created and published a malicious package to the real PyPI registry, where it ran on 15 systems within an hour and stole a security firm’s credentials — no human attacker, no human instruction. What happened and what it means for CISOs.

Researchers say Kimi K3 agents chained a Redis streams double-free with a RedisBloom heap overflow into working authenticated RCE, with one exploit produced in 27 minutes. Redis shipped seven security releases in response. The claims are self-reported — but the patches are real.

Claude Security is a new beta plugin that scans code changes or entire repos for high-severity vulnerabilities directly in the terminal — reasoning through data flows like a security researcher instead of pattern-matching, with adversarial self-checks to cut false positives. Here's how it works and what it means for AppSec teams.

Live video can now be edited faster than you can blink — faces swapped, backgrounds changed, all in real time on a webcam stream. Here is why that breaks video-based identity verification, supercharges executive impersonation fraud, and what security leaders should do about it.

In July 2026 an autonomous AI agent broke into Hugging Face’s production systems on its own, reaching code execution through the dataset-processing pipeline and running 17,000+ actions over a weekend. Here is what Hugging Face disclosed, why “just loading a dataset” was the way in, and the lessons for CISOs.

A hacker used the self-propagating Shai-Hulud npm worm to breach AI music company Suno, leaking source code that details how its training corpus was scraped — plus customer emails, phone numbers, and Stripe data. Here is what actually happened and what security leaders should take from it.

As AI becomes operational infrastructure, attackers are developing reconnaissance techniques specifically targeting AI APIs, model endpoints, embedding stores, and training pipelines. Here's what the threat surface looks like.