🤖 CISO's guide to agentic AI

Anthropic's Deputy CISO shares a four-question framework for assessing agentic AI risk, and walks through controls that keep agent deployments bounded and auditable.

https://claude.com/blog/ciso-guide-to-agentic-ai

#AI

🤖 New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs

A study of ~200,000 LLM responses found 5 frontier models (Claude, GPT, Gemini, DeepSeek) hallucinate nonexistent package names at 4.62-6.10%, with 53 shared fictitious names on PyPI/npm still registrable and exploitable via slopsquatting attacks.

https://socket.dev/blog/slopsquatting-targets-across-frontier-llms

#AI

🤖 Inside the OpenClaw Ecosystem: What Happens When AI Agents Get Credentials to Everything

Permiso researchers deployed an AI agent (Rufio) into the OpenClaw ecosystem and found active malware campaigns in its unvetted skill marketplace (ClawHub), credential-harvesting skills with 377+ downloads, C2 infrastructure, and prompt injection attacks targeting agents holding plaintext credentials to email, Slack, and file systems.

https://permiso.io/blog/inside-the-openclaw-ecosystem-ai-agents-with-privileged-credentials

#AI

🤖 Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

A companion technical writeup to HunggingFace's incident disclosure from last week. This post walks through how the intrusion actually worked: the two initial-access vectors, how the agent pivoted and moved laterally, representative examples of the commands that were run and how they investigated with GLM 5.2.

https://huggingface.co/blog/agent-intrusion-technical-timeline

#AI

🤖 A Security Analysis of Amazon S3 Vectors and Its Use in LLM Retrieval Pipelines

An analysis of the security model of Amazon S3 Vectors and of the considerations that arise when it is used as the retrieval layer for LLM applications: access control scope, input validation, metadata integrity, and audit coverage.

https://www.offensai.com/blog/amazon-s3-vectors-security-llm-rag-poisoning

#AI

🤖 Before the first prompt: Code execution paths in trusted coding-agent projects

Trusted coding-agent projects can execute repository-controlled code before the first user prompt via MCP server configs or PATH hijacking in .claude/settings.json. Developers should treat project trust like running an arbitrary setup script.

https://securitylabs.datadoghq.com/articles/coding-agent-project-trust-code-execution-before-first-prompt

#AI

👩‍💻 CosmosEscape: Taking Over Every Azure Cosmos DB

Wiz Research found CosmosEscape, a critical vulnerability in Azure Cosmos DB's Gremlin API enabling sandbox escape via .NET reflection. Attackers could obtain a platform-wide Cosmos Master Key granting full read/write access to any customer database and enumeration of all accounts.

https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db

#azure

🔴 Cloud CISO Perspectives: Why AI Threat Defense is the new boardroom baseline

Google Cloud CISO Chris Betz argues that AI-native threat defense is now a board-level requirement. Boards should govern five areas: business enablement, remediation cycle speed, platform consolidation, contextual vulnerability prioritization, and AI safety policy to enable secure, AI-driven business agility.

https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-why-ai-threat-defense-is-the-new-boardroom-baseline

#gcp

🤖 Orchestrating AI Code Review at scale

Cloudflare built a CI-native AI code review system using OpenCode, orchestrating up to 7 specialised agents (security, performance, code quality, etc.) per merge request.

https://blog.cloudflare.com/ai-code-review

#AI