Vulnerabilities
Researchers Disclose Google Dialogflow CX "Rogue Agent" Flaw That Could Have Enabled AI Chatbot Data Theft
An AI-agent identity disclosure with cloud-defender implications — Dialogflow CX posture review this week.
Ransomware
Sysdig Documents "JadePuffer," Reportedly the First Fully Agentic-AI-Driven Ransomware Case
The first documented agentic-AI ransomware analysis lands — cloud-defender teams review posture and the human-in-the-loop nuance this week.
Artificial Intelligence (AI)
Adversa AI Research — “GuardFall” Shell Injection Bypasses 10 of 11 Open-Source AI Coding Agents
An AI-coding-agent bypass with cross-vendor implications — defender posture-review work for organizations running open-source agents this week.
Artificial Intelligence (AI)
"BioShocking" Research Tricks AI Browsers Into Leaking User Credentials
A multi-vendor AI-browser research disclosure — defender posture-review work for organizations deploying agentic browsers this week.
Artificial Intelligence (AI)
CIA's Ratcliffe Frames Advanced AI as ‘Akin to Digital Nuclear Weapons’
A senior US-intelligence framing lands mid-cycle — how AI-cyber policy hardens in focus this week.
Artificial Intelligence (AI)
Microsoft Warns Poisoned MCP Tool Descriptions Can Turn AI Agents Into Data-Leak Channels
A fresh vendor-research disclosure at the intersection of AI agents and supply-chain risk — Microsoft says poisoned tool descriptions can quietly redirect what an agent does, and pairs the research with defender guidance for teams shipping agentic AI this week.
Mobile Security
Researchers Disclose 282 iOS AI Apps Leaking API Keys in Network Traffic
A scale-significant AI-app privacy disclosure with developer accountability implications: Wake Forest researchers found 282 of 444 iOS AI apps exposing usable LLM credentials in their own network traffic, and most stayed open months after notification.
Vulnerabilities
Researchers Disclose Amazon Q Developer VS Code Flaw Affecting Cloud Credentials
A coding-AI-assistant flaw with cloud-credential implications — defender posture review for the week.
Artificial Intelligence (AI)
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
Another defender-positive AI model preview from OpenAI, this time gated to a small group of vetted partners at the US government's request and shipped with the company's most robust cyber-safety stack to date.
Vulnerabilities
Apple Patches 30+ iOS, macOS, and Safari Flaws, Including AI-Discovered WebKit Bugs
Apple shipped an early, large patch cycle across iOS, macOS, and Safari — including four WebKit bugs surfaced by AI tools from OpenAI and Anthropic. For defenders, this is a device-verification week.
Cybercrime
Microsoft Files Racketeering Suit Linking Amadey and StealC Operators via AI
Microsoft's civil legal tooling now leans on AI-link analysis — a notable methodology disclosure in a public filing that frames two separate malware operations as a single racketeering conspiracy.
Artificial Intelligence (AI)
Researchers Disclose "OpenClaw" Skill-Marketplace Risks for AI Coding Agents
AI-coding-agent skill marketplaces are an emerging supply-chain surface — defenders have inventory work this week.