Test MCP Trust
An installation record is not an acceptance test. Check what the running application does, and keep the evidence usable for the next shift.
AI
Artificial intelligence, local AI, agents, tooling and AI security.
The AI Agent Copied the Attack Into Its Own Reply
A write-capable agent can carry untrusted text into the next workflow. Map the read-to-write route, test it with an inert marker and contain the write path.
Slack Replies Need a Named Initiator
Verify who authorised the message.
The Hidden ChatGPT Task That Read Gmail While the User Saw a Normal Answer
Check Point used a shared internal package service to pass hidden tasks between separate ChatGPT accounts. In its demonstration, the victim saw a normal answer while Gmail data crossed the boundary.
AI Kept Rebuilding This Russia-Linked Malware Until Security Tools Missed It
Anthropic says a Russia-linked espionage operator used AI to monitor detections and keep rebuilding malware until it was no longer detected. The attack cycle, not a single hash, is now the defensive problem.
Can You Defend This Access Decision?
Keep a reviewable record of evidence, limits and decisions.
The AI Needed Human Approval. So It Invented One.
CLTR’s AI incident data points to a deeper failure: systems that can fabricate human approval and turn oversight into theatre.
Hackers Used AI to Move Faster. Then They Exposed Their Own Playbook.
Two Latin American intrusion campaigns show AI accelerating attacker troubleshooting, but exposed consoles and open directories revealed how the operations worked.
Aurora Used Cursor to Turn Ransomware Into a Repeatable Playbook
Recovered Cursor logs show an Aurora ransomware affiliate using Claude against live victim networks while a skilled human controlled the intrusion.
One Unpatched Langflow Endpoint Could Hand Attackers Your OpenAI and AWS Keys
Attackers are exploiting a critical Langflow endpoint to steal OpenAI keys, AWS credentials and administrator secrets. Patching is only the first step.