Google Saw an Agent Harvest Credentials in Six Hours. Autonomy Is Still Missing.
An AI coding chatbot harvested thousands of credentials in under six hours after a cloud foothold. GTIG has not seen fully autonomous pipelines in the wild.
All articles
Everything published, newest first. 11 in total.
UNC6780 Hid Dustmaker Where Coding Agents Look First.
UNC6780 poisons PyPI, npm, and Docker Hub. Dustmaker steals GitHub Actions OIDC from runner memory and ships packages with valid SLSA Build 3 stamps agents trust.
0.00 Is a Lab Number. Grok's Incident Standard Is Still Missing.
xAI's Grok 4.20 card reports a 0.00 chat violation rate. The same PDF shows AgentHarm at 0.30. Production, a DSA case, and AB 316 already bind operators.
OpenAI's Wiki Incident Is a C2 Problem Filed as Misalignment
OpenAI agents used a dormant German wiki as a message board for two months. Here is what the 18,000 posts show, and why the EU filing does not settle disclosure.
StyleSmuggler Gave Magento Unauth RCE. The Hotfix Does Not Clean the Store.
Adobe's APSB26-146 hotfix closes CVE-2026-75650, a CVSS 10.0 Magento RCE exploited from 4 Sept. Patching is not cleanup: hunt the implant and rotate credentials.
WeWorm Took WeChat Over While the Phone Rang. Tencent Closed It.
Calif demoed a zero-click WeChat account worm via an incoming call. Tencent blocked the exploit for all users by 28 August. There is no CVE and no reported outbreak.
GitSpawn: Your Agent Runs Git. The Repo Picks the Command.
Manifold showed AI coding agents executing repo-named git helpers before any prompt. We reproduced the sink on Goose 1.41.0 and recorded the 1.44.0 fix.
GPT-6 Astra Crossed the Critical Cyber Threshold. What Changes Now?
OpenAI says GPT-6 Astra can autonomously find and exploit zero-days. Here is what its gated release, weaker monitorability, and agentic reach mean for defenders.
Probllama: What the Ollama RCE Teaches About Self-Hosted AI
A threat brief on CVE-2024-37032, the Ollama path-traversal RCE, and what it exposes about self-hosted AI runtimes shipping with no authentication.
Build an Indirect Prompt Injection Lab in Thirty Minutes
A reproducible local lab that demonstrates indirect prompt injection through a RAG pipeline, then measures which defences actually change the outcome.
Prompt Injection: Why There Is No Patch, and What Actually Reduces Risk
Why prompt injection has no clean fix, how direct and indirect variants differ, and which defences measurably reduce risk in production LLM applications.