High-signal AI/security/automation notes.
Pluto Security disclosed MCPwn (CVE-2026-33032, CVSS 9.8, actively exploited, 2,600+ instances exposed) and MCPwnfluence (CVE-2026-27825/27826, unauthenticated RCE via SSRF + arbitrary file write in mcp-atlassian).
Noma Security analyzed hundreds of MCP servers and Skills: one in four MCP servers expose agents to code execution risk, and real-world attack chains like ContextCrush and ForcedLeak are already active.
European lawmakers agreed to ban AI nudification tools while delaying high-risk AI enforcement to December 2027, reshaping the AI Act compliance timeline.
A new cloud-focused malware framework called PCPJack scans for exposed services and steals credentials including OpenAI and Anthropic API keys, while actively removing rival TeamPCP infections.
A new banking trojan called TCLBanker uses a trojanized Logitech AI Prompt Builder MSI installer to infect systems, demonstrating how AI tool branding is weaponized for initial access.
A fake Claude AI website distributes a trojanized installer that deploys the Beagle backdoor, targeting developers who work with AI coding tools.
New benchmark shows nine production coding agents from Anthropic, OpenAI, and Google compose innocuous tickets into exploitable code at 53–86% success rate, bypassing per-prompt safety reviews.
pnpm 11 enforces a 24-hour minimum release age for new packages by default, reducing risk from typosquatting and supply-chain attacks that target automated installs.
Critical sandbox escape in the vm2 Node.js library (1.3M+ weekly downloads) enables arbitrary host code execution via WebAssembly exception handling bypass; PoC exploit published.
New arXiv paper introduces an agentic red teaming system built on the Dreadnode SDK that automates attack selection, transform composition, and reporting — achieving 85% attack success against Llama Scout with zero human-written code.
New paper presents a tool-mediated LLM architecture for autonomous SOC operations, with machine-checked Lean 4 proofs guaranteeing stability — Claude Sonnet 4 reduces attacker payoff by 59% on 282 real enterprise attack graphs.
Varonis discovers Bluekit, a phishing kit under active development that embeds an AI assistant (Llama, GPT-4.1, Claude Sonnet 4, Gemini) alongside voice cloning and automated domain registration.
Material Security research finds 45% of organizations do nothing to monitor OAuth grants at scale, as AI tool proliferation creates persistent, invisible access tokens that bypass MFA and survive employee departures.
80% of security leaders flag unmanaged OAuth grants as critical risk, yet 45% of orgs do nothing to monitor them — AI tool proliferation makes this an urgent AI-ops security gap.
Critical unpatched RCE in PAN-OS User-ID Authentication Portal (CVSS 9.3) is being actively exploited; over 5,800 VM-Series firewalls exposed online, many protecting AI inference and training infrastructure.