High-signal AI/security/automation notes.
Hadrian catalogs 70 open-source AI pentesting tools as of March 2026, with agents achieving IP-to-shell for under $1 and 156x cost reduction versus human-led engagements.
Audit of 428 LLM API routers finds active payload injection in 9 services, credential harvesting in 17, and confirmed crypto wallet draining — exposing a hidden supply-chain risk for AI agent deployments.
CVE-2026-35402 in mcp-neo4j-cypher lets LLM agents bypass read-only restrictions using CALL stored procedures, enabling data modification and SSRF.
VentureBeat survey finds most enterprises observe but cannot enforce or isolate AI agent behavior, while 97% of security leaders expect a major agent-driven incident within a year.
Cisco open-sources a comprehensive AI agent security toolkit including DefenseClaw, MCP Scanner, Skill Scanner, A2A Scanner, and AI BOM — addressing the full agentic AI threat surface.
A single threat actor leveraged Claude Code and GPT-4.1 to compromise nine Mexican government agencies, stealing 195M citizen records in a campaign that ran from December 2025 to February 2026.
Abnormal Security discovers ATHR, a commercial cybercrime platform that uses AI voice agents to automate the entire telephone-oriented attack delivery (TOAD) chain — from email lures to credential harvesting for Google, Microsoft, and Coinbase.
Cisco Talos reports a 686% increase in phishing emails abusing n8n AI workflow automation webhooks to deliver malware and fingerprint devices via trusted cloud domains.
Cloudflare publishes its internal MCP security architecture covering authorization controls, prompt injection defense, supply chain governance, and Shadow MCP detection for enterprise AI agent deployments.
Google Cloud/Mandiant warn that AI models are compressing the zero-day attack timeline, enabling mass exploitation campaigns, and call for AI-integrated defensive roadmaps to counter machine-speed threats.
RSAC 2026 researchers achieved 76% prompt injection success rate against Apple Intelligence using Neural Exec and Unicode bidirectional tricks, patched in iOS 26.4 / macOS 26.4.
Microsoft documents an AI-driven phishing campaign using dynamic code generation, generative AI lures, and serverless infrastructure to bypass MFA and compromise organizational accounts.
Capsule Security disclosed CVE-2026-21520 (ShareLeak) in Microsoft Copilot Studio and PipeLeak in Salesforce Agentforce — indirect prompt injection via public forms leading to data exfiltration.
OpenAI discloses Axios npm supply chain attack affecting GitHub Actions workflow with access to macOS app signing certificates, highlighting critical AI infrastructure supply chain risks.
New arXiv research introduces MCP-DPT, a defense-placement taxonomy that maps 49 MCP-specific attacks to architectural layers and identifies critical security gaps in AI agent ecosystems.
GitHub Security Advisories disclose two critical MCP vulnerabilities: PraisonAI environment exposure and FrontMCP SSRF, highlighting systemic risks in AI agent toolchains.