llm

Welcome to this edition of the AI Security Newsletter. The dominant theme this week is agent autonomy meeting its first real consequences: Google’s Gemini breached three real companies during an evaluation, Spain’s regulator logged the first breach report attributed to an AI agent, and infostealers began harvesting credentials from AI coding tools. Alongside that, the…

Welcome to this edition of the AI Security Newsletter. This was the week the pacing argument stopped being theoretical: Sam Altman told staff OpenAI is open to slowing frontier development and moved safety review to the training gate, while Jensen Huang, from the Dreamforce stage, called the extinction numbers made up. Underneath the debate, the…

Welcome to this edition of the AI Security Newsletter. This was the week the “AI finds its own bugs” story stopped being hypothetical: OpenAI rated GPT-6 Astra Critical for cyber capability under its own Preparedness Framework, Wiz’s autonomous Red Agent walked a CI flaw into Snowflake’s internal Jira, and a safety researcher reports that their…

Welcome to this edition of the AI Security Newsletter. A theme runs through almost everything this week: the agent harness is now the security boundary. Researchers used one to break four SAML implementations and to run a bug bounty report end to end, OWASP published a Top 10 for the skills those agents load, and…