First reported youtube.com
Analysis · latest
First reported hardshell.ai
AI Data Security Guides
Hardshell's AI Data Security Guides is an index of reference material on how enterprise AI systems leak data at the retrieval layer, covering secure RAG, data poisoning, training data leakage, and AI data pipeline security. Each guide maps failure modes to controls and standards (NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS) and links deeper dives, checklists, and a RAG leakage self-test. Details →First reported · updated · 3 reports youtube.com
CyberTalks: Data Poisoning Attacks on ML & Agentic AI Systems | Jason Ross |COASP - YouTube
An explainer on AI data poisoning describes how attackers corrupt the data a model learns from, fine-tunes on, or retrieves — including training data, alignment data, and RAG knowledge bases — so a poisoned model behaves as the attacker intends while passing ordinary validation. It distinguishes data poisoning from prompt injection, jailbreaking, evasion, and model poisoning, and notes research (e.g. Carlini et al.'s web-scale poisoning work) showing under 1% poisoned data can measurably change behavior, recommending provenance, access control, monitoring, and rollback as layered defenses. Details →First reported utimaco.com
Data Poisoning: Protect AI from Manipulated Data
A Utimaco blog post discusses data and model poisoning as integrity attacks against RAG and training pipelines, citing OWASP's classification of manipulation of pre-training, fine-tuning, and embedding data. The piece argues for verifying data integrity before inference using cryptographic digital signatures and HSM-protected signing keys, framed around Utimaco's General Purpose HSM offering. Details →First reported · updated · 5 reports paloaltonetworks.com
What Is Data Poisoning? [Examples & Prevention]
Palo Alto Networks' Cyberpedia entry explains data poisoning against AI/ML systems: how attackers corrupt training data to manipulate model behavior, the different attack types, where poisoning occurs in the pipeline, its distinction from prompt injection, and defensive measures. The page is an evergreen reference/glossary entry rather than a report of a specific incident or new finding. Details →First reported youtube.com
How LLMs Get Hacked: Top 10 Enterprise AI Attacks and Defenses #aisecurity #cybersecurity
A TedShark Labs YouTube video walks through the top 10 enterprise LLM attack classes — including direct and indirect prompt injection, sensitive information disclosure, supply chain risks (HuggingFace, SBOMs), RAG data/model poisoning, improper output handling (XSS/SSRF), excessive agency, system prompt leakage, embedding weaknesses, hallucination, and unbounded consumption — and recommends defenses like AI gateways, DLP filters, and zero trust controls. Details →First reported oracle.com
Securing AI agents through platform controls and shared responsibility | cloud-infrastructure
Oracle's blog post discusses securing AI agents in enterprise SaaS workflows through platform controls and a shared-responsibility model, describing how agents that retrieve data, call tools, and trigger business processes must be governed. It references emerging AI-security standards (ISO/IEC 42001, ISO/IEC FDIS 27090, CEN/CENELEC) and a converging threat taxonomy including data poisoning, evasion, model inversion, model extraction, prompt injection, and agent/tool abuse. Details →First reported intigriti.com
RAG and ruin: why your existing controls may miss AI poisoning attacks
An Intigriti blog post titled "RAG and ruin: why your existing controls may miss AI poisoning attacks" discusses how retrieval-augmented generation (RAG) systems can be compromised through data/knowledge-base poisoning, and argues that traditional security controls fail to detect such AI-specific poisoning attacks. Details →First reported · updated · 9 reports kodemsecurity.com
OWASP Top 10 LLM & Gen AI Vulnerabilities in 2026
Bright Defense publishes an explainer walking through the OWASP Top 10 LLM and generative-AI vulnerabilities (prompt injection, sensitive information disclosure, supply chain risks, data/model poisoning, improper output handling, excessive agency, system prompt leakage, vector/embedding weaknesses, misinformation, and unbounded resource consumption), giving each category a description, sample attack scenario, and mitigation guidance. The piece is reference material synthesizing the OWASP framework rather than reporting a specific incident or presenting new findings. Details →First reported firetail.ai
LLM08: Vector & Embedding Weaknesses - FireTail blog posts
FireTail's blog explains OWASP LLM08: Vector and Embedding Weaknesses, covering risks such as unauthorized access, cross-context information leaks, embedding inversion attacks, data poisoning, and behavior alteration in RAG systems that use vector databases. The post lists mitigation techniques including access control, data validation, source authentication, and monitoring. Details →First reported dailyjus.com
Prompt Injection: Are Invisible Instructions the Next AI Risk in Disputes? – Daily Jus by Jus Mundi
Legal analysts at Greenberg Traurig examine prompt injection as an emerging AI risk in legal disputes, describing how hidden instructions embedded in documents can manipulate AI tools that ingest them into producing skewed or incomplete outputs. The piece contrasts this with AI hallucinations and notes a court has already dealt with the issue. Details →First reported aicerts.ai
Undetectable AI Model Backdoors Imperil Neural Security
AI CERTs News synthesizes cryptography research on undetectable AI model backdoors, citing Goldwasser et al. (FOCS 2022) on computationally undetectable injections, NeurIPS 2024 work on obfuscated releases, and Sparse Backdoor constructions reducible to Sparse PCA. It argues that outsourced training, checkpoint marketplaces, and prebuilt adapters let attackers embed triggers that survive static scans, and cites benchmark claims of near-100% trigger activation in tool-using language models. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector