First reported youtube.com
Analysis · latest
First reported aws.com
Memory Poisoning Attack in AI Agents - Attack vectors and defenses on AWS | AWS Builder Center
An AWS Builder Center article titled "Memory Poisoning Attack in AI Agents" discusses attack vectors and defenses for memory poisoning against AI agents on AWS. The retrievable page body contains only cookie-consent boilerplate, so the substantive technical content could not be analyzed. Details →First reported medium.com
Prompt Injection Is No Longer Just a Chatbot Problem
A Medium explainer titled "Prompt Injection Is No Longer Just a Chatbot Problem" argues that as AI applications gain the ability to search documents, retain memory, call APIs, and run autonomous agent workflows, prompt injection now extends beyond chatbots to poison retrieved knowledge, corrupt long-term memory, manipulate an agent's plan, or trigger unauthorized tool calls. The piece frames prompt injection as a core security challenge across prompts, RAG, tools, memory, and agents. Details →First reported lakera.ai
Memory poisoning in AI agents: are your controls keeping up?
An NHIMG editorial based on Lakera research discusses memory poisoning and long-horizon goal hijacks in AI agents, where attackers persistently alter what agents remember and optimize for, creating silent compromise paths that unfold across sessions. The piece offers governance guidance such as treating persistent memory as governed state, tracing provenance on memory items, and monitoring multi-step workflows for objective drift. Details →First reported detect.fyi
Detection Engineering in the Era of Semantic Malware | by Koifsec | Jul, 2026
A detection-engineering analysis examines "semantic malware" / "promptware" — malware delivered through prompt injection rather than binaries — using Origin's Brainworm PoC (a poisoned CLAUDE.md file that hijacks AI coding assistants into registering with a C2 server over RabbitMQ) and the Ben-Gurion/Tel Aviv/Harvard/Toronto "Promptware Kill Chain" arXiv paper as anchors. The kill chain formalizes seven stages (initial access via prompt injection, jailbreaking, reconnaissance, memory/retrieval poisoning, command-and-control, lateral movement, actions on objective) across 36 documented incidents, and the piece discusses how defenders can detect such trust-boundary failures. Details →First reported agentsafelabs.com
Prompt Injection Is Not a Chatbot Problem: How the Attack Surface Changes When Your LLM Has Tools
An explainer arguing that chatbot-era prompt injection defenses (input filtering, output monitoring, instruction hierarchy, adversarial training) fail against agentic systems because injection enters through tools, retrieved documents, memory, API responses, and inter-agent instructions rather than the user message. It frames the issue as a system-architecture and trust-boundary problem rather than a model-tuning one. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector