First reported · updated · 3 reports openai.com
News · latest
First reported · updated · 2 reports thehackernews.com
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
Microsoft's Security Research team reports a high-volume phishing campaign using invisible Unicode tag characters — the same ASCII smuggling technique used for AI prompt injection — to split financial lure words like 'funding' and evade email filters. The attacks, first observed in early February 2026, show AI-era evasion techniques crossing over into traditional phishing and spam. Details →First reported google.com
AI Protection overview | Security Command Center | Google Cloud Documentation
Google Cloud's Security Command Center documentation describes AI Protection, a set of defensive services for securing AI workloads on Google Cloud, including AI Discovery, Model Armor (protection against prompt injection and jailbreak), Agent Platform Threat Detection, Agent Platform Vulnerability Assessment, Notebook Security Scanner, and Sensitive Data Protection. The page catalogs detection services, compliance frameworks, and Event Threat Detection rules for Gemini Enterprise Agent Platform assets. Details →First reported · updated · 2 reports cisa.gov
Defending Against an Active Threat to Siemens S7 Series PLCs
A joint CISA/NSA/FBI/DOE/EPA advisory (AA26-231A, August 2026) warns of an active cyber threat against U.S.-based Siemens S7 Series PLCs, in which threat actors conduct reconnaissance and capability development using AI-generated exploitation scripts disguised as legitimate monitoring tools. The advisory provides mitigations including inventorying PLCs, applying patches, isolating devices from the internet, hardening access controls, and hunting for anomalies. Details →First reported microsoft.com
Defending the Inbox Against Prompt Injection Attacks
Microsoft announced a new Microsoft Defender for Office 365 capability that detects and quarantines malicious AI instructions (prompt injection) embedded in email before delivery, aiming to stop indirect prompt injection from reaching Copilot and Microsoft 365 agents. The post cites publicly disclosed research such as Morris II and EchoLeak as evidence that email is a high-volume ingress channel for AI-targeted attacks, describing techniques like white-on-white text, zero-width Unicode, and hidden HTML instructions. Details →First reported paloaltonetworks.com
Potential denial of wallet abusing AI services • Cortex XSIAM Analytics Alert Reference by data source • Palo Alto Networks documentation portal
A Palo Alto Networks Cortex XSIAM analytics alert reference page documents a detection named 'Potential denial of wallet abusing AI services,' which flags abuse of cloud AI services (via AWS Audit Log data) to drive up costs in a denial-of-wallet style attack. The page is a product documentation entry describing the built-in detection rather than a technical write-up of the attack mechanism. Details →First reported microsoft.com
Prompt injection protection in Microsoft Defender for Office 365 - Microsoft Defender for Office 365 | Microsoft Learn
Microsoft documentation describes prompt injection protection built into Microsoft Defender for Office 365, which detects attacker-authored instructions embedded in inbound email (body, subject, quoted replies, attachments, or hidden markup) before that content reaches a user or an AI assistant such as Microsoft 365 Copilot. The feature explains indirect prompt injection techniques including direct instructions to the model and hidden/invisible text (white-on-white fonts, zero-size text, HTML/CSS tricks) and detects them as part of existing mail-flow inspection. Details →First reported · updated · 2 reports talosintelligence.com
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365
Cisco Talos documents ARToken, a phishing-as-a-service affiliate panel sharing infrastructure with the EvilTokens platform, that abuses Microsoft's OAuth device authorization grant to steal tokens and bypass MFA. The AI element is an AI-augmented BEC pipeline chaining Groq-hosted Llama models for financial exposure scoring and GPT-4o-mini for email translation, plus AI-powered personalized lures, to automate fraud against compromised Microsoft 365 mailboxes. Details →First reported theregister.com
Microsoft builds a bouncer to keep bots out of Teams meetings
The Register reports that Microsoft is rolling out bot-detection technology for Teams meetings that uses behavioral and infrastructure signals to distinguish bots from humans, requiring a human in the lobby to deliberately admit a bot. The move responds to unwanted bots—including third-party transcription and meeting-assistant bots—automatically joining meetings that may involve sensitive or NDA-covered discussions, and will add an ISV registration path for known bots while retiring CAPTCHAs. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector