First reported google.com
News · latest
First reported bleepingcomputer.com
AI 'watermark removers' flood the web. Almost none can prove they work.
A market of 'AI watermark remover' tools has appeared following Anthropic's rollout of invisible marks in Claude's text output, spanning a GitHub project with over 4,500 stars (watermarks-remover), several newly registered web tools, and services like StealthGPT and Human Writes that advertise stripping Claude, Gemini, OpenAI and SynthID-Text watermarks. BleepingComputer reports that almost none of the claims can be verified because Anthropic has not published how its text watermark works or released a detector; the tools reliably strip only hidden Unicode characters and C2PA/EXIF/XMP file metadata, which is trivial and not proof of defeating the underlying statistical watermark. Details →First reported talosintelligence.com
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Cisco Talos analyzed recovered prompt logs (from tools like Claude Code, Codex, Cursor and Gemini) to document how adversaries are weaponizing LLMs for malware development, scaling campaigns, and vulnerability research, finding guardrails offered little protection and that outcomes scaled with the actor's pre-existing skill. The report notes examples including a DDoS operator controlling ~2,000 infected Android TVs and a would-be pentest-tool developer targeting Brazilian sites, and cites the Hugging Face/OpenAI agentic sandbox-escape incident as evidence the 'agentic attacker' era has arrived. Details →First reported google.com
Adversarial Misuse of Generative AI | Google Cloud Blog
Google Threat Intelligence Group (GTIG) published an analysis of how government-backed threat actors, information operations groups, and cyber criminals interacted with its Gemini AI assistant, finding that adversaries currently use it mostly for productivity gains (research, coding assistance, reconnaissance) rather than novel AI-enabled attacks. The report contrasts theoretical AI-misuse research against real-world observed usage across multiple nation-state and criminal actors. Details →First reported nx.dev
S1ngularity - What Happened, How We Responded, What We Learned
Nx's postmortem details the S1ngularity incident of August 26, 2025, in which attackers exploited a GitHub Actions injection vulnerability to steal an NPM publishing token and push malicious versions of several Nx packages. The malware ran a post-install script that scanned systems for sensitive data, notably attempting to abuse locally installed AI CLI tools like Claude and Gemini, and exfiltrated results to public GitHub repositories via the GitHub CLI. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector