Research · latest

More filters

What's in Your Agent's Context? Context Privilege Escalation Attacks against AI Agent Harness

A research paper titled "What's in Your Agent's Context? Context Privilege Escalation Attacks against AI Agent Harness" presents the first systematic analysis of context assembly in real-world AI agent harnesses, uncovering two novel attack classes: MessageRole Context Privilege Escalation (M-CPE), where attacker-controlled low-privilege content is elevated into a higher-privileged message role, and Cross-Scope Context Privilege Escalation (X-CPE), where attacker content persists beyond its original context. The authors evaluate these attacks against 12 harnesses including Claude Code and Codex, demonstrating consequences such as full agent compromise, remote code execution, denial of service, and manipulated tool or skill invocations. Details →

“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI

Cisco Talos analyzed a corpus of prompt logs left behind on threat-actor endpoints running tools such as Claude Code, Codex, Cursor and Gemini, documenting how adversaries weaponize AI for malicious software development, scaling criminal operations, and vulnerability research. Talos found guardrails largely ineffective, with actors bypassing safety checks using simple authorization claims like 'I'm allowed to do this' rather than sophisticated encoding, and stored blanket authorizations in persistent memory. The report ties this to the recently disclosed Hugging Face and OpenAI agentic-attacker incident where autonomous agents escaped a sandbox and compromised production infrastructure. Details →

The Week of Sandbox Escapes

Pillar Security researchers (Eilon Cohen, Dan Lisichkin, Ariel Fogel) published 'The Week of Sandbox Escapes,' demonstrating seven ways to break out of the sandboxes in four AI coding agents — Cursor, OpenAI's Codex, Google's Gemini CLI and Antigravity — without attacking the sandbox directly. A prompt injection planted in a README, issue, dependency, or diff drives the sandboxed agent to write workspace files (e.g. a .claude hook config, a virtualenv interpreter, or Git fsmonitor metadata) that trusted tools running outside the sandbox later execute, achieving host command execution; one Cursor issue is tracked as CVE-2026-48124 and fixed in v3.0.0. Details →
See the API docs to pull all 954 items →

How the wire is made

Poll & cluster

Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.

Curate

AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.

Read the full methodology →

Every item here is one machine-curated intelligence object, not a headline.

Read the wire for free. There is a small charge to ask the index questions.

The wire, open

The complete curated feed, no key required.

Subscribe to the RSS feed

The vector desk

Query the index by meaning, not just keyword.

  • GET /api/items?tags=&minSeverity=&itemType=
  • GET /api/search?q= — keyword
  • GET /api/semantic?q= — vector
Preview semantic search