First reported arxiv.org
Research · latest
First reported beyondtrust.com
How Copilot Studio Sandbox Escape Gave Us Admin Access
BeyondTrust's Phantom Labs details how they escaped Microsoft Copilot Studio's Code Interpreter sandbox, chaining modern prompt injection techniques with classic dictionary attacks to obtain Administrator credentials to code interpreter sandboxes deployed worldwide. The research, starting from a stock agent with only the code-interpreter toggle enabled, argues that many AI agent sandboxes act as guardrails rather than true security boundaries. Details →First reported heyitsas.im
OVSwrap: another Linux local root vulnerability
OVSwrap (CVE-2026-64531, CVSS 7.8) is a Linux kernel Open vSwitch datapath memory-corruption bug that lets an unprivileged local user gain root on broadly default-configured distributions, with a public exploit shipping pre-built offsets for ~800 kernel builds. Researcher Asim Manizada disclosed it and, notably, says it was found by equipping LLM 'hunter agents' with graph-reasoning and persistent ASCII-diagram memory-geometry tools to reason through the 16-bit Netlink length wraparound that redirects parsing into attacker-controlled conntrack data. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector