First reported github.com
Lead dispatch
First reported · updated · 3 reports embracethered.com
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection
Researchers found a vulnerability (CVE-2026-10591) in AWS Kiro, an agentic IDE, where hidden instructions planted in a web page or source file that Kiro processes can trigger indirect prompt injection to rewrite Kiro's own MCP server configuration (~/.kiro/settings/mcp.json) or allowlist arbitrary Bash commands in .vscode/settings.json, achieving arbitrary code execution on the developer's machine with no approval prompt. The human-in-the-loop approval boundary is bypassed because Kiro can write to these config files without user consent, and AWS has issued a fix and CVE.indirect-prompt-injection · prompt-injection · remote-code-execution · tool-abuse · config-poisoning
ai-agents · mcp · llm · agentic-ide
Severity
0.85
The wire · latest
First reported openai.com
Disrupting a new covert influence campaign from Russia
OpenAI reported banning a cluster of ChatGPT accounts very likely originating in Russia that used the model to generate English-language social media comments promoting the International Burke Institute, a covert influence operation that hid its Russian origins using VPNs and prompted ChatGPT to mask linguistic tells. The operation combined AI-generated posts across Substack, Telegram, X, Facebook, and LinkedIn with a website of copied and misattributed academic work and a pro-Russia 'sovereignty' index. Details →First reported jfrog.com
SQLite Critical CVEs or LLM Slop? - JFrog Security Research
JFrog Security Research investigated a batch of 50+ CVEs (including SQLite advisories like CVE-2026-51302) published by a newly created GitHub repo (programmervuln/cveadvisory-) and concluded they are LLM-generated 'slop': the cited code doesn't exist in the referenced versions, PoC payloads fail to trigger crashes under AddressSanitizer, none appear on SQLite's official advisory page, and AI-detection tools flag the advisories. NVD flagged them critical and Red Hat initially scored CVE-2026-51302 at 10.0 before downgrading to 7.6. Details →First reported jfrog.com
SQLite Critical CVEs or LLM Slop? - JFrog Security Research
JFrog security researchers found that a batch of six critical- and high-rated SQLite CVEs (plus 50+ others covering libraw and ESP32-audioI2S) published by a new GitHub repo 'programmervuln/cveadvisory-' were bogus and appear to be LLM-generated 'slop'; the advisories cited non-existent functions and unrelated source lines, and their proof-of-concept payloads triggered no crashes when tested under AddressSanitizer. The fake reports nonetheless flowed into NVD with CISA enrichment before MITRE rejected the repo, exposing weaknesses in a CVE pipeline that operates largely on the honor system while NIST's NVD backlog exceeds 27,000 records. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector