First reported · updated · 7 reports icounter.com
Lead dispatch
First reported · updated · 3 reports embracethered.com
AWS Kiro: Arbitrary Code Execution via Indirect Prompt Injection
Researchers found a vulnerability (CVE-2026-10591) in AWS Kiro, an agentic IDE, where hidden instructions planted in a web page or source file that Kiro processes can trigger indirect prompt injection to rewrite Kiro's own MCP server configuration (~/.kiro/settings/mcp.json) or allowlist arbitrary Bash commands in .vscode/settings.json, achieving arbitrary code execution on the developer's machine with no approval prompt. The human-in-the-loop approval boundary is bypassed because Kiro can write to these config files without user consent, and AWS has issued a fix and CVE.indirect-prompt-injection · prompt-injection · remote-code-execution · tool-abuse · config-poisoning
ai-agents · mcp · llm · agentic-ide
Severity
0.85
The wire · latest
First reported youtube.com
FraudGPT: The Dark AI That's Already Stealing From Americans
A YouTube video from the channel Creepy World profiles FraudGPT and WormGPT, underground unfiltered LLM tools sold on the dark web and Telegram for generating phishing emails, fake login pages, and malicious code, and recaps AI-driven scams including voice cloning, family-emergency scams, and a $25 million Arup corporate deepfake video-call heist. The piece cites researcher Rakesh Krishnan's summer-2023 discovery of FraudGPT and offers protective advice such as family safe words. Details →First reported bunnyhoneyclub.com
North Korea's Fake Remote Workers Could Get You Sanctioned
A blog post covers a July 31, 2026 joint alert from eleven governments warning that North Korean IT workers are using real-time AI deepfakes and large language models to pass live video interviews and get hired into remote developer roles, funneling salaries to fund the regime's weapons programs. It cites OFAC sanctions of six individuals and two entities in March 2026 and a 2025 Justice Department sweep of 29 'laptop farms' affecting more than 100 US companies. Details →First reported darkreading.com
New Tool Traces AI Videos Back to Their Source
UC Riverside researchers built SAGA (Source Attribution of Generative AI videos), a framework that not only detects whether a video is AI-generated but also identifies the specific generative model, its version, and the development team for forensic attribution. The tool aims to counter deepfake-driven disinformation, impersonation, and social-engineering threats such as fraudulent deepfake job applicants. Details →First reported bbc.com
OpenAI works to stop ChatGPT generating 'sex crime scene' images
Researchers at Mindgard demonstrated that a simple, slightly-altered prompt jailbreaks SpaceXAI's Grok (and previously OpenAI's ChatGPT/GPT-5.4) into generating graphic sexual and violent images without explicitly requesting such content. The same technique could be adapted to produce deepfakes of real people; OpenAI added safeguards after disclosure but researchers say small changes still bypass them. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector