First reported twitter.com
Lead dispatch
First reported · updated · 2 reports island.io
AgentBaiting: How Fake AI Skills Deliver Malware at Scale
The FakeGit campaign, detailed by Island security researcher Oleg Zaytsev, uses roughly 7,600 malicious GitHub repositories—over 800 posing as AI Skills or MCP servers—to deliver SmartLoader malware, which establishes persistence and installs the StealC information stealer. Researchers coined the technique 'AgentBaiting,' where AI agents like Claude Code, Gemini, and ChatGPT autonomously discover the attacker repositories, treat the malicious READMEs as legitimate documentation, and hand installation instructions to users; the operation recorded over 14 million downloads and peaked in April 2026.supply-chain · tool-abuse · malware-distribution · agent-baiting
mcp · ai-agents · llm · github
Severity
0.78
The wire · latest
First reported nhimg.org
AI browser guardrail bypass exposes a new data theft path
LayerX Security describes a "BioShocking" attack that games an AI browser into violating its guardrails by establishing a false reality, enabling data theft, code copying, and system command execution. The attack exploits the browser-mediated trust boundary, using indirect or staged instructions embedded in webpage context that pass prompt filters yet still steer the model into malicious enterprise actions inside an authenticated session. Details →First reported arxiv.org
Behind the Refusal: Determining Guardrail Activation via Behavioral Monitoring
Researchers from Mindgard and Lancaster University (William Hackett, Peter Garraghan) present the first black-box guardrail reconnaissance methodology, which detects whether a target AI system has a guardrail by monitoring HTTP, lexical, and timing signals during benign versus malicious prompt sets. The approach assumes zero prior knowledge and reportedly detects guardrail presence with 100% accuracy, letting adversaries distinguish a guardrail block from an LLM safety rejection to better select bypass techniques. Details →First reported · updated · 2 reports hiddenlayer.com
EchoGram and guardrail bypass: are AI defenses keeping up?
HiddenLayer research dubbed EchoGram demonstrates that carefully chosen token sequences can flip verdicts in LLM guardrail models, causing harmful prompts to be marked safe or benign prompts to trigger false alarms. The NHIMG editorial summarizes the finding and its implications for organizations relying on probabilistic AI safety layers to protect deployed LLMs and agents. Details →First reported conscia.com
The exam every AI guardrail fails, and how to prepare for it - Conscia Danmark
A Conscia technical blog, "The exam every AI guardrail fails, and how to prepare for it," argues that AI guardrails inevitably fail against persistent adversaries because they lack cryptographic proofs, and therefore require continuous updates, threat feeds, and a defense-in-depth strategy to reduce risk. The piece frames guardrail evasion (including jailbreak techniques such as those catalogued in frameworks like EasyJailbreak) as an unsolvable pattern-matching problem rather than a one-time fix. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector