First reported rapid7.com
Lead dispatch
First reported island.io
AgentBaiting: How Fake AI Skills Deliver Malware at Scale
Island security researchers uncovered the FakeGit campaign, which used roughly 7,600 malicious GitHub repositories—over 800 posing as AI Skills or MCP servers—to deliver SmartLoader malware that installs the StealC information stealer. The campaign introduces a technique called AgentBaiting, in which AI agents such as Claude Code, Gemini, and ChatGPT autonomously discover the attacker repositories, treat the malicious README as legitimate documentation, and pass installation instructions to users; the operation recorded over 14 million downloads.supply-chain · tool-abuse · malware-delivery · agentbaiting
mcp · ai-agents · ai-skills · llm · copilot
Severity
0.75
The wire · latest
First reported · updated · 2 reports barracuda.com
Text salting: How hidden text evades AI email security
Barracuda researchers report more than one million retail-themed phishing emails since April that use 'text salting' — hidden, harmless-looking text invisible to recipients but readable by scanners — to dilute malicious signals and fool both traditional and AI-powered email security filters. Generative AI lets attackers generate these salted campaigns cheaply, at scale, and with high variation, while AI-based content analysis engines fail to see through the hidden content. Details →First reported · updated · 3 reports dexpose.io
Malicious AI on the Dark Web | Inside WormGPT, FraudGPT & the New Generation of Criminal AI Tools - Malware News - Malware Analysis, News and Indicators
A field guide from dexpose.io profiles the category of 'dark web AI' — uncensored or jailbroken LLMs like WormGPT, FraudGPT, and EvilGPT sold on underground forums to write phishing emails, generate malware, and automate fraud. WormGPT was built by fine-tuning open-source GPT-J on malware/phishing data, while other services wrap jailbroken mainstream models; FraudGPT is marketed with features spanning phishing pages, malicious code, and payment-card fraud. Details →First reported akamai.com
The New MCP Specification: What Security Teams Must Prepare For
Akamai analyzes the upcoming MCP 2026-07-28 specification, which moves the Model Context Protocol to a stateless, enterprise-grade architecture with application-managed state, rich interactive UI apps, and long-running async tasks. It argues that while the update eliminates historical risks like protocol-level session hijacking and weak auth, it shifts security boundary responsibility to developers and opens new abuse avenues: unauthorized customer-data access, phishing through trusted AI interfaces, bypass of enterprise controls, and service disruption via background-processing abuse. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector