Sam Stepanyan 🐘

OWASP Gen AI Security Project

GenAI Security Industry Framework Crosswalk

The OWASP GenAI Security Project Crosswalk is an open-source resource that connects OWASP GenAI security risks to established industry security, governance, and compliance frameworks. It maps 51 GenAI vulnerabilities across four  source lists to controls in 25 frameworks, including NIST, ISO, MITRE ATLAS, the EU AI Act and others. Organizations can use the crosswalk to […]

Revolut discloses data breach exposing financial info, passports

Fintech company Revolut has disclosed a data breach after sharing data from an undisclosed number of customers with a threat actor impersonating a government agency.

GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos | Noma Security

Noma Labs found a prompt injection flaw in GitHub Agentic Workflows that let an unauthenticated attacker leak private repo data via a crafted GitHub Issue.

Copilot Cowork Sandbox Bypass Gives Attackers Remote Control

A sandbox bypass in Microsoft Copilot Cowork let a malicious Skill read commands from an attacker's server and send back any data the agent could reach, including Outlook mail, SharePoint files, and chat history.

Hackers abused Claude to extract secrets from 1.8M Android apps

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model for malicious purposes.

Security Affairs

Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat histories zero-click

Anatomy of a Frontier Lab Agent Intrusion - Replay

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

International Cyber Digest (@IntCyberDigest) on X

‼️ BREAKING: We now know what led to the major breach at Manchester Airports Group that exposed 8.7 million people's data. Turns out they made a serious error: they put API keys with access to everything in their frontend's JavaScript files.

Semgrep

Comparing Open-Source AI Code Security Harnesses

A guide to open-source AI tools for finding code vulnerabilities, comparing exploit generation, skill-boosted auditing, and SAST+LLM hybrid approaches.

Zenity Labs

AgentForger, Part 1: ChatGPT Cross-Site Agent Forgery

Zenity Labs reveals AgentForger, a ChatGPT Workspace Agents vulnerability that turns a single ChatGPT link into an autonomous insider.

A WIF Of Fresh Access: How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise

VMware fixes three critical flaws allowing auth bypass, VM escapes

Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host.

TechStory

Pope Official Prayer App Data Leak Exposes 700K+ User Records

An IDOR flaw in the Pope official prayer app data leak exposed the names, plaintext emails, and admin roles of over 700,000 Click to Pray users.

Top AIs invent same fake PyPl and npm package names

Research reveals that slopsquatting remains a threat to developers using AI to aid coding.

Security Affairs

OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root

OVSwrap is a 13-year-old Linux kernel flaw that lets local users gain root privileges on most distributions using Open vSwitch.

Keyv and friends compromised in npm supply chain attack

wiz.io

CosmosEscape: Taking Over Every Azure Cosmos DB | Wiz Blog

Wiz Research details CosmosEscape, a critical vulnerability in Azure Cosmos DB that granted full read/write access to every database. Now fully remediated.

Context bombs: stopping AI attackers in their tracks | Tracebit

We planted context bombs, short strings that trip an AI model's own safety guardrails, inside canary secrets in a live AWS environment. Across 5 frontier models and 152 runs, they cut successful attack paths from 91% to 15% - stopping attackers outright as well as detecting them.

Checkmarx

Operation Navy Ghost: How Attackers Planted a Telegram-Powered Backdoor Across Fake pyrogram Packages on PyPI - Checkmarx

A threat actor targeted Telegram bot developers adopting the popular 'pyrogram' package on PyPI over the course of six months starting November 2025, in Operation Navy Ghost. This malware is a complete backdoor on servers where infected bots are operated, and uses Telegram itself for C2 and data exfiltration. Learn how it works, how it sneaks by most scanners, and how to detect infections.

MikroTik

MikroTik makes networking hardware and software, which is used in nearly all countries of the world. Our mission is to make existing Internet technologies faster, more powerful and affordable to wider range of users.

GitHub - OWASP/Nettacker: Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management - OWASP/Nettacker

OWASP Global AppSec US 2026 - CFP (San Francisco) : Call for Speakers

OWASP Global Conferences are a must attend event by all cybersecurity professionals.  Join the team and become a speaker at this well sought after eve...

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Docker

Coding Agent Horror Stories: The 29 Million Secret Problem | Docker

Learn how AI coding agents can expose credentials in supply chain attacks and how Docker Sandboxes keep secrets out of an agent's reach.

OWASP Gen AI Security Project

OWASP GenAI LLM Top 10 2026

OWASP Top 10 for LLM Applications 2026 is the latest community-driven guide to the most critical security risks facing applications powered by large language models. Developed by hundreds of AI security experts, this edition introduces updated rankings, expanded threat coverage, and new research grounded in thousands of real-world AI security incidents. The guide provides practical […]

Indirect Prompt Injection Targets AI Agents | ThreatLabz

ThreatLabz details indirect prompt injection hidden in malicious webpages meant to mislead AI agents performing tasks.

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

Crypto Briefing

Telegram's t.me domain goes offline after registry suspension

Telegram's t.me domain has been suspended by the .me registry and removed from DNS, breaking all shared links and raising questions for crypto communities.

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

The Week of Sandbox Escapes

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry.

Cybernews

German police read WhatsApp messages without cracking encryption

45 days of Signal history may be exposed by German police messaging surveillance using linked devices, Netzpolitik says. Read what the documents reveal

Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories - StepSecurity

msrc.microsoft.com

Security Update Guide - Microsoft Security Response Center

Exploited JFrog Artifactory bug puts software supply chain on alert

The bug is already being exploited in the wild, allowing attackers to generate admin tokens and gain access to Artifactory, the platform that powers many organization’s software supply chains.