The newest AI resources are on the AI page. For a reading order instead of a date order, see the AI learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-07-09 2026 | Cracking Firmware with Claude: Senior-Level Skill, Junior-Level Autonomy advanced 15 min read | Library for AI-assisted firmware analysis, demonstrating Claude Code's ability to reverse-engineer proprietary SonicWall SWI encryption. This AI independently traced decryption logic through a decompiled binary, located a key within a HashiCorp Vault instance, reconstructed its master key from Shamir secret shares, and recovered an RSA private key. The process highlights senior-level technical knowledge combined with junior-level autonomy, requiring human guidance for strategic pivots and verification. → bishopfox.com |
| 2026-07-08 2026 | What is Prompt Injection? How it Works and How to Prevent It beginner 8 min read | Library for understanding and defending against prompt injection attacks, a top risk for LLM Applications, including techniques like EchoLeak (CVE-2025-32711) impacting Microsoft 365 Copilot and the OWASP LLM Top 10 designation. It details how instruction-overriding, natural-language-based, model-agnostic, and hard-to-eliminate attacks work, differentiating them from jailbreaking, and covers risks such as data theft and remote code execution. The library also explores methods to reduce this threat in connected systems and agentic AI. → cloudsek.com |
| 2026-07-08 2026 | Beyond Tokens SF: Best Ideas of the Evening intermediate 4 min read | Library for building secure and efficient AI agents, tackling challenges like token waste, context evaporation, and insecure infrastructure. It introduces JFrog Fly for managing release context and decision records, JFrog Boost for reducing token costs by filtering noise and preventing inefficient search, and NanoClaw for agent isolation, credential security, and human-in-the-loop approvals. These tools enable agents to operate autonomously with increased speed, trustworthiness, and reduced expenditure. → jfrog.com |
| 2026-07-08 2026 | New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis news 2 min read | Library written in Rust, codenamed Gaslight, targets macOS and functions as an information stealer. It employs prompt injection against AI-assisted analysis tools by embedding fabricated system failure messages designed to deceive LLM triage agents into aborting analysis. Gaslight uses a Telegram bot API for its command-and-control channel, supports commands for remote execution, file exfiltration, and process termination, and employs a LaunchAgent for persistence. An embedded Python script gathers sensitive data from browsers and system processes, while a Bash installer deploys a Python interpreter from the "astral-sh/python-build-standalone" project. Operator configuration, including the Telegram bot token, is provided at runtime, and the malware self-redacts tokens from logs to further evade detection. → thehackernews.com |
| 2026-07-07 2026 | Beyond Prompt Injection advanced 8 min read | Library for verifying generative AI agent actions, shifting security from input filtering to deterministic policy enforcement. It emphasizes validating agent proposals against external, auditable rules before execution, rather than attempting to prevent prompt injection at the model level. This approach addresses risks like indirect prompt injection and data exfiltration demonstrated in scenarios such as the ForcedLeak vulnerability in Salesforce's Agentforce platform, moving security decisions to a place where adversaries have limited freedom. |
| 2026-07-07 2026 | RCE via Gemini Live AI Voice Session Misconfiguration. intermediate 10 min read RCE | Library providing insight into RCE via Gemini Live AI Voice Session misconfiguration. It details how unconstrained ephemeral tokens, particularly those generated without `live_connect_constraints` and `bidi_generate_content_setup` in the token minting process, allow clients to inject malicious setup frames. This can lead to the execution of arbitrary code through the `codeExecution` tool by controlling the `systemInstruction` and `tools` fields in the setup frame, bypassing intended session constraints. → infosecwriteups.com |
| 2026-07-07 2026 | 8 Best Agentic AI Security Companies for Prompt Injection & Secret Sprawl Defense beginner 11 min read | Library for agentic AI security vendors, this resource spotlights eight companies providing guardrails against prompt injection and secret sprawl, including Entro Security for identity governance and secret scanning, Palo Alto Networks for extending SOC visibility, Trend Micro Vision One with DLP capabilities, and Noma Security offering a control plane with a self-driving red team. The selection process involved mapping the market, applying strict inclusion rules, and scoring vendors on criteria such as prompt-injection defense, data-leak prevention, and real-time detection, prioritizing those proven in live environments. |
| 2026-07-04 2026 | Indirect Prompt Injection Targets AI Agents beginner 8 min read | Library of techniques and real-world examples demonstrating indirect prompt injection (IPI) against AI agents. This resource details how malicious websites, such as a payment scam impersonating a Python library and a typosquatting campaign targeting a cryptocurrency platform, use SEO poisoning and CSS/HTML abuse to embed hidden instructions. These instructions aim to manipulate AI decision-making, leading to context contamination and RAG poisoning, as observed in tests against multiple LLMs. The findings highlight the vulnerability of AI agents to social engineering through web content, including the abuse of JSON-LD structured data and off-screen div elements. |
| 2026-07-03 2026 | [tl;dr sec] #335 - Prompt Injection as Role Confusion, PHP Ecosystem Security, New MCP Spec intermediate 11 min read | Library for analyzing LLM security risks, covering prompt injection as role confusion, benchmarking LLMs like Claude Opus and GLM 5.2 against vulnerability detection datasets, and evaluating LLM security review repeatability using Snyk VulnBench JS 1.0. It also includes a technique for factoring vulnerable "short-sleeve" RSA and DSA keys using polynomials, and methods for ransomware attacks on Azure Storage. → tldrsec.com |
| 2026-07-03 2026 | GPT-5.5-Cyber built a zlib fuzzing lab in a day beginner 5 min read Fuzzing | Library built by GPT-5.5-Cyber for fuzzing zlib; it automatically generated harnesses across numerous entrypoints (including inflate, uncompress2, and MiniZip), configured ASan and UBSan builds, repurposed edge-case tests as seeds, and utilized compile-time variants like INFLATE_STRICT. This autonomous fuzzing campaign, a process that previously took weeks for skilled researchers, was completed in a single day, demonstrating a significant shift in vulnerability discovery capabilities. → blog.trailofbits.com |
| 2026-07-02 2026 | OrcaRouter Releases AI Threat Report 2026 and Makes Its Security Controls Free Amid Rise in Prompt-Injection Attacks news 7 min read | Library making agent Firewall and input/output Guardrails free, addressing prompt injection, the #1 LLM risk. OrcaRouter's AI Threat Report 2026 details escalating AI system vulnerabilities, including EchoLeak (CVE-2025-32711), CVE-2026-39987 in marimo, and CVE-2026-21520 in Microsoft Copilot. These gateway-level controls, integrated via API key, enforce scoped identity, input/output filtering, action firewalls, and anomaly detection to secure AI applications architecturally. |
| 2026-07-02 2026 | ChatGPT: Guardrail Bypass to LFI Vulnerability POC intermediate 2 min read | Writeup detailing a ChatGPT guardrail bypass leading to a Local File Inclusion (LFI) vulnerability, referencing LLM02:2025 Sensitive Information Disclosure. The exploit involves uploading a file, tricking the LLM into providing a download link via a specific prompt sequence, and then manipulating the download URL's `sandbox_path` parameter. By appending a path traversal payload like `../../../../etc/passwd` to a legitimate file path, the attacker can bypass validation and retrieve sensitive system files, demonstrating a primitive useful in larger exploit chains. → infosecwriteups.com |
| 2026-07-02 2026 | Is the Android Lock Screen an Illusion? A Critical Logical Bypass Discovered in the Gemini App news 4 min read Mobile | Writeup detailing a critical logical bypass of the Android lock screen within the Gemini app, achieved through a multi-touch interaction exploiting context hijacking. This vulnerability, discovered organically by the author, allowed unauthorized access to sensitive data like chat histories, NotebookLM notebooks, and Gmail drafts by circumventing the system Keyguard. The bypass leveraged inadequate validation of concurrent UI interactions, specifically by maintaining a press on a permitted area while tapping a restricted element, creating a race condition that neutralized security controls. The vulnerability was responsibly disclosed and subsequently patched by Google. → infosecwriteups.com |
| 2026-07-01 2026 | AI Agent Security: 6 Risks to Address and How to Do It intermediate 11 min read | Library detailing six key risks in AI agent security, including unauthorized actions through agent logic, identity misuse and privilege escalation, data exposure via unbounded retrieval, business logic bypass, supply chain risks from agent tools and plugins, and prompt injection (both direct and indirect). This resource emphasizes that agents' ability to execute actions with real permissions, rather than just generate text, creates a novel attack surface requiring distinct security considerations beyond traditional AI model security. → wiz.io |
| 2026-07-01 2026 | IEEE Cloud Summit 2026: The Tunnels No One Mapped news 7 min read | Library for securing agentic AI systems, focusing on practical challenges and solutions discussed at IEEE Cloud Summit 2026. Topics include building production-ready agents with deterministic components like Integer Linear Programming solvers, implementing context-aware security to grant agents only necessary data, and establishing forensic traceability for agent actions using OpenTelemetry. The library also addresses Kubernetes compliance shifts with developer-first guardrails, like the GuardOn browser extension, and highlights the pervasive issue of over-provisioned permissions in agentic environments. → blog.gitguardian.com |
| 2026-07-01 2026 | Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector advanced 22 min read Supply Chain | Library for detecting phantom squatting, an attack vector where adversaries register AI-hallucinated domains to compromise the software supply chain. This technique exploits LLMs to generate plausible but non-existent URLs for legitimate brands, which are then used to intercept traffic or deliver phishing kits. The library aids in identifying high-risk hallucinated domains, predicting adversary registration, and protecting against zero-reputation bypasses. → unit42.paloaltonetworks.com |
| 2026-07-01 2026 | Generative AI Security: Risks & Best Practices beginner 9 min read | Library outlining generative AI security, detailing risks like prompt injection, data poisoning, hallucinations, and compliance challenges. It highlights frameworks such as OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, MITRE ATLAS, and Gartner AI TRiSM, alongside essential practices like AI-BOM, zero-trust, and AI Security Posture Management for a comprehensive defense strategy against threats such as cross-tenant data leakage observed in Replicate. → wiz.io |
| 2026-06-30 2026 | Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? intermediate 12 min read | Library of tests for Snyk VulnBench JS 1.0, evaluating LLM security review repeatability by measuring consistency of findings on JavaScript code. The benchmark uses small Express applications and compares LLM outputs against Snyk Code SAST reference vulnerabilities, revealing that LLM-generated findings are inconsistently repeatable, particularly those outside the established reference set, unlike the deterministic output of traditional SAST tools. → snyk.io |
| 2026-06-29 2026 | Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection beginner | Security researchers have discovered a way to trick Large Language Models (LLMs) into generating instructions for illegal activities, such as creating cocaine. By manipulating the LLMs' understanding of "role models" through prompt injection, they could bypass safety filters. This research highlights a vulnerability in current LLM safety mechanisms, demonstrating that sophisticated users can circumvent intended restrictions. → theregister.com |
| 2026-06-29 2026 | I tried a Local AI model (Qwen 3.6 27b) for security research and it works surprisingly well. intermediate 6 min read | Library for local AI models that leverages a custom harness to process individual source code files with context, proving effective in identifying vulnerabilities like the authenticated LFI in PHPIPAM (CVE-2026-12194) and authenticated RCE in myVesta, outperforming Semgrep, cloud-based AI agents, and skill-based code review approaches by focusing on file-by-file analysis rather than entire codebase reviews. |
| 2026-06-27 2026 | Defending Your Enterprise at the Speed of AI beginner 6 min read | Library enhancing enterprise AI security by addressing agent identity, data protection, and platform-level controls. It introduces features like Agent Identity for auditability, Horizon AI Guardrails for prompt injection defense, and CoCo CLI Sandbox for code execution isolation. Data exfiltration protection includes Data Movement Policies and Detection, while ransomware protection utilizes Multi-Party Approval and immutable Backups. These capabilities aim to secure AI agents and the entire data estate, enabling responsible AI adoption and regulatory compliance. |
| 2026-06-27 2026 | MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension advanced 6 min read RCE | Tool that exploits a critical vulnerability in Amazon Q Developer Extension for VS Code, enabling arbitrary code execution and cloud credential theft by automatically loading MCP server configurations from malicious repositories without user consent. This vulnerability, similar to others found in AI coding tools, allowed attackers to compromise developer environments and cloud infrastructure, highlighting systemic risks in MCP auto-execution and the need for explicit consent before executing code. → wiz.io |
| 2026-06-26 2026 | Wiz at Google Next: Machine-Speed Defense for Any Cloud, Any Platform, Any AI news 8 min read | Library for securing AI applications, the Wiz AI Application Protection Platform (AI-APP) provides machine-speed defense across cloud and AI environments. It extends coverage to AI-generated code, AI and agent studios, and multi-cloud PaaS platforms like Databricks and AWS Agentcore. New capabilities include Wiz AI-BOM for inventorying AI frameworks and IDE extensions, Secure Guardrails to inject organizational security policies into AI-generated code, and the Red Agent for proactive vulnerability discovery by simulating intelligent attackers. The platform also integrates with a Technology Intel Center for centralized updates on cloud and AI tech providers. → wiz.io |
| 2026-06-26 2026 | Red Agent and Claude Opus: Securing Production Targets at Scale news 3 min read | Tool using Anthropic Claude Opus to uncover exploitable risks at scale by analyzing application logic, chaining attack steps, and adapting patterns to real-time responses. Wiz Red Agent scans over 150,000 production web applications and APIs weekly, processing 115 billion+ tokens to find thousands of high and critical risks with zero false positives, leveraging Wiz Security Graph context for impact assessment and remediation. → wiz.io |
| 2026-06-26 2026 | NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence news 8 min read | Library for multi-source vulnerability intelligence, offering enriched data beyond the NVD's new risk-based triage model. It integrates data from diverse sources, including in-house research, threat intelligence, community contributions, and academic collaborations, further validated by AI-assisted human analysts. This approach provides critical clarity on vulnerable package versions, available fixes, cross-source risk assessments, and prioritization workflows, enabling organizations to make informed decisions even as the NVD narrows its enrichment scope for CVEs not in CISA's KEV Catalog or specific to U.S. federal government software. → snyk.io |
| 2026-06-26 2026 | [tl;dr sec] #334 - Thinkst's Package Proxy, OpenAI Daybreak, AI Agents & Canaries news 10 min read Supply Chain | Library for preventing supply chain attacks, Thinkst's Package Proxy redirects package manager requests through Cloudflare Workers to enforce security policies, including minimum package age and upload mechanism regression checks, without requiring client-side software. It also addresses vulnerabilities found in package managers, such as path traversal, argument injection, and unsafe deserialization, as well as registry-side issues like authorization bypass and account takeover. → tldrsec.com |
| 2026-06-25 2026 | Choosing an AI-SPM tool: The four questions every security organization needs to ask beginner 4 min read | Tool for AI Security Posture Management (AI-SPM) that guides organizations in adopting AI responsibly. It prompts security teams to ask four critical questions: identifying all AI services and technologies in use, understanding associated risks (like data leakage evidenced by the 38TB exposed by Microsoft AI researchers, or model poisoning), prioritizing these risks based on context (e.g., a root-enabled notebook instance with sensitive training data), and detecting misuse within AI pipelines in near real-time. This approach enables secure AI innovation by providing visibility into the AI Bill of Materials (AI-BOM) and extending attack path analysis to AI. → wiz.io |
| 2026-06-25 2026 | Wiz extends its AI-SPM offering to OpenAI platform news 5 min read | Library for AI Security Posture Management (AI-SPM) that extends coverage to the OpenAI platform via a new SaaS connector. This enables organizations to detect and mitigate risks within their OpenAI environments, including sensitive data in training datasets and misconfigurations. Wiz correlates OpenAI risks with cloud context, offering attack path analysis to prevent breaches from cloud infrastructure to AI models and vice-versa, providing visibility into AI-BOMs, users, and training data on the Wiz Security Graph. → wiz.io |
| 2026-06-25 2026 | Wiz Research presents its latest report: “State of AI in the Cloud 2024” news 3 min read | Report analyzing the state of AI in cloud environments, detailing key findings on the usage of generative AI and machine learning services. Over 70% of organizations now use managed AI services, with Azure OpenAI leading adoption and experiencing significant growth. While many organizations are experimenting, only 10% are heavy users, potentially due to cost and quotas. The report emphasizes building visibility into AI usage and fostering a culture of security ownership to manage the evolving attack surface. → wiz.io |
| 2026-06-25 2026 | Claude Enterprise Meets the Security Graph: Wiz Integrates with Anthropic's Compliance API news 3 min read | Integration of Wiz with Anthropic's Claude Compliance API brings AI tool usage into the Wiz Security Graph. This feature discovers Claude Enterprise organizations, users, and their role bindings, alongside projects, attachments, chat counts, privacy settings, and ownership. It maps AI datasets connected to Claude projects, enabling security, compliance, and platform engineering teams to visualize relationships between AI resources, users, and the broader cloud environment for unified visibility and governance. → wiz.io |
| 2026-06-25 2026 | Defending at Machine-Speed: Building AI Threat Readiness with Wiz beginner 7 min read | Library for operationalizing AI threat readiness, focusing on speed and visibility. It utilizes Wiz ASM to reduce attack surface by detecting exploitable risk, the AI-powered Red Agent to autonomously discover logic-driven vulnerabilities at machine speed, and the Green Agent to automate remediation with code-to-cloud mapping and ownership context. Wiz Workflows scale response processes, while Wiz guardrails and WizOS implement prevention controls across the SDLC, including context-aware AI-SAST for deep code analysis and integration with external AI scanners like Gemini and Mythos. → wiz.io |
| 2026-06-25 2026 | AI Threat Readiness Pillar 4: Detect and contain threats in real-time beginner 10 min read | Library for real-time threat detection and containment, addressing AI-accelerated attacks and expanded attack surfaces. It emphasizes comprehensive telemetry across cloud control plane, AI workloads, and model input/output to provide full-context visibility. The library leverages AI for automated investigation and containment playbooks, crucial for modern security operations challenged by prompt injection, supply chain risks, and abuse of cloud-native AI services like Amazon Bedrock and Azure AI. → wiz.io |
| 2026-06-25 2026 | How AI Is Rewriting the SecOps Playbook beginner 7 min read | Library for understanding AI's impact on SecOps, emphasizing the shift from reactive to proactive security. It highlights the necessity of pre-existing, continuously updated environmental context for workloads and interactions across model, workload, and cloud layers. This approach enables rapid, AI-assisted incident response by correlating disparate signals and determining if behaviors deviate from intended functionality, providing defenders with a crucial advantage over attackers. → wiz.io |
| 2026-06-25 2026 | Identiverse 2026: The Challenges Of Solving Identity For AI Agents At Scale beginner 11 min read AuthZ | Reference from Identiverse 2026 highlights challenges in solving identity for AI agents at scale, discussing ownership, lifecycle management, and least privilege. Sessions addressed risks like unauthorized agent decisions, the need for agent identity before production, and secure credential management, emphasizing techniques such as intent-scoped, just-in-time access and eliminating secrets via SPIFFE-based attestation and per-workflow OIDC tokens. The discussion also noted how AI coding tools can inadvertently teach developers insecure practices, like using static credentials, and stressed the importance of architectural decisions to enforce secure paths and provenance tracking in agent-to-agent interactions. → blog.gitguardian.com |
| 2026-06-25 2026 | How JFrog and NanoClaw are Bringing Software Supply Chain Security to the Age of Autonomous AI beginner 4 min read Supply Chain | Library for securing autonomous AI agents, integrating the JFrog Platform with NanoClaw. This solution routes agent requests for packages, CLI tools, and MCP servers through JFrog registries in real-time. JFrog Curation evaluates requests against security policies, blocking compromised dependencies like those with critical CVEs, and enabling agents to automatically install clean alternatives via JFrog Catalog, ensuring continuous workflow with guided self-correction. → jfrog.com |
| 2026-06-25 2026 | AI Finds Vulnerabilities. Security Experts Find Impact. beginner 10 min read Bug Bounty | Walkthrough of a web application security assessment detailing the interplay between AI and human expertise. AI, primarily Claude, accelerated tasks like tracing data flows and identifying entry points across approximately 30 source repositories, handling roughly 80% of the initial analysis. However, human judgment was crucial for validating findings, determining impact, and chaining vulnerabilities, as demonstrated in a phone-verification bypass that, when combined with reusable invitation codes, led to unlimited account creation. The assessment also highlighted AI's potential for providing confidently incorrect explanations, such as a plausible but impossible reasoning for a timing-based bug related to Redis caching, underscoring the continued necessity of expert analysis to uncover true security risks. → bishopfox.com |
| 2026-06-24 2026 | Biden's AI Executive Order: What it says, and what it means for security teams beginner 11 min read | Analysis of Executive Order 14110 provides security teams with practical implications for AI development and deployment. Key directives include establishing rigorous NIST standards for red-team testing, prioritizing privacy-preserving techniques, and ensuring equitable AI use in the workforce. For the healthcare sector, it mandates safety programs and responsible AI development. The order also emphasizes fairness in criminal justice applications of AI, impacting areas like risk assessments and predictive policing. → wiz.io |
| 2026-06-24 2026 | The New Security Control Point: Governing AI Agents Inside the Execution Loop intermediate 7 min read | Library for governing AI agent behavior within the execution loop. It secures AI agents by observing actions before and after they occur, offering visibility into decisions made during tasks like executing shell commands, reading files, and making network requests. This session-aware approach enables detection of behavioral risks as agent workflows unfold, moving security closer to the decision point and allowing real-time governance of agent actions based on organizational policy. → snyk.io |
| 2026-06-24 2026 | What nearly 10,000 developer environments reveal about agentic development risk intermediate 8 min read Supply Chain | Analysis of nearly 10,000 developer environments reveals significant risks in agentic development, with 43% of developers using multiple AI coding tools and 50.8% employing MCP servers. These configurations, along with agent skills (used by 22.8%), introduce a new supply chain layer where prompt injection findings and malicious code patterns are already present in active tooling. Traditional AppSec controls need expansion to govern these developer environments, as risks emerge before code commitment, impacting tools like Claude, Cursor, and VS Code extensions. → snyk.io |
| 2026-06-24 2026 | Announcing Agentic Development Security (ADS) beginner 8 min read | Library for Agentic Development Security (ADS) that secures AI-driven software development by embedding security directly into workflows. It provides visibility, governance, and control over tools agents use, their actions, and generated code. ADS addresses risks from dynamic, multi-step workflows and autonomous agent behavior, moving security from post-code analysis to real-time evaluation of agent supply chains, behavior, and generated code, preventing issues like the deletion of a production database by an AI agent with improper credentials and no guardrails. → snyk.io |
| 2026-06-24 2026 | Stop Treating Coding Agent Plugins Like Settings: Introducing Agent Plugins Repositories beginner 4 min read Supply Chain | Library for managing agent plugin repositories, addressing the security risks of uncontrolled distribution channels like GitHub repos and Slack commands. It highlights that plugins are executable software with no inherent versioning, provenance, or audit trail, making them vulnerable to supply-chain attacks similar to those seen with npm packages and Docker images. The library enables signed, immutable releases, unified access control, complete audit trails, and single-copy storage for agent assets, integrating them into existing CI/CD pipelines and offering a governed alternative to Git for hosting these executable assets. → jfrog.com |
| 2026-06-24 2026 | OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat intermediate 10 min read Supply Chain | Analysis of persistent malicious skills on ClawHub reveals three distinct AI supply chain threat categories: infostealers like macOS cluw, evasion techniques involving inflated file sizes, and novel agentic threats including runtime affiliate injection and front-running for financial gain. This research identified five unblocked skills, which were subsequently reported and removed, highlighting the evolving risks in AI agent ecosystems beyond traditional software supply chain vulnerabilities. → unit42.paloaltonetworks.com |
| 2026-06-23 2026 | Assessing Automated Prompt Injection Attacks in Agentic Environments advanced 1 min read | Analysis of automated prompt injection attacks against LLM agents, adapting white-box GCG and black-box TAP methods within the AgentDojo framework. The study found black-box optimization significantly outperformed gradient-based methods, with TAP's effectiveness influenced by the attacker model's general capability and safety tuning. Task-universal attacks transferred effectively to unseen domains, but attacks optimized on smaller models did not transfer to frontier models like GPT-5, indicating a model-dependent threat. → arxiv.org |
| 2026-06-23 2026 | Wiz Enhances AI-SPM Support for Amazon Bedrock news 4 min read | Library enhancing AI-SPM support for Amazon Bedrock. This offering provides AI-BOM visibility into Amazon Bedrock custom models and fine-tuned jobs, visualizing the model, training data, and access. It includes out-of-the-box configuration rules to assess Amazon Bedrock setup and detect misconfigurations, such as the absence of customer-managed encryption keys. Additionally, it extends attack path analysis to Amazon Bedrock, correlating vulnerabilities, misconfigurations, identities, data, and secrets to prioritize critical AI risks for secure generative AI application development. → wiz.io |
| 2026-06-23 2026 | Wiz AI-SPM extends support to Microsoft Azure OpenAI Service models news 3 min read | Tool for Cloud Security Posture Management (CSPM) that extends support to Microsoft Azure OpenAI Service models. Wiz AI-SPM offers full visibility into AI pipelines and risks within Azure AI Services, including misconfiguration rules, detection of toxic combinations, and attack path analysis to identify potential lateral movement. It provides agentless inventory of all Azure AI services and technologies, allowing security teams to manage their use and map them on the Wiz Security Graph for end-to-end pipeline visibility. → wiz.io |
| 2026-06-23 2026 | Why You Need a Security Companion for AI-Generated Code beginner 8 min read | Library that emphasizes a holistic DevSecOps approach for AI-generated code, highlighting that GenAI assistants like Copilot can introduce numerous vulnerabilities, including CWE-78: OS Command Injection, CWE-330: Use of Insufficiently Random Values, and CWE-703: Improper Check or Handling of Exceptional Conditions. This library addresses the increased developer confidence in insecure AI-produced code and the critical need for faster, more intuitive security solutions to complement AI-driven development, ensuring secure coding practices without hindering productivity. → snyk.io |
| 2026-06-23 2026 | Introducing Patch the Planet beginner 6 min read Bug Bounty | Library for collaborative open-source project hardening; it leverages frontier AI models like GPT-5.5-Cyber to discover vulnerabilities, with human experts orchestrating and triaging findings. This initiative, Patch the Planet, has addressed 19 projects including cURL, pyca, Sigstore, and Python, resulting in hundreds of bugs found and over 64 pull requests submitted. Patches extend beyond bug fixes to include new tests, fuzzing harnesses, CI security scanning, and supply-chain tooling, as demonstrated by work on python.org with zizmor integration and correctness fixes in RustCrypto. → blog.trailofbits.com |
| 2026-06-22 2026 | OrcaRouter Releases AI Threat Report 2026 and Makes Its Security Controls Free Amid Rise in Prompt-Injection Attacks news 7 min read | Report detailing the rise of prompt-injection attacks as the top risk to LLM applications, with OrcaRouter Security Research releasing its agent Firewall and input/output Guardrails for free. The report highlights incidents like EchoLeak (CVE-2025-32711) and chained CVE-2026-39987 exploitation, noting traditional security tools' inability to address these architectural vulnerabilities. OrcaRouter's gateway-level controls provide six layers of security, including scoped identity, input/output guardrails, and an action firewall, to mitigate risks across content and action planes, and align with upcoming regulations like the EU AI Act. |
| 2026-06-22 2026 | Improve MTTR with Wiz’s AI-powered remediation guidance using Microsoft Azure OpenAI service news 4 min read | Library that leverages Azure OpenAI Service for AI-generated remediation guidance. This feature enhances attack path analysis by correlating risks from the Wiz Security Graph and then uses GenAI models to provide tailored, copy-pasteable remediation steps for various environments including CLI, Terraform, and CloudFormation. This aims to significantly reduce Mean Time to Remediate (MTTR) and makes security more accessible to non-security teams. → wiz.io |
| 2026-06-22 2026 | Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations news 13 min read | Writeup of AI-as-a-Service infrastructure risks, detailing how Wiz Research collaborated with Hugging Face to address vulnerabilities. The analysis highlights shared inference infrastructure takeover via malicious, pickle-serialized models and potential CI/CD pipeline compromise through malicious AI applications. These findings underscore the critical need for robust tenant separation and security practices within rapidly growing AI platforms to protect sensitive customer data and models from cross-tenant attacks. → wiz.io |