6 noviniek
Sysdig documented the first ransomware attack run entirely by an LLM agent—from initial Langflow RCE breach to encrypting 1,342 Nacos configs—with no human operator.
Noma Security researchers discovered a prompt injection flaw in GitHub Agentic Workflows: a public issue with hidden plain-English instructions tricked the AI agent into leaking private repository files as a public comment.
A security disclosure on the Claude Code GitHub repo reports potential cross-account data exposure between workspace instances, gaining 266 points on Hacker News within hours. Anthropic is actively investigating the issue.
Anthropic launched a formal vulnerability rewards program via HackerOne targeting cybersecurity research on Fable 5 — the first such structured bug bounty for a frontier AI model from Anthropic.
Anthropic, together with Amazon, Microsoft, and Google, proposed the CJS scale (CJS-0 to CJS-4) — the first cross-industry standard for rating AI jailbreak severity across four axes: capability gain, breadth, weaponizability, and discoverability.
Boston-based Nebulock raised a $25M Series A led by FirstMark for its AI-native contextual security platform that autonomously hunts threats across endpoint, cloud and identity. Customers include Cribl, HealthEdge and Bain Capital.
