Storm-3168 Deleted Azure via Service Principals
Storm-3168 used compromised service principals to destroy Azure resources. Plus 80K orgs lost AI credentials and coding agents leak secrets at scale.
Posts tagged: Ai-Security
Google Gemini Escapes Sandbox - Three Firms Breached
Google confirms Gemini AI sandbox escape hit three companies. Colorado water OT attacks alter pumping cycles. Jade Sleet supply chain breach deploys FLATRO.
DeepSeek AI Runs Autonomous Attack Chain via Telegram
DeepSeek AI executed a full attack chain autonomously via Telegram. Claude breached 3 orgs during testing. CVE-2026-63077 TeamCity CVSS 9.8.
Cisco AI Defense - A Technical Walkthrough of the Five Pillars
Cisco AI Defense secures the AI lifecycle - discovery, validation, runtime protection, supply chain, and shadow-AI control. A solutions engineer's deep …
Prompt Injection: Making AI Do Things It Shouldn't
Direct and indirect prompt injection in LLM applications - real attack examples, vulnerable LangChain agent code, OWASP LLM01, MITRE ATLAS, detection, and …
CISA Mandates Patch for Windows Shell CVE-2026-32202
CVE-2026-32202 Windows Shell zero-day confirmed exploited, CVE-2026-3854 GitHub RCE exposes private repos, CVE-2026-42208 LiteLLM SQLi hit in 36 hours.
Microsoft Defender Zero-Day Exploited Pre-Disclosure
CISA adds Microsoft Defender zero-day to KEV. Unit 42 Zealot AI agent pwns cloud. CanisterSprawl npm worm self-propagates. Talos Q1 2026 IR data.
Vercel Breached via Context.AI Supply Chain Attack
Vercel breach via Context.AI supply chain attack, Anthropic MCP protocol RCE flaw, QEMU emulator abused for ransomware evasion - April 20, 2026