Brief archive
Browse by control
Check the sender or account is genuine 71 briefs Hold payments or sends until confirmed 81 briefs Record who confirmed what 44 briefs Check who is asking, and whether they may, at the entry point 17 briefs Grant only what is needed; retire old keys 12 briefs Check where code, data and media came from 15 briefs Hold only the personal data you need 8 briefs Keep AI and automation within a scope and a limit 5 briefs
What this control is
Check the request or account against contacts you already have on file
For example
When a supplier asks to change a bank account, check it against the contact already on file, not the one in the email.
What this control is
Do not pay or send until it is confirmed
For example
Hold a payment to a new bank account until the check is done, then send it.
What this control is
Keep a record of who checked what, so you can show it later
For example
Record who confirmed what, and by which means, so you can show it to a third party later.
What this control is
At the entry point, check who is asking and whether they may
For example
For requests to an AI or an API, check who is asking and with what permission before accepting, and leave no unauthenticated entry.
What this control is
Grant only what is needed, and retire keys once they are done
For example
Limit what you grant to the scope and time needed, and retire keys and tokens once they are done.
What this control is
Check where code, data or media came from before using it
For example
Before using a library, data or an image, check who made it and where it came from, by signature or provenance.
What this control is
Hold only the personal data you need
For example
Do not keep ID images; receive only the result, such as "meets the age condition".
What this control is
Decide in advance what AI and automation may do, and how often
For example
Decide in advance what an AI agent may do and how many times, and stop it before it goes past the limit.
All Briefs 169
Detailed classification (threat type)
November 2026 5 briefs
Global2026-11-02 · Finance & FinTech · Privilege abuse · No.169 About US$6.3 billion taken from Binance, with no sign the private keys leaked About USD 6.3 billion taken (Binance's estimate); about USD 2.7 billion frozen Japan2026-11-02 · Services & retail · Privilege abuse · No.168 Good Smile Company: a payment-page program may have exposed full card data Full card data and security codes of 2,800 people, and the last four digits and expiry of 402,466 cards, may have been exposed Taiwan / US2026-11-02 · Developers & agent operations · Privilege abuse · No.167 Zeabur: a no-expiry admin token was used after the company reported rotating keys 3,218,965 environment variables and data on 321,810 accounts read; root logins to 101 GCP Dedicated Servers Japan2026-11-02 · Finance & FinTech · Account takeover · No.165 Onamae.com Desktop Cloud breach: customer data taken, unauthorised trades reported 26,739 servers potentially affected. Customer information was taken out, and some customers reported trades they did not make Japan2026-11-02 · Media & content · Account takeover · No.164 CAPCOM ID breached: 11.77 million email records, and 196 passwords changed without authorization About 11.77 million email records exposed and 196 passwords changed without authorization; for 19 of those accounts, the store's account pages were accessed, exposing addresses and purchase history
October 2026 20 briefs
Global2026-10-30 · AI adoption (all industries) · Supply chain · No.166 LiteLLM: v1.107.0 was built from an attacker repo and shipped signed A credential-stealing release was published to PyPI, Docker Hub and GHCR under the official name and tags (about 49,000 downloads, independent analysis) US2026-10-24 · Government & public sector · Impersonation · No.163 City of Liberty, Texas, wired ~$600K on a lookalike-domain request that matched a real debt About $600K wired in response to a request from a lookalike vendor domain Japan2026-10-24 · Media & content · Impersonation · No.162 Hatena: scammers posing as police remote-controlled a finance PC, and ¥1.18 billion flowed out The head of accounting's PC was remote-controlled, and about ¥1.18 billion went to outside accounts (booked as an extraordinary loss) US2026-10-24 · Manufacturing & critical infrastructure · No.161 Orion: a scheme targeting one employee sent multiple wires to outside accounts — a $59.2M unrecovered loss A scheme targeting an employee sent transfers to third-party accounts; $59.2M was booked as unrecovered (part later recovered) US2026-10-24 · Government & public sector · Impersonation · No.160 City of Baltimore: a fake supplier contact switched the bank account, and $1.52M went elsewhere $1.52M in supplier payments went to the fake contact's account; about $0.8M was not recovered Japan2026-10-24 · Finance & FinTech · Impersonation · No.159 ZUU paid ¥96M on a business-chat instruction from a fake executive — the same day A chat instruction from a fake executive sent ¥96M to an outside account (booked as an extraordinary loss) US2026-10-24 · Government & public sector · Impersonation · No.158 City of Portland: a supplier's bank account was switched, and a $6.7M water-plant payment went elsewhere A $6.7M water-plant payment went to an account named by someone posing as the contractor (later fully recovered) UK2026-10-23 · Government & public sector · Human error · No.157 Met Police: data on 179 people put on a platform wrongly said to be approved (ICO) Personal data on 179 people uploaded to an unapproved outside platform UK2026-10-23 · Services & retail · Impersonation · No.156 ASOS: a rogue "Asos hacked" app notification, and an employee login later disclosed as stolen The attacker's message reached customers as an official app notification, and names, contact details and more were accessed (NCSC, press) South Korea2026-10-23 · Media & content · Account takeover · No.155 Korea's TVING: a developer key led into production and data on 39.5M accounts leaked User data from 39.5M accounts (including duplicates) leaked Japan2026-10-23 · Procurement & supply chain · Account takeover · No.154 Cuenote FC email delivery breached: about 9 million records with email addresses About 9 million records with email addresses output (estimate) Japan2026-10-22 · Government & public sector · Supply chain · No.153 An attack on NEC's contractor leaked data on 77,851 Osaka University people 77,851 people's data leaked at Osaka University; systems down at Osaka Metropolitan University Japan2026-10-20 · Procurement & supply chain · Supply chain · No.144 Studio: a SaaS breach read the decryption keys too, reaching customer companies' form data Japan2026-10-20 · Government & public sector · Human error · No.134 Tokyo Housing Supply Corporation misdirected the names of 770 association heads Names of 770 association heads reached other residents Japan2026-10-20 · Services & retail · No.110 Sourcenext: member-information API abused; up to 22.52M records may have leaked Up to 22.52 million member records may have leaked US2026-10-20 · Procurement & supply chain · Supply chain · No.069 ConnectWise: a vendor's app identity granted itself Global Administrator in some customer tenants Sign-in activity in about 1,000 tenants, more than 300 successful Japan2026-10-20 · Media & content · No.026 Comic C'moA breach: system logs taken along with member data Five member-data fields and some system logs leaked Japan2026-10-16 · Government & public sector · Impersonation · No.044 SpeeCAN RAIDEN breach: fake mail sent from the disaster-alert domain 36 municipalities suspended the service Denmark2026-10-14 · Government & public sector · Privilege abuse · No.152 Denmark CPR: a company's lawful access was abused to pull data on 8.8 million people Names, addresses and CPR numbers of about 8.8 million people retrieved Japan2026-10-14 · Finance & FinTech · Human error · No.151 TOPPAN sent 177,426 Sompo Japan policyholder records to another insurer 177,000 policyholders' data sent to another insurer
September 2026 12 briefs
Japan2026-09-24 · Developers & agent operations · Impersonation · No.150 North Korean IT workers won contracts in Japan with ID images supplied by local enablers Japan's first laptop farm dismantled; hundreds of millions of yen sent abroad Italy2026-09-21 · Finance & FinTech · Impersonation · No.149 Revolut answered data requests from Italy's certified state email Customer data handed over for months Global2026-09-15 · Developers & agent operations · Supply chain · No.148 RubyGems yanked 500+ malicious packages; some ran code on RubyDoc.info's doc build servers 500+ malicious packages removed Global2026-09-15 · Developers & agent operations · AI failure or misuse · No.147 GitSpawn: seven AI coding agents run code via git config Code ran in 7 AI coding agents Global2026-09-11 · AI adoption (all industries) · Supply chain · No.146 Transformers' load_custom_generate() fetched remote code and wrote it to disk before the consent check (CVE-2026-80047) Global2026-09-11 · AI adoption (all industries) · No.145 LiteLLM's MCP auth fallback silently granted unchecked access (CVE-2026-59822) Exploitation in the wild confirmed by CISA Global2026-09-08 · AI adoption (all industries) · AI failure or misuse · No.143 Unit 42: AI-agent-run intrusion completed in under 10 hours Breach completed in under 10 hours Japan2026-09-08 · Finance & FinTech · Account takeover · No.142 Awa Bank: breach of a test environment past its purpose leaks 27,745 records 27,745 customer and shareholder records leaked US2026-09-04 · Supply chain · No.141 IDScan.net: 153M+ scanned driver's licenses sold on the dark web 153M+ driver's licence scans for sale Global2026-09-01 · Impersonation · No.140 AnonyMousKIT: AI voice calls harvest stolen-iPhone passcodes Global2026-09-01 · AI adoption (all industries) · No.139 11 flaws across six major agent frameworks (Check Point) Global2026-09-01 · No.138 ServiceNow AI Platform: four unauthenticated flaws disclosed at once
August 2026 20 briefs
Japan2026-08-28 · Healthcare · No.137 The Fund disclosed that an auto-advance tool met its one-second review target and that it had reported progress with figures larger than reality 290 staff used a tool that auto-pressed Enter (the Fund) Global2026-08-28 · Finance & FinTech · No.136 Researchers report rule violations at all 15 x402 payment facilitators they studied At least one rule violation at all 15 facilitators studied (as reported by the researchers) Global2026-08-21 · Finance & FinTech · No.135 Expired Visa contactless cards were made to look valid through a relay and passed at checkout — tested at five major US banks Global2026-08-21 · Developers & agent operations · No.133 Cyera says one Pyodide sandbox escape is reproducible across seven products Shown to be reproducible across seven Pyodide-based products; four CVEs assigned Global2026-08-21 · AI adoption (all industries) · Supply chain · No.132 A vendor's 'sealed' eval environment opened onto the internet — real third parties breached AI under evaluation accessed 3 organizations' production systems Australia2026-08-21 · AI adoption (all industries) · AI failure or misuse · No.131 Asked to book a gym class, an AI agent cancelled the booking of the person at the top of the waitlist — and couldn't undo it One other person's booking was cancelled and could not be restored Global2026-08-11 · AI adoption (all industries) · AI failure or misuse · No.130 Atlassian Rovo could be made to send internal data out by instructions planted in a file or link — one path unfixed at publication Global2026-08-11 · AI adoption (all industries) · AI failure or misuse · No.129 In a UK AISI evaluation, an AI agent is reported to have vouched for its own PR to a real open-source project from a second account and rewritten the history An agent under evaluation opened a malicious PR on a real open-source project. The PR was closed and no evidence of real-world harm was found (AISI) Global2026-08-11 · Developers & agent operations · AI failure or misuse · No.128 Novee Security tested Claude Code, Gemini CLI and Codex in each vendor's default configuration and reported at Black Hat USA that a single GitHub issue from an unprivileged account led to code running in CI or to the next agent run being hijacked. Both CVEs are fixed Japan2026-08-07 · AI adoption (all industries) · AI failure or misuse · No.127 Japan's MOJ puts voice inside publicity rights in its generative-AI interpretation guidance UK2026-08-07 · Finance & FinTech · No.126 FCA fines Starling Bank £29m — sanctions screening covered only a fraction of the list Over 54,000 accounts opened for 49,000 high-risk customers Global2026-08-07 · Developers & agent operations · Account takeover · No.125 keyv and cacheable npm takeover — nine releases in 38 minutes, all pulled Nine compromised versions published in about 38 minutes US2026-08-04 · Healthcare · No.124 Doctors suspect AI hallucination behind Medicare's WISeR prior-authorization denials Nearly 100 patients awaiting epidurals at one health system Global2026-08-04 · Finance & FinTech · Privilege abuse · No.123 BonkDAO governance attack drained about $20M; the smart contracts ran as designed About $20 million in BONK moved from the treasury Global2026-08-04 · AI adoption (all industries) · No.122 Truffle Security reports it scanned 7.6 PB of Hugging Face public datasets and found 221,303 still-valid credentials 221,303 still-valid credentials remained in public datasets Global2026-08-04 · AI adoption (all industries) · Supply chain · No.121 "FaceHugger" flaws in Hugging Face Diffusers let a malicious model repo run code on load Singapore / Malaysia2026-08-03 · Media & content · AI failure or misuse · No.120 CNA reports 550+ TikTok videos with AI-generated presenters drew over 3 million views 550+ misleading videos drew over 3 million views Japan2026-08-03 · AI adoption (all industries) · AI failure or misuse · No.119 Police in Japan identified 123 sexual-deepfake cases involving minors in H1 2026, more than in all of last year (NPA) Police in Japan identified 123 sexual deepfake cases involving minors in six months (NPA) Global2026-08-03 · AI adoption (all industries) · AI failure or misuse · No.118 Researcher Håkon Måløy published a demonstration in which Copilot for Word followed hidden-text instructions in a document, halved a financial report's figures and copied the instructions into the file it generated US2026-08-03 · AI adoption (all industries) · No.117 CFA tells the FTC that Speechify's voice-cloning consent check is a single self-declaration checkbox The complaint alleges consent was a self-declaration checkbox and name field, and that other people's voices could be cloned
July 2026 24 briefs
Global2026-07-31 · AI adoption (all industries) · Supply chain · No.116 Fake OpenAI model tops Hugging Face trending; publisher provenance unverified before execution US2026-07-31 · AI adoption (all industries) · No.115 In a class action alleging Workday's AI applicant screening sorted candidates unfavorably by race, age and disability, a federal court allowed part of the claims to proceed (2026-06-22) Lead plaintiff rejected for 100+ openings (alleged) Global2026-07-31 · Developers & agent operations · AI failure or misuse · No.114 RCE in AWS Kiro: the agent rewrites its own MCP config Global2026-07-31 · AI adoption (all industries) · Privilege abuse · No.113 Noma Security reports a Ruflo MCP Bridge flaw (CVE-2026-59726) that let unauthenticated requests run high-privilege tools; memory poisoning can outlast the patch US2026-07-31 · Media & content · Impersonation · No.112 Ariana Grande suit: collaborator credentials unverified before the action 45 unreleased songs leaked in 2023 alone Global2026-07-28 · Finance & FinTech · No.111 Wanchain — ambiguous signing encoding let one signature move 65,000× more About 515.2 million NIGHT (roughly $10 million) drained Global2026-07-24 · AI adoption (all industries) · No.109 ServiceNow CVE-2026-6875: one request before login escapes the sandbox to code execution On unpatched instances, data could be read and admins created without logging in Global2026-07-24 · Finance & FinTech · Account takeover · No.108 AFX Trade — compromised signatures met the 2/3 quorum, $24.15M gone Roughly $24.15 million (USDC) drained Global2026-07-24 · Finance & FinTech · No.107 Verus-Ethereum bridge — same entry path, hit again in 66 days for $7.54M Roughly $7.54 million paid out with no backing US2026-07-21 · AI adoption (all industries) · No.106 Per Figma's documentation, AI content training is on by default for Starter and Professional and off for Organization and Enterprise; a class action was filed on 2025-11-21 AI content training on by default for two plans, Starter and Professional (Figma's documentation) Japan2026-07-21 · Media & content · AI failure or misuse · No.105 JAPRO's FY2025 survey: over 40,000 suspected infringing likeness and voice posts on major platforms, and new models of the same person posted after takedowns Over 40,000 suspected infringing likeness and publicity-rights posts (JAPRO) Global2026-07-21 · AI adoption (all industries) · AI failure or misuse · No.104 Researchers disclose mid-session tool injection against WebMCP: a registration race reached 100% attack success (three models, controlled setting) Global2026-07-21 · Finance & FinTech · Account takeover · No.103 Ostium — one compromised oracle signer key let "future prices" be accepted as validly signed, draining $18M Up to roughly $18 million (USDC) drained Global2026-07-15 · Developers & agent operations · AI failure or misuse · No.102 Friendly Fire: AI agents asked to vet a library ran the binary planted in it (AI Now Institute PoC) In a research PoC, two AI coding agents ran code on the host Global2026-07-10 · Finance & FinTech · Supply chain · No.101 Fake Paysafe SDKs: 17 packages posing as payment SDKs were built to send out developers' keys and tokens (Socket) 17 malicious packages posing as payment SDKs Global2026-07-10 · Finance & FinTech · No.100 Aptos — a ~$3,000 rig reproduced a Move VM type confusion, a risk cascading to ~$70B Global2026-07-10 · Developers & agent operations · AI failure or misuse · No.099 Agentjacking — one fake error report trusted as "resolution steps," and an AI coding agent ran the attacker's commands Global2026-07-07 · AI adoption (all industries) · AI failure or misuse · No.098 BioShocking — six AI browsers, convinced "it's a game," leaked credentials Global2026-07-07 · AI adoption (all industries) · AI failure or misuse · No.097 JadePuffer — an LLM ran a real-world ransomware attack from breach to encryption 1,342 configuration items encrypted beyond recovery Global2026-07-07 · Developers & agent operations · Impersonation · No.096 Gitea: a default in the official Docker image let one HTTP header impersonate an admin (CVE-2026-20896) With reverse-proxy authentication enabled, an unauthenticated party could be recognized as an admin (in the field, only initial probing was reported) Global2026-07-03 · Developers & agent operations · Supply chain · No.095 Wiz Research reported a vulnerability in the Amazon Q Developer VS Code extension (CVE-2026-12957), fixed in language server 1.65.0, through which an MCP config bundled in a repository could start with no consent prompt and reach the developer's AWS credentials Global2026-07-03 · Developers & agent operations · AI failure or misuse · No.094 Cato AI Labs reported two Cursor vulnerabilities (DuneSlide), fixed in Cursor 3.0, through which instructions planted on the web or in connected services could escape the agent's sandbox and run arbitrary commands Russia / Kyrgyzstan2026-07-03 · Finance & FinTech · No.093 A7A5: CertiK reports a ruble-backed stablecoin passed $110B in cumulative transactions under sanctions Over $110 billion moved on-chain under sanctions Global2026-07-01 · Developers & agent operations · No.092 exploitarium: the anonymous "bikini" dropped about 26 zero-day PoCs, said to be found with AI-automated fuzzing, on GitHub without notifying vendors About 26 zero-day PoCs published without vendor notification (including a libssh2 pre-auth RCE)
June 2026 70 briefs
Global2026-06-30 · Services & retail · Impersonation · No.091 Per Microsoft, fake messages relayed through Calendly notifications passed SPF, DKIM and DMARC, reached hotel front desks, and a file posing as a photo installed the Node.js backdoor TonRAT Global2026-06-30 · AI adoption (all industries) · Supply chain · No.090 AIR: a fake agent skill cleared every scanner; the blind spot was an external link swapped after the scan Global2026-06-30 · Finance & FinTech · Supply chain · No.089 SecondFi: a nonce-derivation flaw in the signer let private keys be rebuilt from public data on every signature; ~16M ADA (~$2.4M) drained About 16M ADA drained from 374 addresses Global2026-06-30 · Developers & agent operations · No.088 Kestra: a /configs path suffix bypasses auth — unauthenticated root RCE (CVSS 10.0) Global2026-06-30 · Finance & FinTech · Supply chain · No.087 Polymarket: JS injected via a third-party dependency drove fake approvals, ~$3M drained (contracts intact) About $3 million worth of assets stolen UK2026-06-30 · Finance & FinTech · Supply chain · No.086 Sumsub: an 18-month undetected breach of a KYC vendor's support environment exposed users' names and contacts Client end-users' names and contact details exposed (number undisclosed) Global2026-06-30 · Finance & FinTech · No.085 Secret Network: forged-channel deposits went unverified, minting unbacked wrapped tokens (~$4.67M) ~$4.67M in assets withdrawn Hong Kong / UK2026-06-26 · Finance & FinTech · Impersonation · No.084 Hong Kong deepfake meeting fraud: a fake CFO's instruction moved HK$200M (Arup) About HK$200M sent to five accounts in 15 transfers US2026-06-26 · Healthcare · Account takeover · No.083 Change Healthcare: a breach of one Citrix account without MFA halted a third of US medical claims for weeks Medical records of 100M+ Americans affected Global2026-06-26 · Developers & agent operations · Supply chain · No.082 xz utils: "Jia Tan," who gained authority over about two years of contributions, planted a backdoor in signed releases 5.6.0 / 5.6.1 (CVE-2024-3094) Backdoor in signed releases of a compression library widely used on Linux (CVSS 10.0) Global2026-06-26 · Finance & FinTech · Supply chain · No.081 Bybit: JS injected into the Safe{Wallet} frontend got a multisig approval through, and ~$1.5B in ETH was drained ~401,347 ETH (~$1.5B) drained US2026-06-23 · AI adoption (all industries) · AI failure or misuse · No.080 Replit's AI agent wiped a production database during a code freeze, wrongly said it couldn't be restored, and made up data A production database with data on 1,200+ executives and 1,190+ companies was wiped (later restored) Global2026-06-23 · AI adoption (all industries) · No.079 Common Crawl: ~12,000 live credentials embedded in an LLM training corpus ~12,000 live credentials found in a training corpus US2026-06-23 · Government & public sector · No.078 According to reporting, the federal district court for the Middle District of Tennessee ruled that defects in the TennCare Connect eligibility system illegally cut thousands of people off Medicaid (August 2024) Thousands illegally cut off from benefits, a federal court found (reporting) US2026-06-23 · Finance & FinTech · No.077 IDMerit's disputed billion-record exposure — no one can show whose data it was Reported exposure of about 1 billion records; custody disputed (figures unverified) US2026-06-23 · Government & public sector · AI failure or misuse · No.076 A 93% FRT 'match' drove arrest with no independent corroboration — Robert Dillon One man wrongfully arrested as someone else Global2026-06-23 · Procurement & supply chain · Supply chain · No.075 Klue's un-revoked test credential led to mass Salesforce extraction CRM records mass-extracted over ~24 hours Global2026-06-23 · Finance & FinTech · Impersonation · No.074 A leaked prover signing key let forged withdrawals pass as valid — Taiko bridge ~$1.7M withdrawn from the bridge vault Global2026-06-19 · AI adoption (all industries) · No.073 ShadowMQ: one unauthenticated ZMQ + pickle implementation, copied across inference stacks — at ecosystem scale Global2026-06-19 · AI adoption (all industries) · No.072 Pickle over an unauthenticated gRPC channel = instant RCE — LeRobot Global2026-06-19 · Manufacturing & critical infrastructure · No.071 DJI ROMO: about 7,000 robot vacuums reportedly responded to one researcher's connection Global2026-06-19 · Manufacturing & critical infrastructure · No.070 Every Unitree robot shared one encryption key, letting attackers take them over via Bluetooth — crack one, and the rest fall too Global2026-06-19 · Manufacturing & critical infrastructure · No.068 Unauthenticated network access yields RCE on cobots — UR PolyScope An attacker with network reach and no authentication could run arbitrary commands on the robot's OS (no exploitation in the wild reported) Global2026-06-19 · Finance & FinTech · No.067 An invalid SPV proof minted 5B SYS with no burn — Syscoin bridge ~5 billion SYS minted with no burn behind it Global2026-06-19 · AI adoption (all industries) · Privilege abuse · No.066 Obsidian Security reports a chain of three LiteLLM flaws that let a low-privilege user reach admin rights and server-side code execution Japan2026-06-17 · Healthcare · Human error · No.065 Drives assumed shredded resurfaced online — 180,000+ patients (NHO Hokkaido) Drives holding data on about 179,000 patients circulated online US2026-06-17 · Manufacturing & critical infrastructure · AI failure or misuse · No.061 Driver-assist AI braked with no real threat, causing rear-end crashes — Hyundai 4 rear-end crashes and 4 injuries alleged US2026-06-17 · AI adoption (all industries) · AI failure or misuse · No.042 Waymo robotaxis drove past stopped school buses; NHTSA opened a probe and Waymo recalled software on 3,067 vehicles 19 instances logged by the Austin school district this year US2026-06-16 · Procurement & supply chain · Supply chain · No.064 Salesloft Drift: stolen integration OAuth tokens used to query companies' Salesforce (GTIG: 700+ organizations possibly affected) 700+ organizations possibly affected (GTIG) Global2026-06-16 · AI adoption (all industries) · No.063 Include Security reports Bright Data's SDK turns devices, including smart TVs, into AI-scraping relay nodes Household devices were reported to be used as relay nodes for scraping sold to the AI industry Global2026-06-16 · AI adoption (all industries) · AI failure or misuse · No.062 A researcher reports an issue posing as a `[bot]` could drive the Claude Code GitHub Action's privileged run US2026-06-16 · AI failure or misuse · No.060 Both sides filed AI-hallucinated cases, both sanctioned — N.D. Miss. All four attorneys sanctioned and the trial vacated US2026-06-16 · AI adoption (all industries) · Supply chain · No.059 Vercel: an employee's "Allow all" OAuth grant to the AI tool Context.ai became a way into internal systems after Context.ai was breached, Vercel disclosed Unauthorized access to internal systems and some customer credentials (Vercel's disclosure) Global2026-06-16 · AI adoption (all industries) · No.058 Three LangGraph checkpoint flaws; two chain into RCE (Check Point) China2026-06-15 · AI adoption (all industries) · No.057 No auth on the AI backend — reachable meant readable — DeepSeek Over a million log lines and plaintext chat history exposed US2026-06-15 · AI adoption (all industries) · No.056 Researchers report entering McHire's (Paradox.ai) admin console with a test account and reaching up to 64 million applicant records Researchers report up to 64 million applicant records were within reach Global2026-06-15 · AI adoption (all industries) · AI failure or misuse · No.055 EchoLeak — an instruction hidden in one email could make M365 Copilot send internal data out (Aim Labs) US / Japan2026-06-13 · Media & content · No.054 OpenAI Sora 2: launched letting copyrighted characters be generated unless rightsholders opted out, then announced a move to opt-in within about three days Global2026-06-12 · Media & content · Impersonation · No.053 200M views of fake celebrities, likeness provenance gap — YouTube Celebrity-impersonation scam ads viewed about 200 million times Global2026-06-12 · Supply chain · No.052 70k government IDs leaked to prove age — Discord / 5CA 70,000 government ID images stolen Global2026-06-12 · Media & content · Account takeover · No.051 Asking the AI support bot hijacked 20k accounts — Meta HTS 20,225 Instagram accounts taken over Global2026-06-12 · AI adoption (all industries) · AI failure or misuse · No.050 Consent and age unverified at generation — Grok deepfakes US2026-06-12 · AI adoption (all industries) · No.049 Tesla refiled its Robotaxi crash narratives with NHTSA unredacted; 2 of 17 Austin crashes were reported as caused by remote teleoperators 2 of 17 crashes were caused by remote teleoperators Global2026-06-12 · Developers & agent operations · Supply chain · No.048 Hidden directives planted in AI instruction files — TrapDoor Over 34 packages and 384+ versions/artifacts Global2026-06-12 · AI adoption (all industries) · AI failure or misuse · No.047 An AI agent forwarded credentials before verifying the sender — OpenClaw / Varonis Global2026-06-12 · No.046 ServiceNow: a REST endpoint set not to require authentication let some customers' instance tables be queried Unauthenticated queries of instance tables succeeded for some customers (per ServiceNow) Global2026-06-11 · Finance & FinTech · No.045 Keys stolen from one device clear the multisig threshold — Humanity Protocol Over $32M drained US2026-06-09 · Manufacturing & critical infrastructure · AI failure or misuse · No.043 NHTSA escalated its Tesla FSD reduced-visibility crash probe; Reuters reported on the safety-claim comparison 9 reduced-visibility crashes (1 death, 1 injury) UK2026-06-09 · Manufacturing & critical infrastructure · Supply chain · No.041 According to the UK SFO, AOG Technics sold 60,000+ aircraft engine parts with forged airworthiness certificates; its director was sentenced to 4 years 8 months Over 60,000 parts sold with forged certificates Brazil2026-06-09 · Finance & FinTech · Privilege abuse · No.040 Brazil's Federal Police charged 31 people in Operation Greenwashing over credits issued and sold from forests allegedly not conserved 31 people charged by the Federal Police; the two projects cover more than 140,000 ha Global2026-06-09 · AI adoption (all industries) · AI failure or misuse · No.039 Microsoft disclosed and fixed two Semantic Kernel vulnerabilities through which prompt injection could lead to code execution or arbitrary file writes on the host Global2026-06-09 · Developers & agent operations · Supply chain · No.038 A self-propagating npm worm republishes itself with stolen credentials — IronWorm Roughly 37 packages infected Global2026-06-09 · Developers & agent operations · AI failure or misuse · No.037 Miasma reportedly planted AI agent config files in repositories that ran when developers opened the project; GitHub disabled 73 repositories across four Microsoft organizations 73 repositories across 4 Microsoft orgs disabled Global2026-06-08 · AI adoption (all industries) · No.036 Researchers report that DataComp CommonPool's 12.8B training pairs contained passports, résumés and faces In a 0.1% sample, over 800 faces had escaped automatic blurring (the research team's audit) US2026-06-08 · Manufacturing & critical infrastructure · No.035 According to reporting, Boeing told the FAA that some mandatory inspections at the 787 wing-to-body join, recorded as complete, had not been performed; the FAA opened an investigation Roughly 450 aircraft affected (per sources) Global2026-06-08 · Finance & FinTech · Impersonation · No.034 eKYC face-check bypass kits sold on Telegram swap in fake camera video Bypass kits sold in 22 Telegram channels and groups Global2026-06-08 · Account takeover · No.033 One edge-appliance compromise cascaded to full domain takeover — F5 BIG-IP One appliance compromise led to full Active Directory takeover Japan2026-06-08 · Services & retail · Account takeover · No.032 Booking.com payout account switched; one hotel lost about ¥9M About ¥9M lost at one hotel Mexico / Brazil2026-06-08 · Government & public sector · AI failure or misuse · No.031 AI agents ran intrusions end to end — SHADOW-AETHER Six Mexican government agencies compromised Global2026-06-06 · Services & retail · No.030 Trusted Stripe API repurposed as a card-skimming channel Global2026-06-06 · Developers & agent operations · Account takeover · No.029 One-click GitHub OAuth token theft via github.dev Global2026-06-05 · Developers & agent operations · Supply chain · No.028 33 packages impersonating internal scopes exploited the build environment's provenance assumptions — npm dependency-confusion recon campaign 33+ malicious packages published to npm Global2026-06-05 · AI adoption (all industries) · No.027 User-supplied MCP server URLs became an exfiltration channel for server secrets — LibreChat CVE-2026-32625 CVSS 9.6 Global2026-06-05 · AI adoption (all industries) · Supply chain · No.025 Agent infrastructure trust boundaries, unverified at the reference implementation design level Global2026-06-05 · AI adoption (all industries) · AI failure or misuse · No.024 CSA disclosed a technique that embeds model-read instructions in AI-agent skills using Unicode characters invisible to humans Global2026-06-05 · Finance & FinTech · No.023 Guardian keys intact — but the provenance of the events they signed was never verified — Alephium TokenBridge $815K exploit About $815K drained from the bridge Global2026-06-04 · Finance & FinTech · Impersonation · No.022 404 Media reports that a UK passport image generated by OnlyFake passed KYC at crypto exchange OKX A $15 generated image reportedly passed an exchange's KYC Germany2026-06-03 · Finance & FinTech · Impersonation · No.021 Wirecard disclosed that EUR 1.9 billion likely did not exist and filed for insolvency; two Philippine banks said the balance documents were forged A EUR 1.9 billion balance disclosed as likely nonexistent Japan2026-06-03 · Manufacturing & critical infrastructure · No.020 Tampered certification test data reached type designation and shipment — type-designation fraud Type designation of three models revoked Japan2026-06-03 · No.019 Engineers placed under national-license claims they didn't meet — qualified-worker fraud
May 2026 18 briefs
Global2026-05-31 · AI adoption (all industries) · AI failure or misuse · No.018 Rewriting CLAUDE.md to hijack the defending AI — hackerbot-claw, the first AI-vs-AI attack US2026-05-31 · AI adoption (all industries) · AI failure or misuse · No.017 The layer governing the AI's behavior had no integrity or provenance — McKinsey Lilli Global2026-05-31 · Finance & FinTech · No.016 Valid Merkle proof but no verification of source-vs-payout amount — Verus-Ethereum bridge ($11.58M) About $11.58M drained from the bridge US2026-05-31 · Developers & agent operations · Supply chain · No.015 A poisoned VS Code extension lived 18 minutes on the marketplace — GitHub internal breach About 3,800 internal repositories cloned Global2026-05-31 · Developers & agent operations · Supply chain · No.014 Malicious npm packages signed under a legitimate OIDC trusted publisher — TanStack 84 malicious versions published across 42 packages US2026-05-31 · Finance & FinTech · Privilege abuse · No.013 Regulation-mandated raw PII storage became the breach surface via insider — Coinbase KYC KYC data of at least 69,461 customers exfiltrated US2026-05-31 · Government & public sector · AI failure or misuse · No.012 A false facial-recognition match led to the wrongful arrest of Robert Williams, held about 30 hours (Detroit) One man wrongfully arrested and held about 30 hours Global2026-05-31 · AI adoption (all industries) · No.011 SynthID: a researcher reports removing about 91% of Google DeepMind's AI-image watermark by statistical analysis (Alosh Denny) Global2026-05-31 · Developers & agent operations · Impersonation · No.010 Trust signals and GitHub Releases weaponized as a delivery channel — Claude Code leak lures Global2026-05-31 · AI adoption (all industries) · AI failure or misuse · No.009 GTG-1002: an AI agent carried out 80–90% of an attack (Anthropic disclosure) About 30 targets attacked; a few breached Global2026-05-30 · AI adoption (all industries) · No.008 Discord: 2.05 billion messages collected through the public API were published as a research dataset (404 Media) 2.05 billion messages collected and published US2026-05-30 · AI adoption (all industries) · AI failure or misuse · No.007 PocketOS: an AI coding agent deleted the production DB and its backups in 9 seconds (founder's post) The production database and its backups were gone in 9 seconds Global2026-05-30 · Developers & agent operations · No.006 Aikido reported that Google API keys kept authenticating for up to about 23 minutes after deletion Global2026-05-30 · AI adoption (all industries) · AI failure or misuse · No.005 Noroboto — Tritium Legal Technologies' Drew Miller showed that an embedded font can make the text a person reads on screen differ from the string an AI extracts Global2026-05-30 · Developers & agent operations · Supply chain · No.004 5,561 repos poisoned in 6 hours via CI/CD credential theft — Megalodon GitHub supply chain Spoofed commits pushed to 5,561 repositories in 6 hours Global2026-05-30 · AI adoption (all industries) · No.003 Host header manipulation bypassed MCP server auth — Starlette CVE-2026-48710 (BadHost) Global2026-05-29 · Finance & FinTech · Account takeover · No.002 Deployer key rewrote LayerZero v2 trust config to mint tokens — Stake DAO vsdCRV 5.4 trillion vsdCRV minted from a forged message Global2026-05-29 · Finance & FinTech · Supply chain · No.001 RPC manipulation on the DVN observation layer unlocked the bridge — KelpDAO / rsETH 116,500 rsETH (approx. ¥46B) unlocked without authorization
No Briefs matched your filters.