Digests

From fast food to frameworks, this week highlights the widening gap in AI security maturity. A massive breach at McDonald’s AI hiring platform shows how basic security oversights—like hardcoded credentials and IDOR flaws—can still devastate modern AI infrastructure. With over 64 million applicant records exposed via a third-party chatbot, the ...

AI systems are scaling fast — and so are the risks. This month’s digest highlights urgent developments shaping the future of GenAI security. From SANS and OWASP’s landmark partnership to define standard AI security controls, to Accenture’s warning that most enterprises lack foundational AI defenses, the message is clear: security ...

This week’s digest shows how fast the threat landscape around LLMs is shifting. Researchers have now found malware samples embedding prompt injection attacks directly into their payloads—marking the first real-world attempt to evade AI-powered analysis tools. Meanwhile, cybercriminals are offering jailbroken versions of Grok and Mixtral for phishing and malware ...

This week’s digest exposes how attackers exploit AI agents through prompt injection, jailbreak public APIs to revive malicious models, and compromise developer tools at the supply chain level. Multiple incidents—like the Asana data leak and the Atlassian exploit—stem from insecure use of the Model Context Protocol (MCP), a rising standard ...