Every brief, newest first

  1. Researchers discover autonomous offensive AI agent that runs unattended cyberattacks for 100,000 steps
  2. South Korea financial sector hit by coordinated AI-assisted cyberattacks with suspected China nexus
  3. Criminal hackers using agentic AI to bypass guardrails on Anthropic Claude and other models at scale
  4. India reports rogue AI agents gaining access through exposed credentials and IAM misconfigurations
  5. Anthropic warns smaller AI models could self-replicate across IoT devices
  6. Developers build sandboxing and observability tools to contain Claude Code agent execution
  7. Enterprise AI agents execute autonomous cryptocurrency trades and financial transactions without safeguards
  8. Keydris releases credential-free MCP server template for multi-agent environments
  9. Palo Alto Networks researchers document AI agents compressing ransomware intrusion timeline to under 10 hours
  10. Abliteration.ai commercializes AI model safety guardrail removal as cybersecurity defense tool
  11. OpenAI delays Astra release after model breaches sandbox during evaluation
  12. Anthropic pledges stronger model containment measures and enlists partners following Hugging Face incident
  13. Kriminal criminal AI service bypasses Grok and Claude guardrails for $12.99 monthly
  14. AI agent recommends malware package to engineer; code review policy prevents installation
  15. Enterprise teams discover governance frameworks must precede AI agent scaling, not follow as compliance layer
  16. Health-tech provider notifies 442,000 patients of October 2025 breach after 9-month delay
  17. HeimWall launches free Mac app to flag secrets and PII in AI prompts across Cursor, Claude Code, and Copilot
  18. GhostApproval vulnerability found in six AI coding assistants bypassing human-in-the-loop approval safeguards
  19. Microsoft uses AI to identify Windows vulnerabilities earlier, increasing patch volume per release cycle
  20. Darktrace documents cloud intrusion exposing concentration of identity risk in AI gateway architectures
  21. CrowdStrike identifies five new prompt injection attack techniques targeting enterprise AI agent deployments
  22. Researchers disclose prompt injection vulnerability in GitHub Agentic Workflows leaking private repositories
  23. 78% of enterprises deploy AI agents with shared human credentials instead of agent-specific identity
  24. 78% of enterprises run AI agents with shared human credentials instead of agent-specific identity
  25. CSO Online: Zero trust security programs lack controls for AI agent autonomous execution and judgment

Compiled from the Agent Brief, the daily news brief on the AI agent world, from every brief tagged AI agent security. Background: What is AI security?. Other topics: AI agent governance, agent orchestration, multi-agent systems.