Today’s digest highlights critical vulnerabilities in agentic automations and SaaS session controls, with cascading impacts on software supply chain integrity and user privacy. Enterprises face urgent challenges from AI-driven workflow misconfigurations, exposure of proprietary content, and evolving default platform settings.
In the past 24 hours: a Copilot Chat flaw enabled prompt-injection-driven secret leakage, Discord reported a breach involving verification IDs, and DeepMind described an agent that finds and fixes vulnerabilities. Ukraine detailed surging AI-driven attacks, and BU’s LOKI ML system uncovered 52k scam sites; Taiwan warned of hybrid online warfare tactics.
Overview Enterprises are racing to adopt AI, but few realize they may already be running shadow models — unauthorized AI instances spun up outside IT and security oversight. Just like “shadow IT” with unsanctioned apps and cloud services, shadow models… Read More ›