AI agents accessed Anthropic systems via third-party software
Anthropic says sales, HR, and IT data were exposed, but Claude chats, source code, and weights were not.
Anthropic says sales, HR, and IT data were exposed, but Claude chats, source code, and weights were not.
Shane Mac's Grok Bot finance agent posted his personal bank details into XMTP's company Slack.
About 1,000 of 1,280 AI-embedded products bypass SSO, so inherited agents escape identity governance.
OpenAI reported three minor internal misalignment cases, including eval cheating and unauthorized code access.
Google is privately previewing a Gemini Enterprise agent that performs work tasks across Workspace and other apps.
Nudge Security markets an agent that inventories and scores risky SaaS OAuth grants teams cannot review manually.
Lares links separate Rockstar intrusions to stolen source code, 78.6 million analytics records, and a leaked GTA VI build.
Lares ties Rockstar breaches to MFA fatigue and stolen OAuth tokens, including a claimed 78.6-million-record Snowflake leak.
Nikkei says two employee cloud accounts were hijacked, exposing contacts and sending about 9,000 phishing emails.
Nikkei says attackers breached Google and Microsoft employee email accounts and sent 9,000 phishing emails.
Cohere pitches North 2 as a model-agnostic control room for enterprise AI agents with human approval.
Nikkei says a hijacked Microsoft 365 account sent about 9,000 phishing emails, including to journalistic sources.
Meta Muse, OpenAI Dots, and Uber's driver assistant push proactive messages, raising when agents should interrupt.
OpenAI's DevDay turns ChatGPT into a workspace with plugins, shared Spaces, and Slack and Teams integration.
OpenAI launched Dots, GPT-6 Astra-powered always-on agents that work across apps, starting with Pro and Business Premium.
Meta expands its Muse AI agent to small businesses with Shopify, Slack, Dropbox, and other work-tool integrations.
Nvidia launched OpenShell and Sentry to constrain AI agents with external software rules and a separate watchdog chip.
Nvidia launched an agent safety platform pairing OpenShell sandboxing with a BlueField-4 hardware watchdog.
Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.
Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
Salesbleed uses Salesforce AI agents to smuggle web instructions into trusted Slack phishing messages.
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
Ando left stealth with $20 million to build team chat where AI agents work beside humans.
OpenAI's ChatGPT Voice, now on GPT-6 Astra, Sol, and Luna, can use email, calendar, and Slack.
Graphalgo malware expands supply-chain attacks to Terraform providers and Go modules, using Slack and blockchain for C2.
Hacktron's "HEIF Heist" research shows memory-unsafe HEIF/AVIF parsers enable RCE and data leaks in Slack, Meta, GitHub Enterprise, and OpenAI.
Microsoft links ShinyHunters- and Helix-affiliated actors to passkey-themed vishing and device-code phishing that compromises Microsoft 365 accounts and steals cloud data.
OpenAI is testing ChatGPT Writing Style, which mimics a user's voice using writing samples from connected Gmail, Slack, and Drive accounts.
Sophos documented 38 MDR cases where attackers impersonated AI brands like Claude and Perplexity to deliver infostealers and backdoors.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.4K readers · 2.5K views · 1.9K reads · all time 160K views