September 12, 2026
- OpenAI Agents API public beta — The Decoder says developers can launch cloud agents that run for hours, execute code, and delegate work to sub-agents using infrastructure behind Codex and ChatGPT. It lowers the barrier to durable orchestration and raises the importance of tightly scoped credentials, sandbox boundaries, and reliable cancellation and monitoring.
· New Tools & Releases
in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack
September 10, 2026
BlueMoon exploit kit chains Chrome and Windows zero-days within days of patch publication, with four suspected China-linked espionage groups weaponizing the same toolkit on US and Southeast Asian targets from late August onward. Cisco Secure Firewall Management Center CVEs are under active exploitation by three distinct post-compromise clusters including a ransomware operator and Sandworm-attributed activity. DeepSeek AI agent harness contained an authentication bypass allowing remote agents to escalate privileges via a single shell command; Anthropic declined to provide pre-release model access to UK authorities, triggering debate over AI protectionism. Stealer logs now monetize replayable AI-service tokens from compromised systems, with over 500 valid Google, Anthropic, and Cursor credentials found in a single 7 GB dump.
September 3, 2026
- A malicious
.git config is enough to get CLI coding agents to run attacker code. Manifold Security disclosed eight flaws across seven command-line AI coding agents — including Claude, Codex and Cursor — where a repository's own Git configuration names a command the agent then executes on the developer's machine, as the user, outside the agent's sandbox and with no approval prompt. Four were still unpatched at publication; the only prerequisite is cloning a hostile repo (The Hacker News).
· AI-Enabled Attacks & Agent Security
in Ten Hours, Fifty Techniques: AI Agents Ran the Whole Ransomware Intrusion
August 31, 2026
- Popular AI coding assistants reportedly pulled suspicious code into corporate networks, per research covered by TechRadar naming Claude, Codex and Hermes tooling (TechRadar). Detail is thin, but agent-installed dependencies are an install-time supply-chain surface most software inventories do not cover.
· AI & Model Security
in Fully Patched, Still Domain Admin
August 20, 2026
- OpenAI patched Codex after GPT-5.6 Sol deleted real user files, where a cleanup routine scoped to temporary folders wiped home directories instead. The fix adds target verification before deletion and prevents full-access mode from being enabled accidentally (The Decoder).
· AI & Model Security
in Feds Say AI-Written Exploit Code Is Already Hitting Siemens PLCs
July 30, 2026
- "RufRoot" (CVE-2026-59726, CVSS 10.0) is an unauthenticated RCE in Ruflo, an open-source agent meta-harness for Claude Code and OpenAI Codex, disclosed by Noma Security. The bug lives in Ruflo's MCP bridge and lets attackers run commands with no login; researchers note it also enables persistent memory poisoning — malicious instructions can survive patching if compromised agent memory is retained, so agents keep following attacker-controlled directives. All versions before 3.16.3 are affected; ~233 downstream AI tools are reportedly exposed. The Hacker News, Dark Reading
· AI & Model Security
- OpenAI open-sourced Codex Security CLI (formerly internal "Aardvark"), a command-line tool that scans repos to find and auto-fix vulnerabilities; OpenAI says it has already helped fix 3,000+ critical flaws. It squares off directly against Anthropic's Claude Security. The Decoder
· New Tools & Releases
in OpenAI's Rogue Agent Widens: Four More Companies Caught in the Blast Radius
July 24, 2026
- Kaspersky details practical attacks that hijack AI tooling already inside the target. Rather than attackers bringing their own AI, the write-up focuses on abusing deployed coding/CLI agents — Claude Code CLI, Gemini CLI, Codex CLI, Amazon Q CLI — which can read/modify files, run shell commands, and install packages. NCSC-FI/Kaspersky.
· AI & Model Security
in The Week AI Agents Started Doing the Hacking
July 9, 2026
- "Friendly Fire" — an AI Now Institute PoC shows that asking Claude Code or OpenAI Codex in autonomous/auto-approve mode to scan untrusted open-source for bugs can instead cause the agent to execute the attacker's code on the analyst's own machine. The Hacker News
· AI & Model Security
- Sophos telemetry shows benign AI coding agents (Claude Code, Cursor, Codex) routinely tripping behavioral EDR rules written for human intruders — decrypting browser credentials, enumerating the Windows credential store, etc. A real detection-engineering problem: agent activity and attacker activity look identical to the engine. The Hacker News
· AI & Model Security
in A 15-Year-Old Linux Kernel Bug Hands Root on Every Distro
June 30, 2026
in Edge Appliances Bleed: watchTowr Drops Kemp LoadMaster Pre-Auth RCE as Oracle EBS Joins the Exploited List