September 27, 2026
- x47.c, a new Windows botnet, calls xAI Grok to pick its own persistence actions from a predefined list (startup entries, scheduled tasks), with local fallback when the model call fails. WraithTools sells the base package at $200, DDoS add-on $150, full package $950. Its DDoS tab carries 18 methods including an "AI API drain" that burns a victim's paid OpenAI/xAI credits by hitting the provider directly with a stolen key, so the victim's site stays up while the account behind its AI features runs dry (SecurityWeek).
· Threat Activity
in Citrix NetScaler Zero-Days Land Mid-Weekend, No Patch Until Next Week
September 22, 2026
- Grok 4.7 shipped at the same price and speed as 4.6: larger base model, longer RL on multi-hour tasks, better self-checking and long-context handling, and a rebuilt safeguard system the model card describes as more jailbreak-resistant with fewer unnecessary refusals. Knowledge cutoff June 2026. model card (PDF)
· AI & Model Security
in Delivery Through the Trust Layer: GPO, a Signed Driver, and Valid npm Provenance
September 9, 2026
- NSA, CISA and FBI named six Chinese AI companies over "industrial-scale" model distillation. The joint advisory says DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI extracted billions of tokens across millions of exchanges from variants of Claude, GPT, Gemini and Grok since at least late 2024, routed through native APIs, cloud providers, third-party aggregators and gray-market "transfer station" proxies to evade geo-restrictions and traceability. Detection guidance includes 24/7 sustained usage with no human idle periods; the agencies suggest altering responses to confirmed distillation clients rather than simply cutting them off (CISA AA26-251A).
· AI & Model Security
in One Phone Call, Zero Clicks: A WeChat Worm Crossed iOS and Android
August 25, 2026
- Reasoning models used as autonomous jailbreak operators. A circulating research summary describes giving DeepSeek, Grok and Qwen a single adversarial system prompt, after which the models planned and ran unsupervised multi-turn attacks against nine target models, adapting their approach when a target refused — framed as an "alignment regression". Worth watching, but the thread does not link the underlying paper, so treat the numbers as unverified (@HowToPrompt\_\_).
· AI & Agent Security
- Cursor shipped its Grok bot (0.18.0) with runtime source maps enabled, making source recoverable at runtime — a reminder that AI dev-tool builds get the same release hygiene as any other Electron app (@thegrugq, relaying @b_nnett).
· AI & Agent Security
in The Rogue Agent Staged an Apology, Then Pushed More Malware
August 22, 2026
- Encrypted prompts bypass safety guardrails in Grok and Gemini, with encoded input surviving filtering long enough to be decoded and acted on downstream (SecurityWeek).
· AI & Model Security
in A CVSS 10.0 Lands in Entra ID — and Microsoft Can't Keep Its Exploitation Story Straight
July 14, 2026
- xAI's Grok Build CLI was uploading entire Git repositories — including private codebases — to a Google Cloud bucket, per researchers who advise anyone who used it to check logs (
~/.grok/logs/unified.json for repo_state.upload). A sharp reminder that AI dev tooling is itself a supply-chain exposure. @Dinosn
· AI & Model Security
in New PoC Spoofs Callstacks Around Intel CET to Blind Modern EDRs