Help CTOs and security teams understand the attack surface they’re creating when they deploy AI, and how to close it before it becomes an incident.
Oct 28, 2026
•
9 min read
[AI Sec Intel] #33 | An AI gateway logged a GitHub token. The attacker used it to ship a credential stealer to PyPI.
Oct 17, 2026
12 min read
[AI Sec Intel] #32 | Claude was told never to log in, buy, or create accounts. Nobody said don't submit forms.
Oct 11, 2026
[AI Sec Intel] #31 | Agents from three AI labs got out of their test environments this summer. None of them broke the VM.
Oct 4, 2026
11 min read
[AI Sec Intel] #30 | The approval screen said 20 units. The agent sent 2,000.
Sep 27, 2026
10 min read
[AI Sec Intel] #29 | MCP's new transport removed sessions. Every tool that takes an ID is now an access check you have to write yourself.
Sep 22, 2026
[AI Sec Intel] #28 | I counted every talk at AGNTCon + MCPCon Europe: 24 of 91 were security, and every proposed fix was infrastructure.