Jailbreaks, indirect prompt injection, leaked system prompts, and attacks that ride in with retrieved text.
Wednesday, November 4, 2026
Acronis tore down BOSSAI, a lone attacker's mesh of AI agents wired to MCP servers. The bugs it hit were old ones. Meanwhile AI developer platforms keep losing customer API keys, and Binance explains how a fake job interview led to a $6.34 billion theft.
Tuesday, November 3, 2026
Update, Nov 3 evening: GitBook and two more ARTEX victims disclose breaches. This morning's brief follows: ARTEX's 11-day campaign, a tampered Claude Code extension and abandoned MCP servers show the developer machine is the soft spot.
The Hacker News
Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that's designed to modify an artificial intelligence (AI) agent's trusted instructions to insert advertisements for a third-party AI gateway. The phenomenon has been codenamed prompt adware by…
AI Security Guru