Home | Secure Prompt

This website uses cookies

Read our Privacy policy and Terms of use for more information.

Secure Prompt

The authoritative newsletter on AI security, threats, and defense frameworks.

Written by

Secure Prompt

Featured Posts

Signal Report #006 - The streak we called reliable just broke. Here's what that taught us.

Jul 1, 2026

•

8 min read

Signal Report #006 - The streak we called reliable just broke. Here's what that taught us.

For three weeks the consumer-compromise surface was the most reliable pattern in our graph. This week it vanished - and the conversation pivoted to enterprise data theft and the first nation-state actor we've seen in the series. Plus: a two-part prediction that split down the middle.

Secure Prompt Team

Signal Report #005 - The conversation moved to Washington. The risk didn't.

Jun 24, 2026

•

7 min read

Signal Report #005 - The conversation moved to Washington. The risk didn't.

This week the AI-security discourse reorganized around governance and policy - while the actual exploitable risk kept climbing in silence. Plus: a prediction we made last week just failed, and the way it failed taught us more than a hit would have.

Secure Prompt Team

Threat Wire #005: The AI agent is the intrusion now

Jun 22, 2026

•

5 min read

Threat Wire #005: The AI agent is the intrusion now

One click in Copilot exfiltrates your inbox. A poisoned web page makes an AI agent run code on its own host. A hijacked npm org backdoors AI-framework packages. The week the agent layer became the attack surface.

Secure Prompt Team

Signal Report #004 - The gap nobody's bridging - until the government tried

Jun 17, 2026

•

6 min read

Signal Report #004 - The gap nobody's bridging - until the government tried

This week every structural blind spot in AI security shared one disconnected endpoint: the global stakes. The discourse won't connect macro AI risk to concrete failure - so the government did it by force. Plus: a prediction we called five weeks ago just landed.

Secure Prompt Team

Threat Wire #004: Opening a repo is now the exploit

Jun 15, 2026

•

4 min read

Threat Wire #004: Opening a repo is now the exploit

The Miasma/Hades worm hijacks four AI coding tools with one commit - no install required. LiteLLM hits CISA's KEV under active ransomware attack. And a NIST proof says no guardrail set can ever block every jailbreak.

Secure Prompt Team

Signal Report #003 - The orphan moved - what week-over-week graph analysis just caught

Jun 10, 2026

•

5 min read

Signal Report #003 - The orphan moved - what week-over-week graph analysis just caught

Last week's structural blind spot didn't close. It jumped platforms - Apple to Meta - in seven days. Plus: we score our first prediction, and we got it wrong.

Secure Prompt Team

Threat Wire #003: MCP became the attack surface this week

Jun 8, 2026

•

4 min read

Threat Wire #003: MCP became the attack surface this week

A HuggingFace RCE that defeats trust_remote_code. Google's MCP connector hijacked via CORS. 770+ exploitable flaws across 19,000 MCP servers. The protocol everyone rushed to adopt is the soft underbelly.

Secure Prompt Team

Signal Report #002 - The one AI bug actually being exploited is hiding at the gateway

Jun 3, 2026

•

5 min read

Signal Report #002 - The one AI bug actually being exploited is hiding at the gateway

9 clusters, one orphan - the surface users actually touch is walled off from everything securing it, and a KEV-listed gateway bug proves the point.

Secure Prompt Team

Threat Wire #002: The week trust boundaries collapsed across the AI stack

Jun 1, 2026

•

3 min read

Threat Wire #002: The week trust boundaries collapsed across the AI stack

Starlette auth bypass hits vLLM, LiteLLM, and MCP gateways. SymJack lands six AI coding agents. First LLM-agent-driven intrusion captured in production.

Secure Prompt Team

Signal Report #001 - Why agentic AI security isn't seeing the supply chain attacks

May 27, 2026

•

4 min read

Signal Report #001 - Why agentic AI security isn't seeing the supply chain attacks

Network analysis of this week's AI security discourse reveals a structural blind spot - and the EPSS top-50 confirms it.

Secure Prompt Team

Threat Wire #001: The AI supply chain just had its worst week of 2026

May 25, 2026

•

3 min read

Threat Wire #001: The AI supply chain just had its worst week of 2026

TeamPCP. OpenAI. TrustFall. ChromaDB. Five critical AI security stories in one week.

Secure Prompt Team

Newsletter Issue #12

Jan 30, 2026

•

13 min read

Newsletter Issue #12

I Built My Own AI Agent This Week. Here's What I Learned (The Hard Way).

Secure Prompt Team

2025 AI Security Year in Review

Jan 9, 2026

•

2 min read

2025 AI Security Year in Review

The AI security incidents, vulnerabilities, research, and regulations that defined 2025 - curated in one place.

Secure Prompt Team

Newsletter Issue #11

Dec 24, 2025

•

4 min read

Newsletter Issue #11

A year-defining week for AI security, a thank-you to our first subscribers, and a short holiday pause before we return in January.

Secure Prompt Team

Special Issue

Nov 19, 2025

•

6 min read

Special Issue

This week’s Secure Prompt: AI-Orchestrated Cyber Espionage: Inside GTG-1002.

Secure Prompt Team

Newsletter Issue #1

Sep 16, 2025

•

10 min read

Newsletter Issue #1

AI Security Shakeups: M&A moves, active threats, and a critical LLM vulnerability.

Secure Prompt Team

Latest Posts

Threat Wire #007: Your coding agent is the soft target now

Jul 13, 2026

•

4 min read

Threat Wire #007: Your coding agent is the soft target now

A symlink trick turns six AI coding assistants into SSH-key writers. China tells developers to uninstall Claude Code. A GitHub agent leaks private repos to a public issue. And the agent's own security review runs the attacker's code. The week the AI dev toolchain became the attack surface.

Secure Prompt Team

Signal Report #007 - The malware caught up to the conversation. The conversation didn't notice.

Jul 8, 2026

•

6 min read

Signal Report #007 - The malware caught up to the conversation. The conversation didn't notice.

The jailbreak talk and the prompt-injection malware now live in the same graph - and never touch. Plus: 2 open predictions resolved - 1 clean hit, 1 disclosed judgment call.

Secure Prompt Team

Threat Wire #006: The malware is gaslighting your AI now

Jul 6, 2026

•

3 min read

Threat Wire #006: The malware is gaslighting your AI now

Malware that gaslights the AI analyzing it. Six agentic browsers brainwashed out of their guardrails. A CVSS 9.8 prompt-injection escape in Cursor. And the largest alleged model-distillation campaign yet. The weeks the AI became the target.

Secure Prompt Team

Archive

Threat Wire #007: Your coding agent is the soft target now

Jul 13, 2026

•

4 min read

Threat Wire #007: Your coding agent is the soft target now

A symlink trick turns six AI coding assistants into SSH-key writers. China tells developers to uninstall Claude Code. A GitHub agent leaks private repos to a public issue. And the agent's own security review runs the attacker's code. The week the AI dev toolchain became the attack surface.

Secure Prompt Team

Signal Report #007 - The malware caught up to the conversation. The conversation didn't notice.

Jul 8, 2026

•

6 min read

Signal Report #007 - The malware caught up to the conversation. The conversation didn't notice.

The jailbreak talk and the prompt-injection malware now live in the same graph - and never touch. Plus: 2 open predictions resolved - 1 clean hit, 1 disclosed judgment call.

Secure Prompt Team

Threat Wire #006: The malware is gaslighting your AI now

Jul 6, 2026

•

3 min read

Threat Wire #006: The malware is gaslighting your AI now

Malware that gaslights the AI analyzing it. Six agentic browsers brainwashed out of their guardrails. A CVSS 9.8 prompt-injection escape in Cursor. And the largest alleged model-distillation campaign yet. The weeks the AI became the target.

Secure Prompt Team

Signal Report #006 - The streak we called reliable just broke. Here's what that taught us.

Jul 1, 2026

•

8 min read

Signal Report #006 - The streak we called reliable just broke. Here's what that taught us.

For three weeks the consumer-compromise surface was the most reliable pattern in our graph. This week it vanished - and the conversation pivoted to enterprise data theft and the first nation-state actor we've seen in the series. Plus: a two-part prediction that split down the middle.

Secure Prompt Team

Signal Report #005 - The conversation moved to Washington. The risk didn't.

Jun 24, 2026

•

7 min read

Signal Report #005 - The conversation moved to Washington. The risk didn't.

This week the AI-security discourse reorganized around governance and policy - while the actual exploitable risk kept climbing in silence. Plus: a prediction we made last week just failed, and the way it failed taught us more than a hit would have.

Secure Prompt Team

Threat Wire #005: The AI agent is the intrusion now

Jun 22, 2026

•

5 min read

Threat Wire #005: The AI agent is the intrusion now

One click in Copilot exfiltrates your inbox. A poisoned web page makes an AI agent run code on its own host. A hijacked npm org backdoors AI-framework packages. The week the agent layer became the attack surface.

Secure Prompt Team

Signal Report #004 - The gap nobody's bridging - until the government tried

Jun 17, 2026

•

6 min read

Signal Report #004 - The gap nobody's bridging - until the government tried

This week every structural blind spot in AI security shared one disconnected endpoint: the global stakes. The discourse won't connect macro AI risk to concrete failure - so the government did it by force. Plus: a prediction we called five weeks ago just landed.

Secure Prompt Team

Threat Wire #004: Opening a repo is now the exploit

Jun 15, 2026

•

4 min read

Threat Wire #004: Opening a repo is now the exploit

The Miasma/Hades worm hijacks four AI coding tools with one commit - no install required. LiteLLM hits CISA's KEV under active ransomware attack. And a NIST proof says no guardrail set can ever block every jailbreak.

Secure Prompt Team

Signal Report #003 - The orphan moved - what week-over-week graph analysis just caught

Jun 10, 2026

•

5 min read

Signal Report #003 - The orphan moved - what week-over-week graph analysis just caught

Last week's structural blind spot didn't close. It jumped platforms - Apple to Meta - in seven days. Plus: we score our first prediction, and we got it wrong.

Secure Prompt Team