Archive

Signal Report #004 - The gap nobody's bridging - until the government tried

Signal Report #004 - The gap nobody's bridging - until the government tried

This week every structural blind spot in AI security shared one disconnected endpoint: the global stakes. The discourse won't connect macro AI risk to concrete failure - so the government did it by force. Plus: a prediction we called five weeks ago just landed.

Secure Prompt Team
Secure Prompt Team
Threat Wire #004: Opening a repo is now the exploit

Threat Wire #004: Opening a repo is now the exploit

The Miasma/Hades worm hijacks four AI coding tools with one commit - no install required. LiteLLM hits CISA's KEV under active ransomware attack. And a NIST proof says no guardrail set can ever block every jailbreak.

Secure Prompt Team
Secure Prompt Team
Signal Report #003 - The orphan moved - what week-over-week graph analysis just caught

Signal Report #003 - The orphan moved - what week-over-week graph analysis just caught

Last week's structural blind spot didn't close. It jumped platforms - Apple to Meta - in seven days. Plus: we score our first prediction, and we got it wrong.

Secure Prompt Team
Secure Prompt Team
Threat Wire #003: MCP became the attack surface this week

Threat Wire #003: MCP became the attack surface this week

A HuggingFace RCE that defeats trust_remote_code. Google's MCP connector hijacked via CORS. 770+ exploitable flaws across 19,000 MCP servers. The protocol everyone rushed to adopt is the soft underbelly.

Secure Prompt Team
Secure Prompt Team
Signal Report #002 - The one AI bug actually being exploited is hiding at the gateway

Signal Report #002 - The one AI bug actually being exploited is hiding at the gateway

9 clusters, one orphan - the surface users actually touch is walled off from everything securing it, and a KEV-listed gateway bug proves the point.

Secure Prompt Team
Secure Prompt Team
Threat Wire #002: The week trust boundaries collapsed across the AI stack

Threat Wire #002: The week trust boundaries collapsed across the AI stack

Starlette auth bypass hits vLLM, LiteLLM, and MCP gateways. SymJack lands six AI coding agents. First LLM-agent-driven intrusion captured in production.

Secure Prompt Team
Secure Prompt Team
Signal Report #001 - Why agentic AI security isn't seeing the supply chain attacks

Signal Report #001 - Why agentic AI security isn't seeing the supply chain attacks

Network analysis of this week's AI security discourse reveals a structural blind spot - and the EPSS top-50 confirms it.

Secure Prompt Team
Secure Prompt Team
Threat Wire #001: The AI supply chain just had its worst week of 2026

Threat Wire #001: The AI supply chain just had its worst week of 2026

TeamPCP. OpenAI. TrustFall. ChromaDB. Five critical AI security stories in one week.

Secure Prompt Team
Secure Prompt Team
Quick update on the Secure Prompt relaunch date

Quick update on the Secure Prompt relaunch date

Same plan, one week later. Here's why.

Something's changing with Secure Prompt (you're hearing it first)

Something's changing with Secure Prompt (you're hearing it first)

Two focused briefings. Original analysis. Public forecast accuracy. Here's what's coming.

Secure Prompt Team
Secure Prompt Team
Newsletter Issue #18

Newsletter Issue #18

This week’s Secure Prompt: OpenClaw flaws expose agent runtimes, prompt injection moves into real-world web content, and AI security shifts from model misuse to operational control.

Secure Prompt Team
Secure Prompt Team
Newsletter Issue #17

Newsletter Issue #17

This week’s Secure Prompt: AI-enabled attacks surge 89%, GenAI tools exploited across 90+ organizations, and GitHub Copilot prompt injection enables remote code execution.

Secure Prompt Team
Secure Prompt Team
FirstBack
123
Next Last