Loading story…
Security researchers and regulators reported that frontier AI is accelerating software vulnerability discovery and compressing defenders’ response windows, prompting new warnings for critical sectors. Canada’s Office of the Superintendent of Financial Institutions (OSFI) privately told banks and insurers that advanced models, including Anthropic’s Claude Mythos, could reduce the time available to detect, assess, and contain flaws before exploitation. A separate European threat note from Cigref described exploitation timelines collapsing to seconds, broader abuse of legitimate sessions and public-facing applications, and growing concern over autonomous offensive AI activity affecting large enterprises and financial institutions.
At the same time, multiple security studies said AI is improving coverage of known bug classes but still depends on human expertise to validate impact, chain weaknesses, and uncover novel attack paths. Bishop Fox showed AI-assisted testing helped identify issues including header-based verification bypasses and SSRF, but human analysts were needed to prove exploitability and business risk. NCC Group similarly pointed to James Kettle’s request-smuggling research, including findings tied to CVE-2025-32094 and CVE-2025-49005, as evidence that high-impact discoveries still come from deep human-led research. Vendors are also addressing AI-platform risk directly: Google said it fully mitigated the Dialogflow CX “Rogue Agent” flaw, which could have enabled persistent malicious code injection and exposure of sensitive chatbot conversations across shared project environments.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
13 events from the most recent confirmed update back to the earliest known activity.
VulnCheck published analysis finding that only 14 of 1,061 publicly attributed AI-assisted vulnerability discoveries, or 1.3 percent, had been confirmed exploited in the wild. The report argued that AI currently appears to increase the volume of discovered flaws more than attackers' ability to weaponize them, and specifically challenged hype around Anthropic's Project Glasswing.
Cigref published a strategic threat-intelligence note in July 2026 describing major shifts in the cyber threat landscape, including faster exploitation, state-linked proxy activity, and growing AI weaponization. The note also referenced a July 2026 Hugging Face/OpenAI incident involving offensive evaluation activity with safeguards disabled.
Google completed mitigation of the Dialogflow CX 'Rogue Agent' issue across affected components in the month following its initial April fix. Google said no customer action was required and it had no known evidence of customer compromise.
Google issued an initial fix for the Dialogflow CX 'Rogue Agent' vulnerability in April 2026 after Varonis reported it. The issue involved Code Blocks and Playbooks permissions within shared execution environments.
Varonis Threat Labs reported the Dialogflow CX permission-boundary issue later dubbed 'Rogue Agent' to Google. The flaw could have enabled persistent malicious code injection and exposure of sensitive chatbot conversations.
James Kettle's 2025 'HTTP/1.1 Must Die' research argued that HTTP/1.1 request-boundary ambiguity is architecturally unfixable and introduced findings that affected major platforms and potentially millions of websites through CDN cache poisoning.
After reports that a jailbreak could bypass Claude Fable's safeguards, Anthropic temporarily disabled access to both Mythos and Fable. The reference says access was later restored after the restriction period.
FedScoop reports that the Trump administration imposed export controls on Anthropic's Mythos 5 in June over national security concerns, then later lifted them after Anthropic worked with the government and partners to review guardrails and add safeguards.
Microsoft internally sped up remediation after testing Anthropic's Claude Mythos Preview in Project Glasswing, where the model reportedly found vulnerabilities in Microsoft code faster than engineers could fix them, including many critical and important SharePoint bugs. Engineers were urged to reduce the backlog before the end of May out of concern that comparable AI capability could soon become available to adversaries.
On April 29, OSFI privately emailed federally regulated banks and insurers warning that frontier AI could compress the time available to detect, assess, and contain software vulnerabilities before exploitation. The email explicitly named Anthropic's Claude Mythos as an example of advanced AI increasing cyber risk emergence.
An Anthropic reference in the source set shows a publication date of 2026-04-16, but the provided content does not describe a distinct real-world security event beyond the existence of the company page.
NIST published its AI Risk Management Framework page, providing a reference point for AI risk governance material cited in the source set.
Google increased Chrome’s patching cadence to twice weekly in response to a surge in vulnerabilities being found through AI-assisted bug hunting. WIRED says two Chrome updates in June patched more bugs than the previous 23 Chrome updates combined, highlighting the rise in bug volume.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
19 references tracked. Mallory keeps watching after this page renders.
wired.com
Open sourcedarkreading.com
Open sourcearstechnica.com
Open sourcetechrepublic.com
Open sourceanthropic.com
Open sourcebishopfox.com
Open sourcenist.gov
Open sourceowasp.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
European and national cyber authorities are warning that AI is rapidly increasing the speed and scale of vulnerability discovery and exploit development, raising the prospect of a sustained remediation crisis. The European Central Bank told about 110 major banks to assess AI-enabled cyber threats and submit action plans by **October 31, 2026**, while the European Systemic Risk Board and European Supervisory Authorities issued parallel warnings on systemic risk from frontier AI models. In France, ANSSI Director General Vincent Strubel told senators that AI-assisted discovery could create a multi-year **"patch wall"**, overwhelming remediation teams even as basic controls such as network segmentation, identity and access management, and timely patching remain the most effective defenses. Industry reporting and vendor disclosures show why regulators are escalating. Mozilla said frontier AI models helped identify **271 vulnerabilities** fixed in Firefox 150 after an earlier run found 22 security-sensitive bugs, while researchers and commentators say LLM-assisted patch diffing can shrink the path from a disclosed `CVE` to a working proof of concept to days or even hours, including for flaws such as `CVE-2025-32433` in Erlang/OTP SSH. At the same time, access controls around advanced cyber-capable models are tightening unevenly: Anthropic expanded its restricted **Project Glasswing** program for Claude Mythos to critical-infrastructure organizations, but open-weight alternatives such as Zhipu AI's **GLM-5.2** are reported to deliver competitive vulnerability-finding performance at lower cost, reinforcing concerns that powerful offensive-relevant capability is spreading faster than most enterprises can patch.
Jul 10, 2026
Recent research and evaluations indicate **AI agents are becoming capable of finding and exploiting vulnerabilities with high success rates using standard offensive tooling**, lowering the barrier to semi-autonomous attacks. A study by Irregular in collaboration with **Wiz** reported that leading models (Anthropic *Claude Sonnet 4.5*, OpenAI *GPT-5*, and Google *Gemini 2.5 Pro*) solved **9 of 10** web security CTF challenges modeled on real-world incident patterns, including **authentication bypass**, **exposed secrets**, **stored XSS**, and **SSRF** (including **AWS Instance Metadata Service (IMDS)**-style SSRF). Researchers noted that even when success required multiple stochastic runs, the **low per-run cost (~$2) and limited repeats** could make exploitation practical without necessarily triggering monitoring, with most challenge successes costing **under $1** and multi-run cases totaling roughly **$1–$10**. Separate evaluation results highlighted by Bruce Schneier, citing an Anthropic post, describe *Claude Sonnet 4.5* successfully executing **multistage attacks across simulated networks** using only **standard open-source tools** rather than custom cyber toolkits, including exfiltrating all simulated PII in a high-fidelity **Equifax-breach** simulation by recognizing and exploiting a known **publicized CVE**. In parallel, Dark Reading reported security concerns around the rapid adoption of an open-source autonomous assistant, **OpenClaw** (formerly *MoltBot/ClawdBot*), which can connect to email, files, messaging, and system tools, execute terminal commands and scripts, and maintain memory across sessions—creating **persistent non-human identities and access paths** that may fall outside traditional **IAM** and secrets controls, increasing enterprise risk as “bring-your-own-AI” agents gain privileged access.
Jun 29, 2026
Security leaders are warning that **AI agents are increasingly operating as “digital employees”** inside enterprise workflows—triaging alerts, coordinating investigations, and moving work across security tools—often with **broad permissions and limited governance**. The core risk highlighted is that organizations are deploying high-authority agents like plug-ins (reused service accounts, overbroad roles, weak oversight), creating fast-acting operators that can be manipulated and that lack the contextual judgment and policy awareness expected of human staff. Related commentary also raises concerns about **AI-to-AI communication** and “non-human-readable” behaviors that could reduce auditability and complicate investigations and control enforcement. In parallel, public examples show how quickly AI can accelerate **vulnerability discovery**: Microsoft Azure CTO Mark Russinovich reported using *Claude Opus 4.6* to decompile decades-old Apple II 6502 machine code and identify multiple issues, underscoring that similar techniques could be applied to **embedded/legacy firmware at scale**. Anthropic has also cautioned that advanced models can find high-severity flaws even in heavily tested codebases, reinforcing the likelihood that both defenders and attackers will leverage AI for faster bug-finding. Separate enterprise IT coverage notes that organizations are **reallocating budgets toward AI** by consolidating tools and renegotiating contracts, which can indirectly increase security exposure if cost-cutting reduces overlapping controls or if AI adoption outpaces governance and identity/access management maturity.
Jun 29, 2026