🤓 Unit42 uncovered a prompt injection embedded in a malicious website distributing malicious Excel templates and Chrome extension. The prompt is used to poison SEO and influence AI systems to recommend the website to users, and encourage them to download […] [Original post on infosec.exchange]

🤓 PromptIntel the database of Adversarial Prompts or Indicator of Prompt Compromise, gets a redesign! Check this out 👇 https://promptintel.novahunting.ai/

🤓 How many times have you questioned claims made in a threat report? The "Trust me bro" is not always reliable! The Admiralty Code also known as the NATO System, is a method used to evaluate collected intelligence. The goal is to assess the reliability of […] [Original post on infosec.exchange]

🧐 Interesting new report on MoltThreats! An agent on Moltbook named "codeofgrace" pushed more than 15 coordinated religious propaganda posts in a single day around the same "Lord RayEl" narrative. The pattern behind is quite interesting: • High posting […] [Original post on infosec.exchange]

😈 Do you wonder how attackers would try to exploit your AI server if it was exposed to the Internet? Well Marco Pedrinazzi did the experiment for you! He deployed an exposed Ollama honeypot and documented how attackers interacted with it. What is super […] [Original post on infosec.exchange]

🤓 Cool talk at the SANS AI summit from Jacob Klein from Anthropic! Interesting to see how attackers leverage Claude models based on what they are seeing internally. I still think it is missing the broader landscape discussion around everything adjacent to the models themselves, but that would […]

🤓 Web based prompt injection is when a threat actor tries to exploit your LLM through hidden prompts inside a web page. They embed malicious instructions in the content hidden in the DOM. When your AI agent scrapes and reads the page, it may treat those […] [Original post on infosec.exchange]

🤓 Just dropped a short clip from @blackhatevents Asia, where I delivered my training and presented at Arsenal on AI Threat Intelligence. Also, I tried durian again... 😬 https://youtu.be/mlKWR-suKOY?si=Z9NokUTwWV108Crc

🤓 Google released a new threat report talking about prompt injection attacks in the wild. They analyzed web data and identified the main types of attempts targeting AI systems, below is the breakdown 👇 - Harmless pranks: Small tricks to change tone or […] [Original post on infosec.exchange]

🤓 Threat intelligence is all about processing raw data to make it useful for the business. Coupled with AI you can industrialize your pipelines and make it great. But most of the solutions out there will give you lengthy paragraphs of text. But honestly who […] [Original post on infosec.exchange]

🤓 Sekoia recently uncovered a new Phishing as a Service platform called EvilTokens that automates Business Email Compromise at scale! The tool use AI to: - Automate the analysis of large volumes of emails to identify exploitable financial exposure - Map […] [Original post on infosec.exchange]

💥 Supply chain nightmare continues! Axios a widely used HTTP client got compromised. Malicious versions: - axios 1.14.1 (latest) - axios 0.30.4 (legacy) - plain-crypto-js 4.2.x (postinstall backdoor) NPM supply chain attacks are becoming more common, so I […] [Original post on infosec.exchange]

🤓 In February, I created MoltThreats the first open source threat feed for AI agents. So what is it exactly? Through the MoltThreats Skill I created, your AI agent can connect to the feed and poll it daily or weekly. Once connected, your agent can […] [Original post on infosec.exchange]

🐍 @sleuthcon 2026 Keynote. Let's go! Super excited to be part of this event and to share the stage with Sleuthy, this is a huge honor! I will share more details on the topic soon but expect something at the intersection of AI and threat intelligence. If you are going, come say hi! 🤩

🤖 New threat reported by my agent during the night on MoltThreats! Check this out and update your agent! 👇 https://promptintel.novahunting.ai/molt/df3493c8-54a0-4e7c-abd1-6cdd02754640

🤖 Four new threats added by agents in MoltThreat! Check this out 👇 https://promptintel.novahunting.ai/molt

🤓 A month ago I published a blog post on how to monitor Claude Code sessions using hooks and NOVA Protector! At the time, no one was really talking about this. Coding agents were being handed full access to your machine and people were just trusting the output blindly. The post covers how I […]

🤓 I recently published a blog post with a controversial take! This may be the end of malware analysis and reverse engineering as we know it. I think AI will change the craft in ways most people are still underestimating. I explain everything in this post 👇 […]

🤓 Next month at @BlackHatEvents Asia, I will be teaching my training "Practical AI for Threat Intel: Real-World Agentic Workflows for Cyber Threat Intelligence." It is packed with my latest research and labs. You will learn how to: - Build agentic […] [Original post on infosec.exchange]

🤓 You've been reading about it, now you can listen to it! I recently joined Confidence Staveley on the AI Cyber Magazine podcast to talk about my latest work around AI threat intelligence, IoPC, MoltThreats, agent monitoring, and Nova! Check this out to learn about the AI security trenches! 👇 […]

In a recent report from Socket, a compromised release of the Aqua Trivy VS Code extension on OpenVSX (v1.8.12 and v1.8.13) contained unauthorized code that injected prompts targeting local AI coding agents such as Copilot, Claude, and Codex. The prompts […] [Original post on infosec.exchange]

🤓 New blog post on the Nova ecosystem for prompt hunting! @pedrinazzim just released the Nova Rules Validation and Testing Pipeline, it is designed to automatically validate, test, and evaluate Nova rules! As the rules repo grow, this will help us keep the repository reliable and avoid […]

🤓 I was one of the technical reviewers for the latest @veritasium video on the XZ backdoor. It brought me back to the four days without sleep I spent analyzing this case! They did a great job making the story accessible and keep the technical accuracy 👏 https://www.youtube.com/watch?v=aoag03mSuXQ

🤓 Most AI CTI agents are useless. They generate noise instead of intelligence! We don't need more summaries. We need better ways to interact with information. So I experimented with Generative UI (not Generative AI) and I built a playground called IntelWall, like an investigation board […]

🤓 Next week I am honored to deliver the keynote at the Malware and Reverse Engineering Conference in Melbourne! I will talk about the state of malware analysis in the AI era. Come say hi If you are around to discuss binaries! https://asterion.federation.edu.au/mre-2026-conference-portal#/

🤓 Happy to see that my DEFCON talk on crypto money laundering and tracking techniques was featured in the DEFCON 33 Almanac! Read it here: https://harris.uchicago.edu/sites/default/files/the_def_con_33_hackers_almanack.pdf

🤓 My latest newsletter is out! I share what I have been building lately around AI security, agents, MoltThreats, SHIELD.md, and upcoming trainings! If you want to see where this is going, have a look 👇 https://newsletter.securitybreak.io/archive/copy-of-a-quick-end-of-year-note-8665

🦞 MoltThreats, the threat intelligence feed I created for OpenClaw and AI agents, was featured in the latest video from John Hammond! Check it out to see how it works and to learn more about the security around OpenClaw👇 https://youtu.be/BzUBdvCdlSU?si=FiPqffdx5Nrcqijh&t=452

🤩 Xavier Marrugat recently shipped two tools that extend the Nova ecosystem with integration of PromptIntel and MoltThreats! 1️⃣ Carapace: A prompt injection detection plugin for OpenClaw. It integrates Nova + PromptIntel to detect adversarial prompts […] [Original post on infosec.exchange]

🤓 NOVA just plugged into the CTI ecosystem! Dogesec published a blog showing how PromptIntel and NOVA rules can be embedded inside STIX 2.1 as real Indicators. This is Adversarial Prompt Intelligence plugged into security workflows! Read the blog to learn […] [Original post on infosec.exchange]

🤓 At BlackHat Asia in Singapore, I am running two advanced AI trainings with my friend Maxime Cousseau that go beyond slides and hype. You will build and break real AI systems! 🤖 Practical GenAI for CTI – 2 Days Stop watching demos. Build real agentic […] [Original post on infosec.exchange]

🤓 Let me introduce you to MoltThreats: The first AI Threat Intel Feed for Ai Agents! In one week, OpenClaw became a widely used general AI agent. People started to run their own agents all over the world and connect them directly to the internet. But this […] [Original post on infosec.exchange]

🤓 Agent skills are more and more used by AI agents. This is a powerful capability boost but it also increases the risk of compromise. I have updated my tool Nova Proximity (previously Proximity) to let you scan a skill before you use it. I also updated the MCP support so you can scan the latest […]

🤩 Happy to announce that I will present the Nova ecosystem at BlackHat Asia. Nova is an open source suite focused on AI security, agentic workflow monitoring, and AI threat hunting for adversarial prompts. This talk will introduce a major update of the […] [Original post on infosec.exchange]

I believe the future of the Internet will be an Internet of AI agents, I wrote an essay on this topic. Have a look 👇 https://x.com/fr0gger_/status/2015288641854279904?s=20

🤓 I recently wrote a blog about a tool I built to monitor and audit coding agent sessions. If you are curious about what the report looks like check out this short video. It give you full traceability and a clear overview of what Claude Code did 👇 blog […] [Original post on infosec.exchange]

Two Adversarial Prompts recently added into PromptIntel by @MiggoSecurity and @trailofbits Check this out 👇 https://promptintel.novahunting.ai/feed

✨ This year I will teach two trainings at @blackhatevents Asia in April! 🧠 Practical GenAI for Threat Intel: Real World Agentic Workflows for Cyber Threat Intelligence (2 days) Latest version of the course, with a strong focus on agent architectures […] [Original post on infosec.exchange]

🤔 Are you using Claude Code? If yes, do you actually know what it did during your last 60 minute session? Which files it touched, which tools it called, which websites it fetched? If you cannot answer those questions, you should read my latest blog. I break down AI coding agent visibility and […]

💥 Reprompt attack exploit the q parameter in your AI system! The q parameter is used on AI platforms to transmit a user prompt via the URL. You can embed a question or instruction in this parameter and the input field is auto populated on page load and the […] [Original post on infosec.exchange]

😈 In the AI world "Hi" is not a greeting. It is a probe! A recent campaign shows attackers actively targeting LLM deployments. They send harmless prompts to fingerprint exposed models following the same prompt sequence. 👉 Full report […] [Original post on infosec.exchange]

✨ This year I will teach two trainings at @blackhatevents Asia in April! 🧠 Practical GenAI for Threat Intel: Real World Agentic Workflows for Cyber Threat Intelligence (2 days) Latest version of the course, with a strong focus on agent architectures […] [Original post on infosec.exchange]

Happy New Year everyone 🎉 I just came back from the break and was very happy to receive my @SANSInstitute Institute Difference Maker Award. A huge honor to have it here with me! ...Now back to work after the holidays to secure and break all things AI 🤓

🎅 The AI x Sec Advent is finished! Thanks a lot for following it! If you want to revisit it, I created a dynamic calendar where you can click on each day and reread the posts! Have a look and let me know if you can find the Easter egg 👀 Merry Christmas 🎄 […] [Original post on infosec.exchange]

🎁 GenAI x Sec Advent 24 – Final day 🎅 Last year, I created DocYara, an AI agent designed to help you learn and build better YARA rules. Today I am happy to announce the next version of DocYara. The platform now lets you upload a sample, and DocYara […] [Original post on infosec.exchange]

🎁 GenAI x Sec Advent 23 - From GenAI to GenUI Humans are visual. We understand and assimilate information better through graphics and design. Yet most AI systems (for CTI at least) generate more noise than real value! Last month MCP integrated MCP UI into […] [Original post on infosec.exchange]

🎁 GenAI x Sec Advent 22 - Canary Tokens for prompt and context leakage For many AI systems, the system prompt is proprietary data that defines how the model or the system behaves. This is critical as it often contains sensitive information, security […] [Original post on infosec.exchange]

🎁 GenAI x Sec Advent 21 - Prompts Fingerprinting When I introduced the concept of Adversarial Prompts or Indicators of Prompt Compromise (IoPC), I researched a way to build a reliable fingerprinting method to share and identify prompts! When you need to […] [Original post on infosec.exchange]

🎁 GenAI x Sec Advent 20 - LLM Poisoning or AI Grooming LLMs are trained on the data we produce every day and publish on the internet. A recent Recorded Future report describes a Russian threat actor dubbed CopyCop, using LLMs to rewrite news and mass […] [Original post on infosec.exchange]

🎁 GenAI x Sec Advent 19 - Generating NOVA Rules How do you hunt and monitor for Adversarial Prompts? NOVA is my open source framework for prompt hunting and prompt detection. It works with detection rules that lets you describe exactly what you want to […] [Original post on infosec.exchange]