AI Security Digest

Anthropic's MCP protocol has unsafe defaults by design. One prompt-injection payload hijacks Claude Code, Gemini CLI, and Copilot Agent.

Two weeks ago, the question was whether AI-accelerated offensive capability would outpace defensive capacity. Claude Mythos answered it.

NIST proves all frontier models hackable. LiteLLM supply chain hit. Memory attacks emerge. RSAC 2026

AI Agent Worms Go Live, Prompt Injection Proven Unsolvable at Model Level, and Enterprise Breaches Hit Critical Mass

The AI Security Digest (Feb 19 – Mar 5, 2026) highlights a rapid rise in attacks targeting AI agent ecosystems rather than the models themselves

1,184 malicious skills on ClawHub. Data leaking through inter-agent channels at 68.9%. NIST declaring AI agents a new security category.

Agentic AI declared the #1 enterprise threat, NIST moves on agent security standards, and Anthropic proves production-viable jailbreak defence.

MCP under siege with 23-41% attack amplification, CrowdStrike names a new attack class targeting agent reasoning, and 4,500+ AI assistants found exposed.

OWASP's agentic AI Top 10 is out, OpenAI admits prompt injection may never be solved, and a polite email wipes Google Drive.