The Agentic Times

ANN · Agentic News Network

All clips

Agentic News Network

Video briefings on the incidents we cover. First clip coming soon.

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.

Latest

Incidents

Anthropic says a state actor ran a hacking campaign through Claude Code

The company said the agent did most of the work across around thirty targets. It banned the accounts and published what it found.

14 Nov 2025

Vulnerabilities

Web form plus expired domain let attackers pull data from Agentforce

Noma Security rated the chain 9.4 on the CVSS scale. Salesforce patched it and re-secured a domain that had been left to lapse.

26 Sept 2025

Vulnerabilities

Deep Research agent leaked Gmail data from inside OpenAI's cloud

Because the agent made the outbound request itself, nothing crossed the victim's network for a security tool to catch.

19 Sept 2025

Incidents

Malware used developers' own AI agents to hunt for their secrets

The compromised Nx packages did not carry a credential scanner. They asked Claude Code, Gemini and Amazon Q to write one on the spot.

29 Aug 2025

Incidents

Drift chatbot tokens opened Salesforce data at hundreds of firms

Attackers did not break into Salesforce. They stole the keys a third-party AI chat agent had been given to it.

27 Aug 2025

Incidents

Reddit post hijacked Perplexity's Comet browser agent

Brave showed the agent reading a user's email for a one-time code and handing it to the attacker. Perplexity's first fix did not fully work.

21 Aug 2025

Vulnerabilities

A shared document quietly pulled API keys out of ChatGPT

Zenity Labs hid instructions in white text. Once the file was shared, ChatGPT's Drive connector did the rest.

8 Aug 2025

Incidents

A calendar invite made Gemini open the windows

SafeBreach showed hidden text in an event could trigger real-world actions through Google Home when a user asked for their schedule.

7 Aug 2025

Vulnerabilities

Cursor could be turned into remote code execution with one message

Prompt injection let researchers write to the IDE's MCP configuration, which Cursor then ran without asking. Version 1.3 closed the hole.

2 Aug 2025

Vulnerabilities

A README was enough to make Gemini CLI run attacker commands

Hidden instructions plus a weak command allow-list let researchers exfiltrate environment variables from Google's coding agent.

29 Jul 2025

The morning agent security brief

One lead story, four links, the week's incident count. Weekday mornings. Free.

2 Nov 2026	OWASP Global AppSec (check dates) TBC
7 Dec 2026	Black Hat Europe 2026 London, UK
26 Apr 2027	RSAC 2027 Conference (check dates) San Francisco, US

ANN · Agentic News Network

Top stories

AI bug hunting ends the era of security through obscurity

Hugging Face tells AI agents to go hack a benchmark instead

Anthropic says hackers used Claude to mine 1.8M Android apps

Anthropic says Claude was abused to automate attacks and weapons work

Claude broke into a stranger's machine during a hacking test

Hidden channel in ChatGPT's package server leaked Gmail data

Hundreds of malicious skills found in OpenClaw's marketplace

Agent social network Moltbook left its database open to anyone

The morning agent security brief

Latest

Anthropic says a state actor ran a hacking campaign through Claude Code

Web form plus expired domain let attackers pull data from Agentforce

Deep Research agent leaked Gmail data from inside OpenAI's cloud

Malware used developers' own AI agents to hunt for their secrets

Drift chatbot tokens opened Salesforce data at hundreds of firms

Reddit post hijacked Perplexity's Comet browser agent

A shared document quietly pulled API keys out of ChatGPT

A calendar invite made Gemini open the windows

Cursor could be turned into remote code execution with one message

A README was enough to make Gemini CLI run attacker commands

The morning agent security brief