Top Story — TeamPCP: The Biggest AI Supply Chain Attack in History: Over ten days in March, a single threat actor hit five ecosystems — PyPI, npm, GitHub Actions, VS Code extensions, and Kubernetes. Each compromise fed the next. Trivy, Checkmarx KICS, LiteLLM, and Telnyx all hit. Six vendors published independent analyses.
Amazon "Project Metis" Launches Autonomous AI Security Agents: Red-Team and Blue-Team AI agents continuously attack and defend cloud environments. CrowdStrike stock dropped 7%.
CrowdStrike Charlotte AI AgentWorks: No-code ecosystem for building custom security agents on Falcon. Multi-model — OpenAI, Anthropic, NVIDIA, Amazon Bedrock.
"Claudy Day" — Chained Claude.ai Vulnerabilities: Oasis Security found three vulnerabilities chaining into silent data theft via Google Ads targeting. Zero integrations needed.
Claude Chrome Extension Zero-Click XSS: DOM-based XSS allowed any webpage to inject prompts silently into Claude sessions.
MCP Threat Modeling — Three Papers in One Week: Tool poisoning flagged as top risk, Unit 42 found prompt injection via sampling, OpenGuard measured 23% bypass rate on OpenAI's Operator agent.
Geordie AI Wins RSAC Innovation Sandbox: Enterprise AI governance platform for continuous visibility into agentic AI behavior.
Langflow RCE — Exploited Within 20 Hours: Critical unauthenticated remote code execution in the popular AI agent framework.
Curator's Corner
Zero Day to Zero Second. TeamPCP broke three security reflexes the industry has relied on for decades. "Update to latest" became the weapon — the latest LiteLLM and Telnyx versions were the attack. Credential rotation couldn't outrun a worm that completes a full steal-enumerate-publish cycle in under sixty seconds. And security tools became the attack surface — the more responsible the organization, the more exposed they were.
The old model assumed a gap between disclosure and patch where defenders could act. AI-automated supply chain attacks eliminate that gap. The attack is the update. The playbook doesn't just fail to keep up — it actively works against you.