Signal criticality: High
What happened: SecurityWeek reported that zscaler says it identified two campaigns relying on indirect prompt injection, including a payment scam hiding behind API documentation, and a typosquatting operation promoting a crypto platform that impersonates DeBank. Artificial Intelligence Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the web. By Ionut Arghire | July 6, 2026 (7:19 AM ET) Flipboard Reddit Whatsapp Whatsapp Email Threat actors are using prompt injection attacks embedded in malicious websites and manipulated search results to trick AI agents into making payments or trusting fraudulent cryptocurrency platforms.
Key takeaways:
Original source: https://www.securityweek.com/prompt-injection-attacks-trick-ai-agents-into-making-crypto-payments/
Signal criticality: High
What happened: Help Net Security reported that sinisa Markovic , Managing Editor, Help Net Security July 9, 2026 Share Malicious AI agent skills can slip past the scanners built to stop them Developers who build with AI coding agents grab capabilities off public marketplaces the same way they grab packages from npm or PyPI. The add-ons are called agent skills. Each one is a little bundle of plain-English instructions, scripts, and files that a tool such as Claude Code or OpenAI Codex loads when it needs a new trick.
Key takeaways:
Original source: https://www.helpnetsecurity.com/2026/07/09/malicious-ai-agent-skills-scan/
Signal criticality: High
What happened: The Decoder AI reported that the group uses AI for attack planning, building more powerful explosive devices, weapons maintenance, and operational security, the study found. "Former members described strong enthusiasm for AI, and some said the group had previously considered mass-casualty weapons," Juelich writes . "Though Boko Haram's use of AI remains conventional, this should be a warning to take seriously the risk of terrorists pursuing AI assistance for chemical and biological weapons." Researchers as well as AI labs like OpenAI and Anthropic have long warned that AI models could make dangerous knowledge more accessible .
Key takeaways:
Original source: https://the-decoder.com/terrorist-groups-are-using-every-major-ai-chatbot-for-attack-planning-and-weapons-development/
The strongest signal today is that AI security is being decided in the surrounding control layer — permissions, connectors, deterministic workflow design, response speed, and the infrastructure that still underpins trust. That is a more durable framing than generic agent hype, and it is the one worth carrying forward.