Signal criticality: High
What happened: Help Net Security reported that gPT-Red found success on 84% of them. OpenAI reported the flaws, and fresh safeguards are in testing. OpenAI s testing found frontier and over-refusal scores unchanged, evidence that the model got better at catching malicious instructions and kept serving legitimate ones. Mirko Zorz , Director of Content, Help Net Security July 16, 2026 Share GPT-Red beat human red teamers on a prompt injection test GPT-Red is an automated red-teaming model that OpenAI trains to find prompt injection weaknesses.
Key takeaways:
Original source: https://www.helpnetsecurity.com/2026/07/16/openai-gpt-red-prompt-injection-test/
Signal criticality: High
What happened: The Hacker News published "New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands". Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click "Buy Now" instead. Ask a coding assistant to apply a maintainer's fix from a GitHub thread, and a fake comment can make it run a stranger's command on your computer. Neither trick hijacks the agent's task. Each one just corrupts the facts it trusts and lets it carry on with the job you
Key takeaways:
Original source: https://thehackernews.com/2026/07/new-agent-data-injection-attack-can.html
Signal criticality: High
What happened: Rapid7 Blog published "CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)". Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft are disclosing the first vulnerability in this chain, the authentication bypass vulnerability CVE-2026-55040. The RCE component of the exploit chain is expected to be patched by Microsoft in the next update cycle for August 2026. The...
Key takeaways:
Original source: https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed
Signal criticality: High
What happened: Microsoft Security Blog published "Least privilege for AI agents: Identity, access, and tool binding". As AI agents become more autonomous, strong identity, access, and auditing controls are critical to keeping them secure The article focuses on governance, identity, guardrails, or permission boundaries around AI agents that can act with real system access. The practical question is what permissions, connected data, or follow-on actions this signal can influence in a real deployed workflow.
Key takeaways:
Original source: https://www.microsoft.com/en-us/security/blog/2026/07/16/least-privilege-for-ai-agents-identity-access-and-tool-binding/
The strongest signal today is that AI security is being decided in the surrounding control layer — permissions, connectors, deterministic workflow design, response speed, and the infrastructure that still underpins trust. That is a more durable framing than generic agent hype, and it is the one worth carrying forward.