v2026.06

Summary

The v2026.06 release of the AI Sec Watch content adds the techniques Steal Web Session Cookie, Use Alternate Authentication Material: Web Session Cookie, and AI Service Web Interface, and updates the LLM Jailbreak technique. It also updates the mitigations Generative AI Guardrails, Generative AI Guidelines, and AI Telemetry Logging, and adds six case studies, including Storm-2139 Azure OpenAI Guardrail Bypass and EchoLeak zero-click prompt injection against M365 Copilot.

Topics

• Prompt injection and jailbreaks

Related items

• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSame vendor · CNBC Technology
• InfoAn OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the OfficeSame vendor · Wired (Security)
• InfoEmployee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company SaySame vendor · SecurityWeek
• InfoOpenAI employee arrested after recording device found in officeSame vendor · The Guardian Technology
• InfoOpenAI engineer arrested for allegedly planting spy device in officeSame vendor · BleepingComputer