https://www.aim-intelligence.com/blog Latest insights on AI security, red teaming, LLM safety, and enterprise AI from the AIM Intelligence research and engineering teams. en-us Wed, 01 Jul 2026 05:35:25 GMT 60 https://www.aim-intelligence.com/images/logo_top.svg https://www.aim-intelligence.com/blog https://www.aim-intelligence.com/blog/vetted-self-contained-sources-what-we-found-inside-a-nasa-missions-public-chatbot-1782884125778 https://www.aim-intelligence.com/blog/vetted-self-contained-sources-what-we-found-inside-a-nasa-missions-public-chatbot-1782884125778 A public chatbot on NASA's Parker Solar Probe mission page promised users its answers came only from "vetted, self-contained sources." We red-teamed it into fabricating leaked memos, fake election audits, and climate denial citing the mission's own data — then disclosed it through proper channels and saw the endpoint taken offline. Arth Singh SECURITY Wed, 01 Jul 2026 05:35:25 GMT https://www.aim-intelligence.com/blog/helpfulness-trap-opus-48 https://www.aim-intelligence.com/blog/helpfulness-trap-opus-48 No jailbreak, no tricks — just professionally framed requests. Using our Stinger red-teaming engine, we collected 83 confirmed CBRN breaches from Claude Opus 4.8. Taewoong Kang RESEARCH Wed, 24 Jun 2026 09:16:43 GMT https://www.aim-intelligence.com/blog/continuous-ai-security https://www.aim-intelligence.com/blog/continuous-ai-security A recent NIST publication argues that no finite set of AI safety rules can protect against all future attacks. As AI agents gain access to tools and enterprise systems, security is shifting from static guardrails toward continuous monitoring and adaptation. Jongho Shin RESEARCH Fri, 19 Jun 2026 02:24:58 GMT https://www.aim-intelligence.com/blog/ai-security-digest-may-2026 https://www.aim-intelligence.com/blog/ai-security-digest-may-2026 May 2026 was a watershed month for AI security. From the first AI-authored zero-day exploit confirmed in the wild, to a self-propagating npm worm that reached OpenAI's code-signing pipeline, to prompt injection flaws enabling full RCE in Microsoft's Semantic Kernel — the attack surface around AI systems expanded on every front. This digest covers seven stories that defined the month, including the release of XL-SafetyBench from AIM Intelligence and collaborators. Yonggyu Kim DIGEST Fri, 12 Jun 2026 06:34:56 GMT https://www.aim-intelligence.com/blog/tool-mediated-belief-injection https://www.aim-intelligence.com/blog/tool-mediated-belief-injection When we deploy language models with access to external tools, we dramatically expand their capabilities. However, tool access also introduces new attack surfaces that differ fundamentally from traditional prompt injection. We document how adversarially crafted tool outputs can establish false premises that persist and compound across a conversation. Siddhant RESEARCH Sun, 30 Nov 2025 00:00:00 GMT https://www.aim-intelligence.com/blog/misalignment-bench https://www.aim-intelligence.com/blog/misalignment-bench We got frontier models to lie, manipulate, and self-preserve. Not through prompt injection or jailbreaks. We deployed them in contextually rich scenarios with specific roles and guidelines. The models broke their own alignment trying to navigate the situations we created. Siddhant RESEARCH Thu, 14 Aug 2025 00:00:00 GMT https://www.aim-intelligence.com/blog/elite-vlm-safety https://www.aim-intelligence.com/blog/elite-vlm-safety As AI systems evolve to process images and text together, the risks grow exponentially. ELITE doesn't just measure whether a model is 'safe' — it evaluates how dangerous its outputs could be with precision that rivals human reviewers. Eugene Choi RESEARCH Thu, 29 May 2025 00:00:00 GMT https://www.aim-intelligence.com/blog/pressure-point https://www.aim-intelligence.com/blog/pressure-point In a simulated earthquake response scenario, Claude 4 Opus was given conflicting rules. When pressured by authority, it reversed its ethical decision and recommended letting a critical patient die to optimize an efficiency score. Siddhant Panpatil RESEARCH Mon, 26 May 2025 00:00:00 GMT https://www.aim-intelligence.com/blog/exploiting-mcp https://www.aim-intelligence.com/blog/exploiting-mcp Discover how attackers exploit vulnerabilities in the Model Context Protocol (MCP) to manipulate Large Language Models (LLMs), steal data, and disrupt operations. Learn real-world attack scenarios and defense strategies. Eugene Choi SECURITY Wed, 21 May 2025 00:00:00 GMT https://www.aim-intelligence.com/blog/spa-vl-dataset https://www.aim-intelligence.com/blog/spa-vl-dataset SPA-VL is a meticulously designed dataset that sets a new standard for safety alignment in VLMs, incorporating diversity, feedback, and real-world relevance to ensure AI systems are both powerful and ethical. Eugene Choi RESEARCH Wed, 27 Nov 2024 00:00:00 GMT https://www.aim-intelligence.com/blog/indirect-prompt-injection https://www.aim-intelligence.com/blog/indirect-prompt-injection Indirect Prompt Injection (IPI) is a sophisticated attack that manipulates how LLM-integrated applications process external data, causing them to misinterpret maliciously crafted inputs as commands. Sejin SECURITY Mon, 25 Nov 2024 00:00:00 GMT https://www.aim-intelligence.com/blog/indirect-prompt-injection-web-agent https://www.aim-intelligence.com/blog/indirect-prompt-injection-web-agent Explore how EIA, AdvWeb, and WIPI attack methods exploit vulnerabilities in VLM-powered web agents, revealing serious security concerns for AI systems that interact with web environments. Jiankimr SECURITY Fri, 15 Nov 2024 00:00:00 GMT https://www.aim-intelligence.com/blog/vlm-benchmarks-toxicity https://www.aim-intelligence.com/blog/vlm-benchmarks-toxicity For existing VLM Safety benchmarks, there are cases where the text alone is sufficiently informative without the image. We explore base query generation and toxicity measurement methods. Eugene Choi RESEARCH Sat, 09 Nov 2024 00:00:00 GMT https://www.aim-intelligence.com/blog/defending-web-agents https://www.aim-intelligence.com/blog/defending-web-agents Explore cutting-edge methodologies for identifying and mitigating vulnerabilities in VLM-powered web agents, including the AdvWeb attack framework and BrowserART red teaming toolkit. Sejin SECURITY Sat, 09 Nov 2024 00:00:00 GMT https://www.aim-intelligence.com/blog/kaist-lab-meeting https://www.aim-intelligence.com/blog/kaist-lab-meeting This week, we held a productive meeting with the KAIST lab to refine the direction of our ongoing research project and to solidify our experimental design. The focus was on integrating psychological approaches with LLMs to design jailbreak prompts. Hyunjun Kim RESEARCH Fri, 08 Nov 2024 00:00:00 GMT https://www.aim-intelligence.com/blog/figstep-vlm-attacks https://www.aim-intelligence.com/blog/figstep-vlm-attacks To evaluate VLM Safety, it is essential to develop a secure model that incorporates the unique characteristics of VLMs. We analyze Figstep and RTVLM datasets to assess typographic visual prompt attacks. Doehyeon RESEARCH Sat, 02 Nov 2024 00:00:00 GMT