Dark Reading reports that attackers are actively exploiting CVE-2026-0768, a critical unauthenticated remote code execution vulnerability in Langflow versions 1.4.2 and earlier. The flaw, which reside…
A security researcher known as BobDaHacker disclosed on August 4th that a flaw in tl;dv, a German AI meeting company, exposed 181,874 meeting records and live-call IDs for 84,312 users, allowing any a…
Researchers disclosed the 'PleaseFix' issue, showing that AI browser agents can be hijacked by malicious instructions hidden in web content, leading to zero-click attacks. The vulnerability is structu…
An engineer argues that AI harnesses are essentially middleware and that the security risks they pose are not novel, but rather a rehash of long-known integration security issues. The post emphasizes …
CrowdStrike's analysis of SANDWORM_MODE, a self-propagating npm supply-chain worm targeting AI-assisted development environments, found that only two of 14 examined behaviors produced reliable alert-q…
On July 15, 2026, Oasis Security disclosed PromptFiction, a vulnerability in Anthropic's Claude Desktop application that allowed crafted claude:// links to automatically submit attacker-authored promp…
Dark Reading covered research showing that LLM safety guardrails are not applied consistently across languages, creating a multilingual jailbreak gap. A prompt blocked in English can bypass the same m…
Varonis Threat Labs disclosed SearchLeak, a three-stage vulnerability chain in Microsoft 365 Copilot Enterprise that can exfiltrate emails, MFA codes, calendar items, SharePoint and OneDrive files via…
Varonis Threat Labs disclosed a critical vulnerability chain called SearchLeak in Microsoft 365 Copilot Enterprise that could allow attackers to exfiltrate emails, MFA codes, and files via a one-click…
Bruce Schneier, a renowned technologist and author, warned in a June 20, 2010 column that cryptography is fundamentally unable to secure modern networks against threats like denial-of-service attacks,…