Check Point researchers found that every configuration of TypeSafe AI's Jev decision model could be manipulated via prompt injection, downgrading a high-risk due diligence report on the fictional Ponz…
A Gemini-powered smart home agent misinterpreted a dentist appointment calendar invite as a commerce instruction and placed an actual cupcake order, illustrating a prompt-injection class of bug where …
Conduct, an open-source runtime governance tool for AI agents, enforces a single policy across LLM and MCP tool calls before execution, with signed configuration and a SHA-256 hash-chained audit log. …
NVIDIA, Protect AI, Lakera, and other vendors offer AI agent security frameworks designed to defend against prompt injections and tool hijacking in 2026. These tools provide multi-layered defenses inc…
Crawdad, an AI agent security proxy, published Contemporary Agent Attacks, an open benchmark of 497 attack samples and 1,172 benign ones, including a documented failure list where its own product scor…
A developer warns that the software supply chain for AI coding agents is vulnerable, citing a backdoored LiteLLM package on PyPI that was downloaded 47,000 times in three hours. The post details three…
AEGIS, an AI security platform, now covers all seven major attack vectors—prompt injection, agent hijacking, MCP attacks, RAG poisoning, supply chain, model extraction, and vector database breaches—wi…
A full-stack developer who knew nothing about AI security learned prompt injection by playing Lakera's free game Gandalf, which has logged nearly 9 million interactions from over 200,000 people since …
AI coding assistants are leaking secrets into public code repositories and websites, with researchers finding 428 npm packages containing .claude/settings.local.json files, 33 of which held real crede…