A developer reported that Anthropic's Claude Code agent on an Enterprise Zero Data Retention workspace began building a Minecraft temple, suggesting possible session state bleeding from a consumer pla…
Agentic AI applications that autonomously invoke tools and APIs introduce a fundamentally different security boundary than non-agentic LLM chatbots, as model outputs are operationalized as system acti…
Strix, an open-source AI penetration testing agent, reached 34,000 GitHub stars this week as a response to a surge in security vulnerabilities from AI-generated code. CVEs traced to AI-written code ju…
Indirect prompt injection, ranked as OWASP's top LLM application risk (LLM01) for 2025, exploits the architectural reality that language models treat all tokens in a flat context stream as instruction…
Aikido's AI penetration testing platform offers continuous, autonomous security assessments that produce compliance-ready reports for most frameworks, though some requiring accredited human testers st…
Snowflake launches Cortex AI Guardrails, a runtime security layer in Horizon Catalog that blocks indirect prompt injection attacks targeting enterprise AI agents. The feature intercepts and neutralize…
Researchers introduced the Neuro-Bayesian-Symbolic Residual Attention Shallow Network (NBS-RASN), a hybrid neural architecture for explainable cybersecurity risk assessment in open-source ecosystems. …
Dockfix Labs launched AgentGuard, an open-source static analysis tool for AI agent security, and analyzed its early traction. The tool received 920 downloads on PyPI with only 1 star and 1 comment, hi…
Exabeam launched Praxen, an open-source tool that verifies AI agent behavior against declared policies by analyzing source code, configurations, and logs. The tool addresses policy drift, which has ca…
Researchers conducted the first systematic security analysis of AI-powered applications on pre-trained model hubs like Hugging Face, identifying five threat categories and ten attack vectors. Their an…
Microsoft Incident Response has detailed a new attack pattern targeting AI agents that use Model Context Protocol (MCP) tools, where attackers poison tool metadata to manipulate agent actions. The tec…
AgentAz, a design-time governance vocabulary for AI agents, published a crosswalk mapping its dimensions to controls in NIST AI RMF 1.0, ISO/IEC 42001:2023, and OWASP Agentic Security. The mapping hel…
Help Net Security highlighted the hottest open-source cybersecurity tools for June 2026, including OWASP Agent Memory Guard, which prevents AI agents from being weaponized through their memory stores.…
A developer found that the risk of system prompt leakage in AI agents depends more on the underlying model than the prompt itself. In a small measurement with five different models, disclosure rates r…
Developer Maneshwar is building git-lrc, a free and source-available Micro AI code reviewer that runs on every commit. The project highlights the critical need for data privacy in AI systems, warning …
A developer outlines mobile app security best practices for React Native and Expo apps in 2026, focusing on the OWASP Mobile Top 10. Key recommendations include using expo-secure-store instead of Asyn…
MeghRoop Tech Blog reports that after building over 50 AI systems, the team has identified prompt injection as a critical vulnerability in LLMs. Prompt injection exploits the inability of LLMs to dist…
The OWASP Foundation merged a fix to its AI Agent Security Cheat Sheet on June 27, 2026, correcting Python code examples that caused NameError when copied. The pull request adds missing imports, fixes…
A developer detailed how they configured Claude Code with 26 production subagents, a CLAUDE.md contract, MCP servers, and hooks to transform the AI from a forgetful junior into a reliable senior team.…
A developer lost $12,000 in fraudulent Stripe charges after an AI agent hardcoded an API key into a public GitHub commit. The incident highlights the risk of giving LLMs direct access to codebases via…