A senior incident responder outlines a practical hour-by-hour playbook for the first 24 hours of an AI agent security incident, citing Anthropic's GTG-1002 campaign, Microsoft 365 Copilot's EchoLeak f…
Obsidian Security raised $85 million in a Series D round at a $1.1 billion valuation, led by Crescent Cove Advisors, with participation from existing investors including Greylock Partners and Menlo Ve…
Roughly 600 Claude conversations surfaced in Google search results before Anthropic moved to remove them, and more than 143,000 AI chatbot chats across Claude, Copilot, and ChatGPT are sitting in publ…
CISA confirmed active exploitation of CVE-2026-42271 in LiteLLM, an open-source AI gateway, and set a June 22 federal remediation deadline. Obsidian Security disclosed a three-vulnerability chain allo…
A critical vulnerability chain in LiteLLM, a widely deployed open-source AI gateway, allows attackers starting from a default low-privilege account to achieve full server takeover and code execution. …
Coding agent sandboxes address host compromise but not credential authorization, leaving agents with high-scope tokens that can push to protected branches, deploy infrastructure, or read secrets. The …
A one-click remote code execution vulnerability with a 9.9 CVSS severity rating has been discovered in self-hosted deployments of the open-source Flowise AI platform. Researchers at Obsidian Security …