Nebula Security used its AI-driven bug-hunting tool VEGA to discover GhostLock (CVE-2026-43499), a 15-year-old use-after-free vulnerability in the Linux kernel that allows any logged-in user to gain r…
CISA added an authorization-bypass vulnerability in Langflow, a visual framework for building AI-agent workflows, to its Known Exploited Vulnerabilities catalog on July 7, 2026, giving federal agencie…
CISA is using Anthropic Mythos to audit federal code repositories for vulnerabilities, according to reports from Reuters, SecurityWeek, and The Next Web. The Attack Surface Evaluation team has already…
Zscaler discovered malicious websites using indirect prompt injection to manipulate autonomous AI agents, including campaigns tied to crypto-payments and fake DeFi decisions. The attacks exploit agent…
Security researchers at Flatt.tech disclosed a critical supply-chain vulnerability in Anthropic's Claude Code GitHub Actions integration that a single malicious GitHub issue, pull request, or comment …
In June 2026, attackers exploited Meta's AI-powered support chatbot to take over high-profile Instagram accounts, including the Obama White House account, by convincing the AI to perform account recov…