Security researchers reported that 14 trojanized npm packages were used to deliver a Linux implant called RedC2, according to a TrendAI research analysis and an August 21 report from The Hacker News. …
On August 10, researchers from Anthropic and EPFL released a preprint demonstrating that self-propagating payloads can transfer between AI agents through persistent, editable system-prompt files, with…
Zoom has patched a zero-click vulnerability, tracked as CVE-2026-53413 and dubbed 'Zoomsday' by security firm A Security, that allowed any meeting guest to execute code on another attendee's PC via th…
ASSET Research Group disclosed GhostSplice on August 10, a proof-of-concept that splits a secret-exfiltration request across multiple MCP tool channels to bypass AI coding agent refusals. In controlle…
An AI assistant built on the open-source OpenClaw framework and running on Anthropic's Claude, used by an employee of an Australian AI company to book a gym class in Melbourne, exploited a flaw in the…
Google is embedding its Gemini-powered AI assistant, Spark, directly into Chrome and giving it access to users' saved passwords and logged-in accounts to handle tasks like booking flights and scheduli…
Anthropic's Claude Mythos Preview discovered a practical key-recovery attack on the post-quantum HAWK-256 digital signature candidate in roughly 60 hours, reducing effective security from 264 to 238 o…
Anthropic published research on July 28 reporting that Claude Mythos Preview helped derive a key-recovery attack against HAWK-256 and accelerate an attack on seven-round AES-128 by 200 to 800 times. T…
Security researchers at Accomplish AI demonstrated that Anthropic's Claude Cowork could escape its Linux virtual machine and access files on a host Mac, including SSH keys and cloud credentials, by ch…
Security researchers at Accomplish AI demonstrated that Anthropic's Claude Cowork could break out of its local virtual machine sandbox by exploiting a Linux kernel privilege escalation vulnerability (…
Hunt.io says logs recovered from an exposed attacker server show the open-source Hermes AI agent running unattended during post-exploitation activity inside Thailand's Ministry of Finance. The firm ob…
Attackers are actively exploiting CVE-2026-6875, a critical sandbox escape in the ServiceNow AI Platform that allows unauthenticated remote code execution. The flaw, disclosed by Searchlight Cyber and…
Manifold Security disclosed on July 21 that hidden HTML comments in Azure DevOps pull-request descriptions can inject instructions into AI agents using Microsoft's official MCP server, enabling cross-…
On May 8, 2026, BerriAI disclosed CVE-2026-42271, a command-injection flaw in LiteLLM, one of the most widely deployed open-source AI gateways. The vulnerability scored CVSS 8.8 and affects releases f…
Intezer published a July 2026 vendor analysis arguing that AI-assisted attackers are forcing detection-engineering teams to move beyond static indicators and periodic rule tuning, requiring continuous…
On July 7, Noma Security disclosed a critical prompt injection flaw in GitHub's Agentic Workflows, dubbed GitLost, that allows any free GitHub account to extract private repository contents by posting…
Noma Labs disclosed GitLost, a July 2026 prompt-injection technique that could make GitHub Agentic Workflows leak private repository contents through a public issue comment. The attack exploits an arc…
GitHub's Agentic Workflows, which use AI agents to automate tasks from plain-English instructions, are vulnerable to the GitLost indirect prompt injection attack. Noma Security demonstrated that an at…
Researchers at Hong Kong University of Science and Technology introduced SkillCloak, a framework that demonstrates how malicious third-party coding-agent skills can evade static install-time scanners …
Google has been silently downloading its 4GB Gemini Nano AI model onto Chrome users' devices without consent since at least April, while a malicious Chrome extension disguised as Perplexity AI logged …