In the first half of 2026, 35,853 CVEs were published, roughly 49% more than the year before, but only 495 were catalogued as exploited in the wild, according to VulnCheck data cited in a Picus Securi…
Attackers are actively exploiting CVE-2026-0768, a CVSS 9.8 unauthenticated remote code execution vulnerability in Langflow's `/api/v1/validate/code` endpoint, to steal OpenAI, AWS, Anthropic, and GCP…
Two CVSS 9.8 vulnerabilities were disclosed on September 5 in open-source AI agent sandboxes, Cua and AutoAgent, both allowing unauthenticated remote code execution due to default network bindings and…
Threat intelligence firm VulnCheck and the Cloud Security Alliance report that attackers exploited CVE-2026-0768, an unauthenticated remote code execution vulnerability in the open-source AI framework…
Two critical vulnerabilities are being actively exploited to steal AI API keys and cloud credentials: CVE-2026-0768 in Langflow 1.4.2 and earlier (CVSS 9.8, no authentication required) and CVE-2026-66…
Dark Reading reports that attackers are actively exploiting CVE-2026-0768, a critical unauthenticated remote code execution vulnerability in Langflow versions 1.4.2 and earlier. The flaw, which reside…
Attackers are exploiting CVE-2026-0768, a critical CVSS 9.8 vulnerability in Langflow's validate endpoint, to harvest credentials from AI infrastructure, with over 15,000 successful exploitation attem…
Attackers are exploiting a critical unauthenticated remote-code-execution flaw in Langflow, tracked as CVE-2026-0768, to steal OpenAI API keys, AWS credentials, and administrator secrets from exposed …
A wave of vulnerabilities in smart home networking hardware is undermining the security of AI agents, with VulnCheck discovering a factory-installed backdoor in over 20 Zbtlink router models affecting…
CVE-2026-75130, a prompt-injection vulnerability in Context7, Upstash's MCP documentation server, scores 9.0 critical under CVSS 3.1 and 6.4 medium under CVSS 4.0, with no public fix documented for af…
Cyera disclosed 10 memory-safety vulnerabilities in llama.cpp, the inference engine embedded in many local AI tools, after presenting the research at DEF CON 34. VulnCheck assigned 10 CVEs, and Cyera …
LLMs have cut the cost of code changes and now find vulnerabilities as well as human reviewers, but they have also doubled the number of exploited vulnerabilities since the second half of 2023 and sho…
VulnCheck found that only 14 of 1,061 AI-discovered vulnerabilities in the first half of 2026 were confirmed exploited, a rate of 1.3 percent matching the overall vulnerability exploitation rate. Howe…
AI-assisted vulnerability discovery has not led to a surge in real-world exploits, with VulnCheck finding that only 14 of 1,061 attributed discoveries (1.3 percent) had been exploited, a rate "almost …
AI-discovered software vulnerabilities are surging at roughly twice last year's rate, but almost none are being exploited, according to a VulnCheck report. Of 1,061 vulnerabilities attributed to AI-as…
AI-assisted security tools like Anthropic's Project Glasswing and Microsoft's MDASH discovered 1,061 vulnerabilities in the first half of 2026, but only 14 (1.3%) were exploited in the wild, matching …
Microsoft 365 Director Jeremy Chapman told Windows admins that security patches must be applied within three days, arguing that AI is accelerating vulnerability discovery and exploitation. Independent…
The Forum of Incident Response and Security Teams (FIRST) released its 2026 Mid-Year Vulnerability Forecast, revealing actual CVE disclosures are running 46.3% above projections from four months ago, …