A newly disclosed artificial intelligence vulnerability can transform a routine “summarize this page” request in xAI’s Grok web chat into a silent data exfiltration event. The attack, which requires no user interaction beyond the initial prompt, is capable of stealing the user’s name, coarse location, subscription tier, and the entire prompt history of the active ... Read more
The post Grok Zero-Click Attack: How Encrypted Prompt Injection Steals Chat Data appeared first on CyberUpdates365 | Latest Cybersecurity News & Vulnerabilities.
source & further reading
cyberupdates365.com — original article
Anthropic Launches Claude Mythos 5 in Claude Security for Enterprise Vulnerability Scanning
Splunk Patches Critical MCP Server RCE and 16 Other Security Flaws Across AI Toolkit, Kafka Apps
CVE-2026-24301: "CoSnitch" vulnerability in Microsoft Copilot