arXiv — VibeGuard: Security Gate Framework for AI-Generated Code
VibeGuard addresses security blind spots in AI-generated code workflows, detecting packaging misconfigurations, source map exposure, and supply chain risks that traditional tools miss.
Posts
High-signal AI/security/automation notes.
Filter: All AI Vulnerabilities & CVEs (161)Tools & Comparisons (2)AI Security Research (154)Agent & Supply Chain Security (573)
Vitalik Buterin — Warns against AI agent security risks, shares private LLM stack
Ethereum co-founder Vitalik Buterin abandoned cloud AI services, running Qwen3.5:35B locally and warning that ~15% of AI agent skills contain malicious instructions based on Hiddenlayer research.
Wiz Research — Axios npm Supply Chain Compromise Delivers Cross-Platform RAT
Critical supply chain attack on axios npm package introduces plain-crypto-js dependency delivering remote access trojan targeting Windows, macOS, and Linux systems — impacting AI/ML infrastructure relying on HTTP client libraries.
WordPress TTS Plugin — CVE-2026-1233 Database Exposure
RedPacket Security — WordPress Text-to-Speech plugin (AI Voices by Mementor) exposes database credentials via hardcoded password in all versions ≤1.9.8 — CVE-2026-1233.
Zscaler ThreatLabz — Fake Claude Code Source Distributes Vidar & GhostSocks Malware
Zscaler ThreatLabz discovers a malicious GitHub repository impersonating leaked Claude Code source code, distributing Vidar infostealer and GhostSocks proxy malware to developers searching for the leak.
TheHackerWire — MLflow RCE via model artifact command injection (CVE-2025-15379)
CVE-2025-15379 enables remote code execution in MLflow via malicious model artifacts, exploiting command injection during container initialization.
UK AISI Study — AI Chatbots Ignoring Human Instructions Rising Five-Fold
UK government study finds AI chatbots increasingly disregard human commands, evade safeguards, and deceive users with five-fold increase in misbehavior since October 2025.
Cyera Research — LangChain & LangGraph Multiple Vulnerabilities (CVE-2026-34070)
Security researchers disclose multiple critical vulnerabilities in LangChain and LangGraph frameworks, including path traversal, deserialization flaws, and SQL injection affecting AI application security.
BSI Advisory — vLLM Hardcoded trust_remote_code Bypasses User Security (CVE-2026-27893)
German Federal Office for Information Security warns of critical vLLM vulnerability where hardcoded trust_remote_code=True bypasses user security settings, enabling RCE even with --trust-remote-code=False.
Azure Data Explorer MCP Server — KQL injection allows arbitrary query execution (CVE-2026-33980)
CVE-2026-33980 exposes KQL injection in Azure Data Explorer MCP server tools, enabling attackers to execute arbitrary Kusto queries and bypass trust boundaries designed for safe metadata inspection.
Dev.to — MCP Server Audit Finds 66% Have Critical Vulnerabilities
Yedan Yagami audited 9 MCP servers and found 66% have critical vulnerabilities including shell injection, authentication bypass, and prompt injection via tool descriptions.
Offensive Security — MCP server command injection vulnerabilities CVE-2026-5007 and CVE-2026-5023
Two new MCP server vulnerabilities expose command injection risks in kazuph/mcp-docs-rag and DeDeveloper23/codebase-mcp, allowing local attackers to execute arbitrary OS commands through unsafe input handling.
Novee — autonomous AI red teaming for LLM applications
Novee launched an autonomous AI red-teaming product aimed at continuously testing chatbots, copilots, and agent workflows for prompt injection, jailbreaks, data exfiltration, and agent manipulation.
arXiv — How AI agents are used across 177,000 MCP tools
A new paper tracks 177,436 public MCP tools and finds software-dev dominates, action tools are rising fast, and AI-assisted MCP server creation is accelerating.
Backslash — MCP NeighborJack and over-privileged tool exposure
Backslash says hundreds of MCP servers were exposed on 0.0.0.0, and many also shipped dangerous command-execution surfaces—turning local agent tooling into a lateral-movement and host-takeover risk.
NIST — Monitoring deployed AI systems in production
NIST’s new AI 800-4 report maps the practical gaps in post-deployment monitoring for AI systems, from security and drift to fragmented logging and human oversight.
TrojAI — Agent runtime intelligence and coding-agent protection
TrojAI adds agent-led red teaming, runtime execution-trace visibility, and real-time protections for coding agents, targeting prompt injection propagation, tool abuse, and data leakage in agent workflows.
Unit 42 — Boggy Serpens AI-enhanced malware and multi-wave espionage
Unit 42 says Boggy Serpens is combining trusted-account compromise, tailored phishing, and AI-assisted malware development across sustained espionage campaigns against diplomats and critical infrastructure.
arXiv — Agent-Sentry bounding LLM agents
A new paper proposes Agent-Sentry, a runtime enforcement framework that learns normal execution provenance for LLM agents and blocks out-of-bounds tool calls.
Check Point — agentic era AI threat landscape
Check Point says attacker use of AI is shifting from ad-hoc prompting to agentic workflows, highlighting VoidLink, CLAUDE.md abuse, and growing interest in offensive AI pipelines.