Posts
High-signal AI/security/automation notes.
Filter: All AI Vulnerabilities & CVEs (357)Tools & Comparisons (2)AI Security Research (210)Agent & Supply Chain Security (713)
Bitwarden CLI Compromised — Shai-Hulud Campaign Targets AI Coding Assistants
A malicious Bitwarden CLI package stole credentials from Claude, Cursor, Codex CLI, Kiro, and Aider configs — part of a broader Checkmarx supply chain campaign.
Foresiet — Meta AI Agent Hallucinates Permissions, Exposes Internal Data
An internal Meta AI agent hallucinated incorrect permission scopes and exposed headcount projections and unreleased product timelines — no external attacker involved.
Google — 32% Rise in Indirect Prompt Injection Attacks Found Across Public Web
Google researchers scanned billions of pages in Common Crawl and found a 32% increase in malicious indirect prompt injection attempts between November 2025 and February 2026, with data exfiltration and destructive payloads in the wild.
Mozilla — 271 Vulnerabilities Found in Firefox 150 by Claude Mythos Preview
OpenAI GPT-5.5 Launches With Agentic Safeguard Delays and Bio Bug Bounty
OpenAI releases GPT-5.5 rated High cybersecurity risk, delays API access pending agentic security measures, and launches a $25K bio jailbreak bounty.
OpenClaw — Three Flaws Enable Policy Bypass and API Credential Theft
OpenClaw versions before 2026.4.20 ship with three vulnerabilities that let prompt-injected models bypass gateway guardrails, evade restrictive tool policies, and steal MiniMax API keys via workspace .env files.
Vercel Breach Traced to Lumma Stealer via Roblox Cheats, CEO Cites AI-Accelerated Attackers
arXiv — Behavioral Transfer in AI Agents Reveals Privacy Risks at Scale
The DFIR Report — Bissa Scanner: AI-Assisted Mass Exploitation
The DFIR Report exposes Bissa Scanner, an operation using Claude Code and OpenClaw to automate React2Shell exploitation and harvest tens of thousands of credentials.
CrowdStrike — 90+ Organizations Hit by AI Security Tool Hijacking
Cursor and Chainguard — Securing the AI Agent Supply Chain
Cursor partners with Chainguard to embed hardened container images and malware-resistant library versions directly into agentic coding workflows, routing dependency resolution away from vulnerable public registries.
Forcepoint X-Labs — 10 In-the-Wild Indirect Prompt Injection Payloads Targeting AI Agents
Forcepoint researchers found 10 verified indirect prompt injection payloads on live websites, ranging from financial fraud and API key theft to recursive data destruction.
SilverFort — Microsoft Entra Agent ID Administrator Scope Overreach
GitGuardian — Three Supply Chain Campaigns Hit npm, PyPI, and Docker Hub in 48 Hours
Three coordinated supply chain attacks struck npm, PyPI, and Docker Hub between April 21–23, 2026 — all targeting developer and CI/CD credentials.
360 Digital Security — AI Agents Find ~1,000 Vulnerabilities, Echoing Claude Mythos
arXiv — GAAP: An AI Agent Execution Environment to Safeguard User Data
New arXiv paper presents GAAP, an agent execution environment that deterministically enforces user-specified data-sharing policies without trusting the agent or LLM.
arXiv — Morality Attacks Jailbreak Both LLMs and Guardrail Models
ACL 2026 Findings paper demonstrates that LLMs and guardrail models are vulnerable to moral-value manipulation attacks, exploiting pluralism alignment to bypass safety filters.
Bishop Fox Releases "Otto Support" MCP Security CTF
Bishop Fox published otto-support, an open-source vulnerable MCP server CTF with 19 tools across 4 privilege levels for hands-on AI agent security training.