Posts

Comment and Control — Prompt Injection to Credential Theft in Claude Code, Gemini CLI, and Copilot Agent

Aonan Guan demonstrates Comment and Control, a cross-vendor prompt injection class that hijacks AI coding agents on GitHub Actions via PR titles and issue comments to steal repository secrets and API keys.

Depthfirst — $80M Series B for AI Security Platform

Depthfirst secured $80M Series B funding to expand its AI-native security platform, training specialized models for enterprise cybersecurity and accelerating autonomous vulnerability discovery.

Microsoft — GitHub Copilot privacy policy shifts to opt-out AI training model

Google DeepMind — AI Agent Traps Taxonomy Reveals Six Critical Vulnerability Classes

griptape — Path traversal CVE-2026-5595 affects AI agent file operations

Harness Engineering — LangChain Guardrails Tutorial for Safe AI Agents

Comprehensive guide to implementing input validation, output filtering, and behavioral guardrails for LangChain AI agents to prevent prompt injection and policy violations.

Check Point — HexStrike AI MCP Server Command Injection

LangChain-ChatChat — RCE via MCP STDIO Server Configuration (CVE-2026-30617)

CVE-2026-30617 is a CVSS 8.6 RCE in LangChain-ChatChat 0.3.1 allowing unauthenticated remote attackers to execute arbitrary commands via MCP STDIO server configuration.

Langflow — Critical vulnerability CVE-2026-33309

Langflow CVE-2026-33309 enables attackers to compromise AI workflow application logic and underlying infrastructure, posing critical risks to AI agent deployment environments.

Lyptus Research — AI offensive cyber capabilities doubling every 6 months

Lyptus Research study finds AI offensive cyber capabilities doubling every 5.7 months, with Opus 4.6 and GPT-5.3 Codex achieving 50% success rates on complex security tasks.

Endor Labs — Marimo CVE-2026-39987 Pre-Auth RCE

Critical pre-authentication remote code execution vulnerability in Marimo Python notebook framework allows attackers to gain full shell access without authentication.

nginx-ui — MCPwn: Unauthenticated MCP Endpoint Leads to Full Server Takeover (CVE-2026-33032)

CVE-2026-33032 exposes an unauthenticated MCP endpoint in nginx-ui (CVSS 9.8), enabling full nginx server takeover. Actively exploited in the wild with public PoC.

Oasis Security — Claude.ai prompt injection & data exfiltration

Oasis Security details Claudy Day, a chain of Claude.ai vulnerabilities enabling invisible prompt injection via URL parameters, conversation history exfiltration via Files API, and Google Ads targeting.

OpenAI — ChatGPT DNS side channel data exfiltration vulnerability

OpenAI — GPT-5.4-Cyber lowers refusal boundary for defensive cybersecurity

OpenClaw Claude Bridge — Sandbox bypass allows arbitrary tool execution in spawned subprocesses (CVE-2026-39398)

CVE-2026-39398 exposes critical sandbox bypass vulnerability in openclaw-claude-bridge where --allowed-tools flag fails to restrict CLI tool access, enabling potential arbitrary command execution with CVSS 7.5 severity.

OpenClaw — Critical privilege escalation vulnerability CVE-2026-33579

OpenClaw CVE-2026-33579 allows attackers with basic pairing privileges to gain full administrative access, enabling complete instance takeover and data exfiltration — CVSS 8.1-9.8 severity.

OpenClaw Security Crisis — What 346K Stars & 135K Exposed Instances Teach Us

OWASP — GenAI Exploit Round-up Report Q1 2026

OWASP GenAI Security Project publishes its quarterly exploit round-up for Q1 2026, covering eight major AI security incidents from Claude-assisted government breaches to Flowise RCE and supply chain attacks.

Praetorian — Indirect Prompt Injection Bypasses LLM Supervisor Agents

Praetorian researchers demonstrate how indirect prompt injection via user profile fields bypasses supervisor agent detection in multi-model AI customer service systems.