Ars Technica — Moltbook prompt worms and viral prompt injection
Moltbook’s agent network shows how hidden prompt injections can propagate like worms, with real samples already observed in the wild.
Posts
High-signal AI/security/automation notes.
Filter: All AI Vulnerabilities & CVEs (287)Tools & Comparisons (2)AI Security Research (205)Agent & Supply Chain Security (687)
Endor Labs — MCP needs AppSec as classic vulns hit agent tooling
Levo — Launch Week 2026 adds AI firewall + MCP security testing
Trend Micro — OpenClaw’s Agentic Assistant Risk Map
Trend Micro maps OpenClaw vs. ChatGPT Agent and highlights prompt injection, data exfiltration, and supply-chain risks in agentic assistants.
arXiv — CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability
CVE-Factory converts sparse CVE metadata into executable agent tasks, enabling a continuously updated LiveCVEBench and large-scale training environments for agentic code-security systems.
Operant AI — Agent Protector for runtime agent security
Operant AI launches Agent Protector, a runtime security platform for discovering and governing autonomous AI agents across cloud, SaaS, and MCP toolchains.
Radware — Agentic AI Protection Solution launch
Radware announces Agentic AI Protection, a runtime security layer to detect prompt injection, tool abuse, and unauthorized data access in autonomous AI agents.
GitHub Advisory — godot-mcp command injection RCE (CVE-2026-25546)
CVE-2026-25546: command injection in godot-mcp (Model Context Protocol server) allows remote code execution via unsanitized projectPath; fixed in 0.1.1.
arXiv — Bypassing AI control protocols via Agent-as-a-Proxy attacks
Agent-as-a-Proxy attacks bypass monitoring defenses by using agents as delivery mechanisms that evade both the agent and its monitor.
arXiv — Learning to Inject: automated prompt injection via reinforcement learning
AutoInject uses reinforcement learning to generate transferable adversarial suffixes that boost prompt-injection success while preserving benign utility.
AuthMind — OpenClaw’s 230 malicious skills expose agentic supply-chain risk
AuthMind highlights how OpenClaw’s community skill ecosystem enabled malware-like behavior, data exfiltration, and prompt injection via popular skills and extensions.
Infosecurity Magazine — ZombieAgent zero-click prompt injection in ChatGPT connectors
Radware’s ZombieAgent technique shows how indirect prompt injection can silently exfiltrate data from ChatGPT connector targets using pre-built URLs and long-term memory persistence.
Darktrace — 2026 State of AI Cybersecurity Report: 76% of Security Pros Worried About AI Agent Risk
Darktrace 2026 report finds 76% of security professionals concerned about AI agent security implications, launches Darktrace/SECURE AI for enterprise AI governance and agent monitoring.
n8n — CVE-2026-25049: New Sandbox Escape Bypass Enables Full Server Takeover
A critical sandbox escape in n8n (CVE-2026-25049, CVSS 9.4) bypasses the December 2025 fix for CVE-2025-68613, letting any workflow author execute arbitrary system commands and steal every stored credential.
Noma Security — DockerDash: Prompt Injection in Docker Ask Gordon AI Enables RCE via Image Metadata
A critical flaw in Docker Ask Gordon AI assistant lets attackers embed prompt-injection payloads in Docker image LABEL fields, which the MCP Gateway executes without validation — enabling RCE and data exfiltration.
arXiv — ChatInject: abusing chat templates for prompt injection in LLM agents
ChatInject shows that formatting malicious payloads to mimic chat templates can significantly raise prompt-injection success rates in LLM agents, including multi-turn persuasion variants.
arXiv — Systematic Review of LLM Defenses Against Prompt Injection: Expanding NIST Taxonomy
ThreatDown — 2026 State of Malware: AI Drives Machine-Scale Cyberattacks
Zafran — ChainLeak: Chainlit AI Framework Bugs Enable Cloud Takeover
Two critical vulnerabilities in Chainlit (CVE-2026-22218 arbitrary file read, CVE-2026-22219 SSRF) let attackers steal cloud API keys and pivot into enterprise environments—no user interaction required.
Vectra AI — From Clawdbot to OpenClaw: Automation as a Backdoor
A deep dive into the security risks of autonomous AI agents like OpenClaw (formerly Moltbot/Clawdbot), detailing attack surfaces and hardening strategies.