AI Sec Watch

New large language models (LLMs, AI systems trained on massive amounts of text) from Chinese companies are becoming competitive with leading US models. The article raises questions about whether cybersecurity defenders should be concerned about this development, though specific security implications are not detailed in the provided content.

Midjourney, an AI company known for image generation, has revealed more details about its experimental medical ultrasound scanner (a device that uses sound waves to create images inside the body) designed for spas, but has not yet provided convincing evidence that it actually works. The scanner combines multiple ultrasound probes with standard computers to attempt cheap, radiation-free medical imaging, though the technology remains largely unproven.

CVE-2026-13341 is a vulnerability in Kong Konnect MCP (Model Context Protocol, a system for standardized communication between AI models and tools) server versions before 1.0.0 that allows remote attackers to perform prompt injection attacks (tricking the AI by hiding malicious instructions in input) and execute unintended API requests (commands to interact with web services).

A threat actor exploited CVE-2025-3248 (a critical missing authentication vulnerability in Langflow, a Python framework for building AI-driven applications) to gain code execution on an exposed server, then used an agentic AI (an AI system designed to autonomously plan and execute multi-step tasks) to conduct reconnaissance, steal credentials, pivot to other systems, and deploy ransomware that encrypted databases. The AI adapted its actions in real time to overcome obstacles, demonstrating how LLM agents can lower the technical barrier for sophisticated cyberattacks.

Two critical vulnerabilities (CVE-2026-50548 and CVE-2026-50549, with CVSS score of 9.8, a 0-10 severity rating) in the Cursor AI code editor could allow attackers to execute code at the operating system level by exploiting the editor's automatic command execution without user approval. The first flaw allows attackers to change the working directory to bypass the sandbox (a restricted environment where code runs safely), while the second uses symbolic links (special files that point to other files) to write files outside the intended project directory and disable sandbox protections.

Anthropic clarified that Claude Fable 5 (its most powerful AI model) will move from subscription plans to usage-based billing (a pay-per-use system where you pay for each query) after July 7, but this is temporary, not permanent. The company plans to restore Fable 5 as a standard subscription feature once it has enough computing capacity to handle the high demand.

Claude Fable, a powerful AI model, was relaunched after a government ban was lifted, but users report it performs worse than before due to overly strict safety guardrails (automated rules that prevent certain outputs). The model frequently switches to a weaker alternative (Opus 4.8) even on tasks that don't seem risky, and it blocks requests containing security-related language, making it less useful for many coding tasks.

CVE-2026-45499 is a server-side request forgery vulnerability (SSRF, a flaw where an attacker tricks a server into making unwanted network requests) in Azure OpenAI that allows an authorized attacker to gain elevated privileges over a network. The vulnerability has a CVSS score (severity rating from 0-10) that has not yet been assigned by NIST. Microsoft has published information about this vulnerability on their security update page.

CVE-2026-41106 is an open redirect vulnerability (a flaw where a website redirects you to an untrusted site) in Microsoft 365 Copilot that allows an attacker to gain unauthorized elevated privileges (higher access levels) over a network. The vulnerability has a CVSS score (severity rating) of 4.0. This is an exclusive service issue affecting Microsoft 365 Copilot users.