aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDatasetFor devs
Subscribe
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

AI Sec Watch

The security intelligence platform for AI teams

AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.

Independent research. No sponsors, no paywalls, no conflicts of interest.

[TOTAL_TRACKED]
6,425
[LAST_24H]
6
[LAST_7D]
161
Daily BriefingFriday, August 14, 2026
>

OpenAI's Enterprise Revenue Surpasses Consumer Business: OpenAI's CFO disclosed that enterprise sales now exceed consumer revenue, crossing 50% of the company's $40 billion annualized run rate earlier than anticipated. The shift reflects enterprises moving from untracked employee AI usage toward measuring cost per unit of intelligence delivered.

>

Cyera Acquires Oasis Security for $1 Billion to Unify AI Agent Controls: Cyera purchased Oasis to merge data security and identity management into a single control plane for AI agents (autonomous software programs that act on behalf of users), enabling context-based access decisions rather than static permission roles.

>

Latest Intel

page 145/643
VIEW ALL
01

Daybreak: Tools for securing every organization in the world

securityindustry
Critical This Week5 issues
critical

CVE-2026-49986: The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats th

CVE-2026-49986NVD/CVE DatabaseAug 14, 2026
Aug 14, 2026

Critical RCE in Cortex MCP Server Enables Code Execution via Malicious Repositories: CVE-2026-49986 affects Cortex MCP server (a tool providing persistent memory to AI assistants like Claude) versions before 3.17.1, where insufficient validation of project directories allows attackers to execute arbitrary Python code by placing malicious files in a repository that trigger when the visualization tool is invoked. The vulnerability carries critical severity and runs with user privileges.

>

Anthropic Deploying Invisible Text Watermarks in Claude for EU Compliance: Anthropic is embedding undetectable watermarks in Claude's output by subtly biasing word selection during generation using a secret key, creating verifiable patterns without degrading text quality. The implementation addresses EU regulatory requirements mandating identification of AI-generated content.

Jun 22, 2026

OpenAI is expanding Daybreak, a set of tools that uses AI models to help organizations discover and fix software vulnerabilities (security flaws in code) at scale. The initiative includes Codex Security (which automates finding and patching vulnerabilities), GPT-5.5-Cyber (a specialized AI model for cybersecurity tasks), and Patch the Planet (a program partnering with open-source projects to move from identifying vulnerabilities to fixing them).

Fix: OpenAI's Codex Security plugin 'implements what we've learned from internal and customer usage of our models into a solution to accelerate the process of discovering and patching vulnerabilities in existing systems as well as automatically preventing new vulnerabilities from ever reaching production.' Additionally, Daybreak provides tools to 'validate vulnerabilities, prioritize risk, generate and test fixes, and produce evidence inside existing security and development workflows.'

OpenAI Blog
02

Anatomy of a retail ransomware attack: Tabletop simulates modern mayhem methods

securitysafety
Jun 22, 2026

A cybersecurity tabletop exercise (a simulated attack-and-defense training scenario) showed how attackers might target a fictional supermarket's AI-powered supply chain system by exploiting weak credentials, poor network segmentation, and employee access to cause both operational damage and reputational harm through data leaks and disinformation. The attackers used stolen developer credentials, weak multi-factor authentication (a security method requiring multiple ways to verify identity), and phishing (fraudulent messages tricking people into revealing passwords) to breach systems, then deployed tactics like flooding the company with false security alerts, spreading deepfakes (AI-generated fake videos), and spreading misinformation on social media to amplify disruption.

Fix: The defenders established out-of-band communications channels (communication methods outside the normal network) to counteract the thousands of false alerts generated by attackers.

CSO Online
03

Why Southeast Asia CISOs Need Zero Trust as Their AI Control Plane – AI Agents, Data Borders and Supply Chains

securitypolicy
Jun 21, 2026

AI agents are becoming workers inside organizations in Southeast Asia, while regulators enforce strict data residency rules and supply chain attacks threaten businesses. Zscaler proposes extending Zero Trust Exchange (a security model that verifies every access request, even from trusted sources) and SASE (Secure Access Service Edge, a cloud-based security platform) to protect AI agents alongside users and devices. The approach includes an AI Broker that inspects AI prompts and responses, endpoint security to find risky AI tools, and access mapping to track how AI uses data across cloud and on-premise systems.

Fix: The source explicitly describes Zscaler's technical solutions but does not frame them as fixes to a specific vulnerability or bug. Instead, they are presented as proactive security architecture recommendations. The key components mentioned are: (1) An AI Broker with an Agent Registry that inspects prompts and responses and enforces least-privilege access in real time; (2) Endpoint AI Security to expose risky local AI tools, browser extensions, and plugins; (3) An AI Access Graph and AI Protect that map AI assets, model usage, and data flows, backed by red-teaming, prompt hardening, and guardrails for more than 250 GenAI apps; and (4) Zero Trust B2B Exchange for policy-controlled partner access. N/A -- no patch, vulnerability fix, or incident mitigation is discussed in source.

CSO Online
04

Samsung Electronics brings ChatGPT and Codex to employees

industry
Jun 21, 2026

Samsung Electronics is deploying ChatGPT Enterprise and Codex (an AI tool that can write and review code) to all its employees in Korea and worldwide in its Device eXperience division, making this one of OpenAI's largest enterprise deployments. The company plans to use these tools across research, manufacturing, marketing, and other departments to improve employee productivity and problem-solving. ChatGPT Enterprise includes security features like data protection and access management so Samsung employees can use AI safely within company policies.

OpenAI Blog
05

Temporary Cloudflare Accounts for AI agents

industry
Jun 21, 2026

Cloudflare launched a feature that lets users deploy applications using Cloudflare Workers (a serverless computing platform) without creating an account by running a command that creates a temporary project lasting 60 minutes. The temporary deployment can be converted to a permanent project if the user claims it before the time expires.

Simon Willison's Weblog
06

CVE-2026-56340: vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because P

security
Jun 20, 2026

vLLM (a system for running large language models) versions 0.10.2 through 0.12.x lack proper validation of sparse tensors (data structures with mostly empty values) when processing multimodal embeddings (numerical representations combining text and images). An attacker can send malicious embedding requests with invalid tensor indices to crash the system, exhaust resources, or potentially corrupt memory if the prompt-embeds feature is enabled.

NVD/CVE Database
07

CVE-2025-71379: vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabilities. Severa

security
Jun 20, 2026

vLLM versions 0.6.3 through 0.9.0 contain ReDoS (regular expression denial of service, where specially crafted text causes regex patterns to consume excessive CPU time) vulnerabilities in several components including the LoRA utility parser, phi4mini tool parser, and OpenAI chat endpoint. An attacker can send malicious input with nested or repeated structures to trigger severe CPU consumption and make the service unavailable.

NVD/CVE Database
08

The Atlantic created a searchable database of the music used to train AI

privacysecurity
Jun 20, 2026

A reporter at The Atlantic discovered four publicly available datasets containing millions of songs (totaling between 100,000 and 12 million tracks each) that are being used to train AI models. These datasets have been downloaded thousands of times, and companies like Google and Stability have confirmed using them in their research, raising questions about how music is used in AI training without always crediting or compensating artists.

The Verge (AI)
09

Microsoft links Mastra AI supply chain attack to North Korean hackers

security
Jun 20, 2026

North Korean hackers from the Sapphire Sleet group compromised an npm maintainer account (a person's credentials for publishing packages to npm, a JavaScript library repository) and used it to publish malicious updates to over 140 packages, injecting a fake dependency called "easy-day-js" that stole credentials, API keys, and cryptocurrency wallet information from developers' computers. The malware used a post-install hook (code that runs automatically when a package is installed) to download and execute additional harmful software, with different persistence techniques for Windows, Linux, and macOS systems.

BleepingComputer
10

Lloyds Banking Group to hire 300 tech experts to work on AI

industry
Jun 20, 2026

Lloyds Banking Group is hiring 300 tech experts to work on agentic AI (autonomous artificial intelligence models that can plan and execute tasks with minimal human oversight) by September. While this hiring increases the bank's workforce now, the article notes that broader adoption of AI in the future could potentially lead to job cuts.

The Guardian Technology
Prev1...143144145146147...643Next
critical

CVE-2026-19297: IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to

CVE-2026-19297NVD/CVE DatabaseAug 13, 2026
Aug 13, 2026
critical

CVE-2026-73656: Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.6, POST /api/v1

CVE-2026-73656NVD/CVE DatabaseAug 13, 2026
Aug 13, 2026
critical

CVE-2026-73487: Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows una

CVE-2026-73487NVD/CVE DatabaseAug 13, 2026
Aug 13, 2026
critical

CVE-2026-73485: Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated atta

CVE-2026-73485NVD/CVE DatabaseAug 13, 2026
Aug 13, 2026