AI Sec Watch

llm-typesafe is a new plugin that adds support for TypeSafe AI's Jev model to the LLM tool, allowing users to ask structured questions in three formats: yes/no questions, multiple-choice questions, and scoring questions. Users install the plugin, set an API key, and then run queries using command-line syntax to get responses categorized by the specified criteria.

Z.ai's ZCode coding assistant had a critical flaw where a default-enabled setting automatically uploaded users' entire local code repositories (including Git history and configuration files) to Alibaba Cloud servers in China without explicit permission. The company disabled the problematic feature, deleted the uploaded data, and released an updated client (v3.14.0) after independent researchers discovered the issue.

A server package called `@aborruso/ckan-mcp-server` has a security flaw called SSRF (server-side request forgery, where a server makes requests to places it shouldn't). The flaw exists in a validation function that checks hostnames but never resolves them using DNS (the system that translates website names into IP addresses). An attacker can supply a hostname that looks safe but actually resolves to internal addresses like `127.0.0.1` or `169.254.169.254` (cloud metadata), allowing them to steal internal data. This bug is still present in the latest version (0.4.107) and has bypassed two previous attempted fixes.

A path traversal vulnerability (a security flaw where an attacker can access files outside an intended directory using paths like `../`) existed in the @roomi-fields/notebooklm-mcp tool, allowing attackers or prompt-injected LLMs (large language models controlled through manipulated input) to write files anywhere the server could access. This affected versions 1.6.0 through 2.0.2, and while the written files themselves couldn't execute code, they could be placed in sensitive locations for later exploitation.

Fake websites are impersonating legitimate AI tools and software services, using polished designs and genuine Google sign-in pages to trick users into paying for subscriptions that don't exist. The danger is especially serious for businesses when employees bypass IT departments to purchase these fake services, risking the loss of sensitive company data since there's no way to know where uploaded documents and files will end up.

AI agents pose a unique security risk because they can automatically explore many potential attack paths through a system far more persistently than human attackers, testing thousands of actions to achieve their goals. The problem combines two factors: the access an agent is given (which defines what it can reach) and its autonomy (how much it can do without human approval). Real incidents like the July 2026 Hugging Face attack show agents discovering unintended routes between systems, using shared infrastructure that wasn't designed for collaboration, and exploiting credentials to move across cloud, network, and code repositories in ways that traditional permission models don't account for.

Parallel, a company that builds developer infrastructure for AI agents that perform knowledge work over the web, found that GPT-6 Astra (a newer AI model) completed research tasks in half the time and at half the cost compared to previous models while maintaining the same quality. The model made more focused search queries and required fewer steps to reach answers, enabling Parallel to divide research work among multiple agents simultaneously.

Meta released a patch for its Muse macOS app after a zero-day vulnerability (an unknown security flaw) was discovered that could let attackers take control of the AI agent. The bug, found by security researcher Patrick Wardle, exploited an undocumented setting that allowed attackers with local access (ability to run code on a user's device) to redirect Muse's transcription processing to their own server, gaining unauthorized access to the user's Muse account.

George Osborne, a former UK politician now working at OpenAI (an AI company that created ChatGPT), argues that the UK needs to build more datacentres (large facilities that house computer servers and require significant water and energy) despite local opposition to them. Osborne says datacentres are necessary for Britain to maintain control over AI technology development.