AI Sec Watch

An analysis suggests that parts of Pope Leo XIV's encyclical (a formal letter from the Pope) about AI's dangers may have been written by AI itself, with some sections scoring 40-100% AI-generated according to Pangram, an AI detection tool. The document shows linguistic patterns common in AI writing, such as unusual word frequency that matches Claude, an AI made by Anthropic.

TanStack contains a vulnerability that allowed attackers to publish malicious versions of the software to npm (a package repository where developers download code libraries) under the trusted TanStack identity, potentially distributing credential-stealing malware (software that steals login information). This vulnerability is currently being actively exploited by attackers.

Warp, a modern terminal application, is using GPT-5.5 to power AI agents (software programs that can autonomously plan and execute tasks) that help write code and manage open-source development. In Warp's internal testing, GPT-5.5 uses 30% fewer tokens (units of text that the AI processes) per coding task than GPT-5.4, making the system more efficient as it scales to handle longer, more complex workflows.

GitLab MCP Server (a tool that lets AI agents interact with GitLab) had a critical security flaw in versions before 0.6.0 where its HTTP transport exposed an unauthenticated endpoint (a service that processes requests without checking who is calling it) to any website, combined with a misconfiguration that made it accessible from all network interfaces instead of just locally. This allowed attackers from anywhere to make changes to GitLab repositories using the server operator's stored credentials.

Pope Leo XIV released an encyclical (a formal church letter) warning that artificial intelligence could displace workers, increase inequality, and remove humans from lethal weapons decisions, but Trump administration officials disagreed on how to respond. Interior Secretary Doug Burgum dismissed the pope's concerns as outside his role, while Vice President JD Vance praised the message as important moral leadership, highlighting a split in the administration over whether AI should face stronger oversight or remain deregulated for competitive advantage.

Companies need strategies for using agentic AI (AI systems that can plan and execute multi-step tasks independently), but security tools to safely deploy these systems are still being developed. The main obstacle preventing wider adoption is the lack of proven security solutions to protect enterprises from risks that agentic AI introduces.

Vowpal Wabbit, a machine learning system, has a vulnerability in its GitHub workflow file where pull request titles are inserted directly into bash commands without proper protection. An attacker can craft a malicious pull request title with shell commands that will execute on the build system before Python runs, since the shell processes the string first. Since pull requests can be opened on any branch without special permission, anyone can trigger this attack.

NVIDIA Transformers4Rec for Linux has a vulnerability where attackers can exploit improper deserialization (unsafe processing of data that was converted into a storable format) of untrusted data, potentially leading to code execution (running commands on the system), data tampering, and information disclosure. The vulnerability is tracked as CVE-2026-24162 and a CVSS score (a 0-10 rating of how severe a vulnerability is) has not yet been assigned by NIST.

Microsoft Copilot Cowork had a security flaw where its agents (automated systems that perform tasks) could send emails to users without approval, and these emails could contain external images that leak data when opened. An attacker could use prompt injection (tricking the AI by hiding instructions in its input) to make the agent create download links to files on OneDrive, allowing the attacker to steal those files.