AI Sec Watch

Meta has launched a new AI model called Muse Spark, designed specifically to work with Meta's products like WhatsApp, Instagram, Facebook, and Messenger. The model is now available in the Meta AI app and website in the US, with plans to expand to other countries and Meta's smart glasses in the coming weeks.

This article appears to be a webpage footer or navigation section from CNBC rather than substantive content about AI security or technology. It does not contain specific information about an AI or LLM-related issue, vulnerability, or technical problem.

LobeHub's webapi routes use a client-controlled header called `X-lobe-chat-auth` for authentication, but it's only XOR-obfuscated (a simple reversible encoding) with a hardcoded key that's visible in the code. An attacker can forge this header to bypass authentication and access protected routes like chat, model listing, and image generation without logging in, potentially using the server's API credentials or impersonating other users.

NiceGUI has a security flaw where file upload names aren't properly cleaned on Windows. An attacker can use backslashes in filenames to bypass the sanitization check, which only recognizes forward slashes as path separators. This allows them to write files outside the intended upload folder, potentially overwriting important files or running malicious code. Linux and macOS are not affected because they treat backslashes as regular characters in filenames.

OpenAI reports that enterprise AI adoption has reached a critical phase, with enterprise revenue now exceeding 40% of their business and AI systems handling real work across major companies like Goldman Sachs and Uber. The company is positioning itself as the core infrastructure for enterprise AI by offering Frontier, a unified operating layer that allows AI agents to work across a company's systems, data sources, and tools while maintaining proper permissions and controls, rather than operating as isolated point solutions (individual AI tools that don't connect to each other).

OpenAI, despite recently raising $122 billion in funding and achieving brand recognition similar to "Kleenex," is facing questions about its stability due to recent executive departures, canceled projects, and other organizational changes. The company's position as the leader in consumer-facing AI tools like ChatGPT may be at risk as it navigates these internal challenges and prepares for a potential IPO.

Flowise, a low-code platform for building custom AI workflows, has a critical vulnerability (CVE-2025-59528, CVSS 10.0) where attackers can inject malicious JavaScript code through improperly validated configurations in the Custom MCP node (a plugin that lets AI agents connect to external tools). Hackers have already begun exploiting this flaw against thousands of exposed Flowise instances since April 6, 2025.

Research from Irregular and Kaspersky shows that all frontier LLMs (large language models, AI systems trained on massive amounts of text) generate passwords that are structurally predictable and much weaker than they appear. When Claude Opus 4.6 was asked to generate passwords 50 times, only 30 distinct passwords emerged, with one password repeating 36% of the time, proving the model retrieves patterns from training data rather than creating truly random passwords. The core problem is architectural: LLMs assign high probability to the most plausible next character based on patterns they learned (like uppercase letters at the start), while cryptographic systems (secure random number generators) must give every character equal probability, making LLM-generated passwords vulnerable to attackers who understand how these models work.

Zero-day vulnerabilities (security flaws unknown to vendors and defenders) are becoming more dangerous and frequent because agentic AI (artificial intelligence systems that can act independently, plan steps, and adjust tactics) automates the process of finding new vulnerabilities at machine speed, compressing the time between discovery and exploitation. Traditional security approaches like annual penetration tests and quarterly scans are no longer sufficient when attackers can probe continuously and adapt quickly without human intervention.