aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDatasetFor devs
Subscribe
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

AI Sec Watch

The security intelligence platform for AI teams

AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.

Independent research. No sponsors, no paywalls, no conflicts of interest.

[TOTAL_TRACKED]
6,483
[LAST_24H]
35
[LAST_7D]
154
Daily BriefingTuesday, August 18, 2026
>

OpenAI Launches ChatGPT for Teens with Enhanced Safety Controls: OpenAI introduced a dedicated version of ChatGPT for users aged 13-17 with features including Study Mode (which prompts students to work through problems rather than providing direct answers), human-reviewed parental alerts for harmful requests like eating disorder content, and options to disable human-like voice responses. The rollout comes amid growing pressure on AI platforms to implement age verification and youth-specific protections.

>

LLMs Leak Sensitive Data When Using Persistent Memory: Research found that frontier LLMs (the most advanced current systems) inappropriately share private details from past conversations at rates up to 69% attribute-level violations, even when explicitly instructed to protect privacy. The findings reveal that models struggle to make context-appropriate decisions about what information to share, tending to either overshare or withhold everything rather than apply nuanced judgment.

Latest Intel

page 478/649
VIEW ALL
01

Why key management becomes the weakest link in a post-quantum and AI-driven security world

securitypolicy
Critical This Week5 issues
critical

GHSA-7gwp-5pfp-969j: MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

CVE-2026-64849GitHub Advisory DatabaseAug 17, 2026
Aug 17, 2026
>

AI Excels at Finding Zero-Days but Doubles Security Flaw Rates in Generated Code: While LLMs demonstrate growing capability in discovering zero-day vulnerabilities (previously unknown security flaws) and building exploits, AI-generated code contains security weaknesses at roughly twice the rate of human-written code, with 44% containing at least one OWASP Top 10 vulnerability (the most critical categories of code weaknesses). Despite 99% syntax correctness, the asymmetry between AI's offensive and defensive security capabilities remains unexplained.

Feb 13, 2026

Key management (the process of creating, storing, rotating, and retiring cryptographic keys throughout their lifetime) is often overlooked in organizations despite being critical to security, and this gap becomes even more dangerous as post-quantum cryptography (encryption designed to resist quantum computers) and AI systems become more widespread. The real challenge of post-quantum readiness is not choosing the right algorithm, but building operational ability to safely rotate and manage keys across systems without downtime. AI systems introduce additional risks because keys protect not just data access but also AI behavior and decisions, requiring tighter key controls and more frequent rotation than traditional applications need.

CSO Online
02

CVE-2026-1721: Summary A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the AI Playground's OAuth callback handl

security
Feb 12, 2026

A reflected XSS vulnerability (a type of attack where malicious code is injected into a website and executed in a user's browser) was found in the AI Playground's OAuth callback handler (the code that processes login responses). The vulnerability allowed attackers to craft malicious links that, when clicked, could steal a user's chat history and access connected MCP servers (external services integrated with the AI system) on the victim's behalf.

Fix: Agents-sdk users should upgrade to agents@0.3.10. Developers using configureOAuthCallback with custom error handling should ensure all user-controlled input is escaped (converted to safe text that won't be interpreted as code) before interpolation (inserting it into the HTML). A patch is available at PR https://github.com/cloudflare/agents/pull/841.

NVD/CVE Database
03

CVE-2026-26075: FastGPT is an AI Agent building platform. Due to the fact that FastGPT's web page acquisition nodes, HTTP nodes, etc. ne

security
Feb 12, 2026

FastGPT is an AI Agent building platform (software for creating AI systems that perform tasks) that has a security vulnerability in components like web page acquisition nodes and HTTP nodes (parts that fetch data from servers). The vulnerability allows potential security risks when these nodes make data requests from the server, but it has been addressed by adding stricter internal network address detection (checks to prevent unauthorized access to internal systems).

Fix: This vulnerability is fixed in version 4.14.7. Update FastGPT to version 4.14.7 or later.

NVD/CVE Database
04

Introducing GPT‑5.3‑Codex‑Spark

industry
Feb 12, 2026

OpenAI announced GPT-5.3-Codex-Spark, a smaller and faster version of their GPT-5.3-Codex model made through a partnership with Cerebras, designed for real-time coding tasks. The model processes text at 1,000 tokens per second (meaning it generates 1,000 words or word pieces per second) with a 128k context window (the amount of text it can consider at once), making it useful for iterative coding work where developers want to stay focused and make rapid changes. While the output quality is lower than the standard GPT-5.3-Codex, the speed enables better productivity for hands-on coding sessions.

Simon Willison's Weblog
05

langchain-core==1.2.12

security
Feb 12, 2026

Langchain-core version 1.2.12 was released with a bug fix for setting ChatGeneration.text (a property that stores generated text output from a chat model). The update addresses issues found in the previous version 1.2.11.

Fix: Update to langchain-core version 1.2.12, which contains the fix for the ChatGeneration.text setting issue.

LangChain Security Releases
06

Copilot Studio agent security: Top 10 risks you can detect and prevent

securitysafety
Feb 12, 2026

Copilot Studio agents, which are AI systems that automate tasks and access organizational data, often have security misconfigurations like being shared too broadly, lacking authentication, or running with excessive permissions that create attack opportunities. The source identifies 10 common misconfigurations (such as agents exposed without authentication, using hard-coded credentials, or capable of sending emails) and explains how to detect them using Microsoft Defender's Advanced Hunting tool and Community Hunting Queries. Organizations need to understand and detect these configuration problems early to prevent them from being exploited as security incidents.

Fix: To detect and address these misconfigurations, use Microsoft Defender's Advanced Hunting feature and Community Hunting Queries (accessible via: Security portal > Advanced hunting > Queries > Community Queries > AI Agent folder). The source provides specific Community Hunting Queries for each risk type, such as 'AI Agents – Organization or Multi-tenant Shared' to detect over-shared agents, 'AI Agents – No Authentication Required' to find exposed agents, and 'AI Agents – Hard-coded Credentials in Topics or Actions' to locate credential leakage risks. Each section of the source dives deeper into specific risks and recommends mitigations to move from awareness to action.

Microsoft Security Blog
07

Quoting Anthropic

industry
Feb 12, 2026

Anthropic announced that Claude Code, their AI coding tool released to the public in May 2025, has grown significantly, with run-rate revenue (the annualized income based on current performance) exceeding $2.5 billion and doubling since the start of 2026. The number of weekly active users has also doubled in just six weeks, as part of a $30 billion funding round.

Simon Willison's Weblog
08

How to deal with the “Claude crash”: Relx should keep buying back shares, then buy more | Nils Pratley

industry
Feb 12, 2026

The "Claude crash" refers to a sharp drop in stock prices for UK data companies like Relx and the London Stock Exchange Group after Anthropic's Claude AI added legal research plug-ins to its office assistant, sparking market fears that AI tools will reduce demand for traditional data services and hurt profit margins. The article discusses how these companies' market valuations have fallen despite the broader stock market remaining near record highs.

The Guardian Technology
09

Gemini 3 Deep Think

industry
Feb 12, 2026

Google released Gemini 3 Deep Think, a new AI model designed to tackle complex problems in science, research, and engineering. The model demonstrated strong image generation capabilities by creating detailed SVG (scalable vector graphics, a format for drawing images with code) illustrations of a pelican riding a bicycle, including accurate anatomical details when given more specific instructions.

Simon Willison's Weblog
10

Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support

security
Feb 12, 2026

Google reported that North Korean hackers (UNC2970) and other state-backed groups are using Google's Gemini AI model to speed up cyberattacks by conducting reconnaissance (information gathering about targets), creating fake recruiter personas for phishing (deceptive emails tricking people into giving up passwords), and automating parts of their attack process. Multiple hacking groups from China, Iran, and other actors are also misusing Gemini to analyze vulnerabilities, generate malware code, and harvest credentials from victims.

The Hacker News
Prev1...476477478479480...649Next
critical

CVE-2026-75110: MemOS is a memory operating system for LLMs and AI agents. In deployments where authentication is enabled (AUTH_ENABLED=

CVE-2026-75110NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026
critical

CVE-2026-64859: New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-

CVE-2026-64859NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026
critical

CVE-2025-27772: UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

CVE-2025-27772NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026
critical

CVE-2025-27771: UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `

CVE-2025-27771NVD/CVE DatabaseAug 17, 2026
Aug 17, 2026