The security intelligence platform for AI teams
AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.
Independent research. No sponsors, no paywalls, no conflicts of interest.
Critical RCE in Cortex MCP Server: CVE-2026-49986 affects the Cortex MCP server (a tool enabling AI assistants like Claude to access persistent memory across projects) before version 3.17.1, allowing arbitrary Python code execution when an attacker plants malicious files in a repository and the `open_visualization` tool is invoked. The vulnerability stems from inadequate validation of project directories set by Claude Code, enabling attackers to run commands with user privileges.
Cyera Acquires Oasis Security for $1 Billion to Unify AI Agent Controls: Cyera's acquisition of Oasis Security combines data security and identity management into a unified control system for AI agents (autonomous software programs), shifting from fixed permission roles to context-aware access based on business needs.
OpenAI Faces Executive Exodus Ahead of IPO: OpenAI is experiencing significant departures of senior leadership, including Chief Revenue Officer Denise Dresser and Operating Chief Brad Lightcap, as the company prepares for its initial public offering. Industry observers view the exits as a potential warning sign that could undermine investor confidence amid intensifying competition from Google and Anthropic.
Google Enables Watermark Removal for Gemini-Generated Media: Google now allows users to disable visible watermarks on AI-generated images, videos, and music in Gemini and Flow, though invisible SynthID watermarks and C2PA metadata (hidden markers tracking AI-generated content) remain embedded in all outputs.