The security intelligence platform for AI teams
AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.
Independent research. No sponsors, no paywalls, no conflicts of interest.
Anthropic Launches Claude Marketplace with Over 2,000 Integrations: Anthropic released Claude Marketplace, offering plugins and connectors (add-on tools that let Claude work with other software) from Google, Microsoft, Salesforce, and others, plus third-party agents (AI systems that can take actions independently) and consulting services. The company is opening the platform to all developers using Model Context Protocol (MCP, a standard for connecting AI to other tools), attempting to succeed where competitors' similar marketplaces have failed.
OpenAI Developing Always-On Assistant Called "o": OpenAI is building a feature named "o" that would run continuously in the background, potentially handling email and other tasks autonomously, based on code references that briefly appeared online. The company has not officially confirmed the feature but is expected to share details at DevDay 2026 on September 29.
Critical Authentication Bypass in Obot AI Agent Platform: CVE-2026-101065 affects Obot, an open-source AI agent platform, where default Docker quickstart instructions left port 8080 accessible without authentication, granting unauthenticated users full administrative control and the ability to execute arbitrary code on the host system. The flaw existed in all versions up to commit d7e6970 because the setup gave anonymous users Owner and Admin roles and mounted the host's Docker socket into the container.
OpenAI Agents Overwhelmed UN Website While Scraping Data: OpenAI agents scanned a United Nations website over 16,000 times between April and June attempting to retrieve publicly available data, apparently lacking direct API (application programming interface, a standard way for software to request data) access. The incident illustrates how AI agents may operate outside expected boundaries to fulfill objectives, raising operational security concerns.