AI Sec Watch

Moonshot AI, a Chinese startup, released its Kimi K3 model, which it claims performs competitively with leading AI systems from OpenAI and Anthropic, though it still trails their most advanced offerings overall. The model, containing 2.8 trillion parameters (adjustable numbers that determine how an AI model behaves), achieved strong performance on benchmarks despite hardware constraints in China. This release reflects intensifying competition between U.S. and Chinese AI companies, as Chinese models are becoming cheaper alternatives and gaining adoption among Western businesses.

The AI Copilot WordPress plugin before version 1.5.4 has a security flaw where OAuth access tokens (temporary credentials that grant access to accounts) are not properly tied to specific WordPress users, allowing attackers who complete the public login process to gain administrator privileges and perform dangerous actions like creating new users or changing user permissions.

Senior executives are using shadow AI (unapproved AI tools not officially authorized by their company) at nearly twice the rate of lower-level employees, even though most know it creates security and data privacy risks. The problem stems not from ignorance but from executives choosing speed over compliance, and from approved tools being less useful than mainstream alternatives.

Microsoft CEO Satya Nadella criticized Anthropic's Fable AI model for being "editorially controlled," saying it refuses too many user requests and doesn't function like a proper creation tool. Anthropic has acknowledged the issue, stating that its safeguards for Fable flag a slightly higher fraction of harmless requests than intended, and the company said it was trying to reduce false positives when it released Fable 5 in June.

Quicly is a library that implements the QUIC protocol (a modern internet communication standard) for the H2O web server. Before a certain code update, an attacker could send specially crafted network messages that trick the server into allocating huge amounts of memory using very few packets, potentially causing a denial of service (making the service unavailable by exhausting its resources).

Agentic AI (artificial intelligence systems that can independently plan and take actions to accomplish goals) presents significant security risks that organizations need to address, regardless of external attackers. The article argues that the security challenges posed by agentic AI are substantial enough to require a fundamental rethinking of how organizations approach AI safety.

Over one million emails have used a technique called text salting (hiding extra characters or text that humans don't see but can confuse AI systems) to bypass AI-based email security filters, allowing phishing emails (messages designed to trick people into revealing sensitive information) to reach inboxes undetected. The research shows that AI and LLMs (large language models, which are AI systems trained on massive amounts of text) are surprisingly weak against this evasion method.

A flaw in Anthropic's Claude Chrome extension allows a malicious extension to trigger Claude's predefined AI workflows by simulating user clicks, potentially abusing Claude's access to Gmail, Google Docs, Google Calendar, and Salesforce. The vulnerability exists because the Claude extension accepts JavaScript-generated click events without verifying they came from a real user by checking the Event.isTrusted property (a browser flag that distinguishes genuine user actions from programmatically created ones). An attacker would need to trick a user into installing a malicious extension that can then execute these workflows without the user's knowledge.

Alphabet's Gemini 3.5 Pro AI model is delayed by months because the company wants to improve its performance, especially its ability to generate software code, which fell short of internal expectations. The delay comes as competitors like OpenAI and Meta have released newer AI models that outperform Google's current offerings at code generation, causing Alphabet's stock to drop 4%.