AI Sec Watch

text-generation-inference (a tool for running AI text models) versions up to 3.3.7 have a server-side request forgery vulnerability (SSRF, where an attacker tricks a server into making requests to places it shouldn't) in its chat feature that lets unauthenticated attackers supply malicious image URLs to make the server fetch data from internal systems, cloud metadata endpoints, or scan ports. The vulnerability exists because the code doesn't validate whether URLs point to private or internal addresses, and the HTTP client automatically follows redirects, letting attackers bypass security checks.

The Bedrock AgentCore Python SDK (a library for building AI agents on Amazon's platform) has a vulnerability where OpenTelemetry spans (data that tracks what a program is doing) were writing unfiltered user prompts and AI responses to CloudWatch logs (AWS's logging service). This meant that anyone with read access to those logs could see potentially sensitive information. The vulnerability affects versions 1.4.8 and 1.5.0.

Kiota, a tool that generates HTTP client code from API descriptions, had a security flaw in versions before 1.32.5 where it didn't properly validate file paths when creating plugin files. This allowed attackers to include specially crafted file paths that could access files outside the intended directory (path traversal, where attackers use ../ to escape folders) or include files from unexpected locations when the generated plugin was deployed.

Teens are increasingly using AI tools like ChatGPT for learning and productivity, and denying them access would leave them unprepared for a defining technology of their time. OpenAI has implemented protections specifically for teens, including automated guardrails (safety rules that trigger automatically), age prediction, parental controls, and learning features like Study Mode (a tool that guides students through problems step-by-step with questions rather than just giving answers) to help them benefit from AI safely.

Google is renaming its AI note-taking app from NotebookLM to Gemini Notebook, though it will continue operating as a separate application. The app, originally called Project Tailwind when announced in May 2023, has added features over time that use AI to help organize and summarize notes, including converting them into AI podcasts and video clips.

AI agents can perform multi-step tasks across multiple systems without individual human approval for each step, which creates identity and authorization challenges. When agents operate without proper managed identity (a secure way to identify an agent) and least-privilege RBAC (role-based access controls, which limit what each agent can do), they may access or modify sensitive data beyond their intended permissions. Organizations are deploying these agent capabilities faster than their security models can evolve, leading to risks like unauthorized data access, unintended modifications, and gaps in auditability (the ability to track who did what).

xAI, Elon Musk's AI company, has sued a South Carolina man for allegedly misusing their AI system called Grok to create child sexual abuse material. This is one of the first lawsuits an AI company has filed against a user for this type of misuse, with xAI claiming the user violated their terms of service.

Andrew Dai, a former Google DeepMind researcher, founded Elorian and raised $55 million at a $300 million valuation to build visual AI models (systems that can understand and reason about images and video). Dai argues that while AI has made strong progress in math, physics, and coding, visual understanding remains an underdeveloped area, and he aims to advance toward visual AGI (artificial general intelligence, a hypothetical AI that can handle any intellectual task). The article focuses on his fundraising strategy and lessons for founders pitching complex AI ideas to investors.

AI has made developers and security teams more productive, but the same capabilities that make AI useful for legitimate work also make it powerful for attackers. Check Point's 2026 AI Security Report highlights that organizations should appreciate AI's benefits while being realistic about the security risks it introduces.