aisecwatch.com
DashboardVulnerabilitiesNewsResearchArchiveStatsDataset
aisecwatch.com

Real-time AI security monitoring. Tracking AI-related vulnerabilities, safety and security incidents, privacy risks, research developments, and policy changes.

Navigation

VulnerabilitiesNewsResearchDigest ArchiveNewsletter ArchiveSubscribeData SourcesStatisticsDatasetAPIIntegrationsWidgetRSS Feed

Maintained by

Truong (Jack) Luu

Information Systems Researcher

AI Sec Watch

The security intelligence platform for AI teams

AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.

[TOTAL_TRACKED]
2,727
[LAST_24H]
45
[LAST_7D]
183
Daily BriefingWednesday, April 1, 2026
>

Attack Surface Management Tools Now Using AI Agents: A new buying guide highlights that Cyber Asset Attack Surface Management (CAASM) and External Attack Surface Management (EASM) tools are increasingly using agentic AI (AI systems that can take independent actions) to automatically find and reduce security risks across a company's digital resources.

Latest Intel

page 99/273
VIEW ALL
01

All the important news from the ongoing India AI Impact Summit

industry
Feb 19, 2026

India is hosting a major AI Impact Summit attracting executives from major AI companies and tech firms to drive investment and innovation in the country. The event showcases significant AI development activity, including new investments in Indian AI startups, partnerships between international AI companies and Indian firms, and announcements of local AI infrastructure projects, while also highlighting concerns about AI's potential impact on traditional IT services jobs.

Critical This Week5 issues
critical

CVE-2026-34162: FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint (/api/core/

CVE-2026-34162NVD/CVE DatabaseMar 31, 2026
Mar 31, 2026
TechCrunch
02

Microsoft error sees confidential emails exposed to AI tool Copilot

securityprivacy
Feb 19, 2026

Microsoft 365 Copilot Chat, an AI work assistant, had a bug that caused it to accidentally access and summarize confidential emails from users' draft and sent folders, even though those emails were marked as confidential and protected by security policies. The issue affected enterprise users and was first discovered in January, though Microsoft says no one gained access to information they weren't already authorized to see. Microsoft has since rolled out a configuration update worldwide to fix the problem.

Fix: Microsoft has rolled out a configuration update to fix the issue. According to a Microsoft spokesperson: 'A configuration update has been deployed worldwide for enterprise customers.'

BBC Technology
03

Gemini 3.1 Pro

industry
Feb 19, 2026

Google released Gemini 3.1 Pro on February 19, 2026, a new AI model priced at half the cost of Claude Opus 4.6 with similar performance benchmarks. The model shows improved ability to generate SVG animations (scalable vector graphics, images made from code rather than pixels) compared to its predecessor, though it is currently experiencing slow response times and occasional errors due to high demand at launch.

Simon Willison's Weblog
04

PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence

securitysafety
Feb 19, 2026

PromptSpy is Android malware that uses Gemini (Google's AI chatbot) to automatically keep itself running on victims' devices by analyzing the screen and sending instructions on how to stay in the recent apps list. The malware also uses accessibility services (special permissions that let apps control your device without user input) to steal data, prevent uninstallation, and give attackers remote access through a VNC module (virtual network computing, software for controlling devices remotely), and it's being distributed through fake websites targeting users in Argentina.

The Hacker News
05

Figma shares climb on earnings beat, but analysts note that AI risk remains

industry
Feb 19, 2026

Figma, a design software company, reported stronger-than-expected earnings and revenue growth, but its stock gains were limited because investors worry that AI (artificial intelligence) could disrupt software companies like Figma. To address these concerns, Figma has been integrating AI features into its products and announced a partnership with Anthropic, an AI startup, to demonstrate it is positioned to benefit from AI rather than be harmed by it.

CNBC Technology
06

OpenAI reportedly finalizing $100B deal at more than $850B valuation

industry
Feb 19, 2026

OpenAI is raising over $100 billion at a valuation exceeding $850 billion, with major investors like Amazon, SoftBank, Nvidia, and Microsoft participating in the deal. The company is burning through cash while working toward profitability and is testing advertisements in ChatGPT for free users as a potential revenue strategy.

TechCrunch
07

Digital blackface flourishes under Trump and AI: ‘The state is bending reality’

safetypolicy
Feb 19, 2026

AI-generated deepfakes (fake videos created using artificial intelligence to realistically impersonate people) depicting Black women in negative stereotypes are spreading widely on social media and being shared by news outlets and public figures, sometimes without clear disclosure or verification. These videos perpetuate racist stereotypes and cause real harm to Black users, even when they carry watermarks indicating they are AI-generated, because viewers and media outlets treat them as authentic.

The Guardian Technology
08

Reload wants to give your AI agents a shared memory

industry
Feb 19, 2026

Reload, an AI workforce management platform, launched Epic, a new product designed to solve a key problem with AI coding agents: they often lose context and shared understanding over time because they only have short-term memory. Epic acts as an architect that maintains a structured, shared memory of project requirements, decisions, and code patterns across multiple agents and sessions, keeping all agents aligned with the original system intent as development progresses.

Fix: Epic maintains shared context by creating and preserving core system artifacts (product requirements, data models, API specifications, tech stack decisions, diagrams, and task breakdowns) upfront, then continuously maintaining a structured memory of decisions, code changes, and patterns throughout development. This shared memory follows agents across sessions and team members, ensuring all coding agents build against the same shared source of truth regardless of which agents are switched in or out.

TechCrunch
09

OpenAI, Reliance partner to add AI search to JioHotstar

industry
Feb 19, 2026

OpenAI is partnering with Reliance to add AI-powered conversational search to JioHotstar, an Indian streaming service, allowing users to search for movies, shows, and sports using text and voice in multiple languages. The partnership will also integrate JioHotstar recommendations directly into ChatGPT, creating a two-way discovery system where users can find content through either platform. This move reflects a broader trend of streaming services using conversational interfaces (like ChatGPT or Gemini, Google's AI model) to help users discover entertainment.

TechCrunch
10

Co-founders behind Reface and Prisma join hands to improve on-device model inference with Mirai

industry
Feb 19, 2026

Mirai, a London-based startup founded by the co-founders of Reface and Prisma, is developing technology to improve how AI models run on devices like phones and laptops rather than in cloud data centers. The company has built an inference engine (the part of software that runs AI models) for Apple Silicon written in Rust that claims to speed up model generation by up to 37%, and is creating an SDK (software development kit, a package of tools for developers) so app creators can integrate this technology with just a few lines of code. To handle tasks that can't be done on-device, Mirai is also building an orchestration layer (a system that directs requests) to send complex work to the cloud when needed.

TechCrunch
Prev1...979899100101...273Next
critical

CVE-2025-15379: A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_

CVE-2025-15379NVD/CVE DatabaseMar 30, 2026
Mar 30, 2026
critical

CVE-2026-33873: Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.9.0, the Agentic Assis

CVE-2026-33873NVD/CVE DatabaseMar 27, 2026
Mar 27, 2026
critical

Attackers exploit critical Langflow RCE within hours as CISA sounds alarm

CSO OnlineMar 27, 2026
Mar 27, 2026
critical

CVE-2025-53521: F5 BIG-IP Unspecified Vulnerability

CVE-2025-53521CISA Known Exploited VulnerabilitiesMar 26, 2026
Mar 26, 2026