CVE-2026-48545: Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Spa

Summary: Gradio versions before 6.15.0 have a cookie injection vulnerability that lets attackers perform session fixation (tricking a system into using a fake session ID) across multiple user spaces. An attacker controlling one Gradio Space can inject a cookie into a shared HTTP client (a tool that sends web requests) that automatically gets sent to all other legitimate Spaces, affecting every user on that Gradio deployment.

Solution: Update Gradio to version 6.15.0 or later. The vulnerability is fixed in the release available at https://github.com/gradio-app/gradio/releases/tag/gradio%406.15.0.


FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

Summary: A flaw in Starlette (CVE-2026-48710), the framework that powers FastAPI, allows unauthenticated attackers to bypass authentication by sending a malformed character in a web request's Host header. The flaw tricks Starlette into parsing the request path differently than the actual server sees it, so security checks on one path may allow access to a protected route, potentially enabling SSRF (server-side request forgery, where an attacker makes the server request data from unintended locations) or even remote code execution on affected systems.

Solution: Starlette's maintainer released a patch through an official GitHub security advisory. Additionally, researchers created badhost.org, a website that can test whether applications are vulnerable to this flaw.

Starlette
FastAPI
OpenAI
OpenAI-compatible proxies


Robinhood will let your AI agent trade stocks and make (or lose) lots of money

Summary: Robinhood has launched a feature allowing traders to create separate accounts for AI agents (software programs that can make decisions automatically) with dedicated funds to buy and sell stocks. The feature is designed to automate investment decisions like monitoring specific industries or rebalancing portfolios, but Robinhood warns that agentic trading carries significant risk, including potential loss of the entire investment.

Solution: N/A -- no mitigation discussed in source.


CVE-2026-7528: IBM Langflow OSS 1.0.0 through 1.9.0 could allow a denial of service due to uncontrolled resource consumption.

Summary: IBM Langflow OSS (open-source software) versions 1.0.0 through 1.9.0 has a vulnerability that allows a denial of service attack, which is when an attacker overwhelms a system with requests to make it unavailable. The problem is caused by uncontrolled resource consumption (the system fails to limit how much memory, CPU, or other resources a single request can use).


CVE-2026-7524: IBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation of symbolic links duri

Summary: IBM Langflow OSS (open-source software) versions 1.0.0 through 1.9.1 has a vulnerability that could allow remote code execution (running malicious code on a system from a distance) because it doesn't properly validate symbolic links (shortcuts that point to files) when extracting archive files. This is a path traversal (CWE-22) weakness, meaning an attacker could potentially access or execute files outside the intended directory.


SecurityWeek to Host AI Risk Summit August 11-12 at the Ritz-Carlton, Half Moon Bay

Summary: SecurityWeek is hosting the 2026 AI Risk Summit on August 11-12 in Half Moon Bay, California, bringing together security leaders, AI researchers, and policymakers to discuss challenges in AI adoption and security. The conference will cover topics like securing AI systems, adversarial attacks (techniques where attackers try to fool AI models), deepfakes (AI-generated fake media), data protection in AI workflows, and AI governance and compliance.


Defending at Machine-Speed: Building AI Threat Readiness with Wiz

Summary: AI models can now discover zero-day vulnerabilities (previously unknown security flaws) and chain exploits (combine multiple attacks together) faster than organizations can patch them, shrinking response windows from weeks to minutes. To defend effectively, organizations need to operate at machine-speed by focusing on two key areas: reducing the time to identify and fix vulnerabilities, and maintaining visibility across their entire environment including cloud, code, and software supply chains. The Wiz platform helps with this through tools like ASM (attack surface management, which maps all exposed systems and applications) and Red Agent (an AI-based security tester that finds complex vulnerabilities automatically).

Solution: The source describes Wiz's approach to addressing this threat but does not explicitly detail specific patches, versions, or technical mitigations. It recommends using Wiz ASM to reduce attack surface by identifying and remediating exposed vulnerabilities, and leveraging Wiz Red Agent as an autonomous AI-pentester to continuously uncover exploitable vulnerabilities at machine-speed. However, no concrete patching steps, version updates, or specific mitigation techniques are provided in the text.


The Pope isn’t AGI-pilled

Summary: Pope Leo XIV released an encyclical letter called Magnifica Humanitas warning that AI is not just a technical tool but a system that affects people's rights, opportunities, and freedom when used in processes impacting human lives. The letter was created in partnership with Anthropic, a major AI company, and sparked various reactions from the tech industry.


RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software Binaries

Summary: RevEng.AI, a cybersecurity startup, raised $15 million to develop an AI tool called BinNet that analyzes compiled software binaries (the machine-readable code that actually runs on computers) to find vulnerabilities and backdoors without needing the original source code. The technology aims to secure the software supply chain by verifying what software actually does before it's deployed, which is increasingly important as AI systems are used to write code automatically.


5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

Summary: Shadow AI refers to unapproved AI tools that employees use without IT oversight, often gaining access to company data through OAuth (a login system that grants third-party apps permission to access accounts) or browser sessions. Most organizations lack visibility into these tools and don't have governance policies in place, creating a security risk. The article describes a five-step program to manage shadow AI by discovering which tools are in use, creating practical policies, and establishing approved alternatives.

Solution: The source explicitly recommends five steps: (1) Discover shadow AI tools through auditing OAuth connections, scanning browser extensions, identifying AI features in already-approved tools, and conducting employee surveys. (2) Write an AI governance policy that lists approved tools, defines clear data classification rules (specifying which data like customer records and source code should never enter AI tools), confirms data training opt-out status for each tool, and establishes a defined process for requesting new tools. (3-5) The text cuts off before fully detailing steps 3-5, so no additional mitigations are explicitly stated in the provided content.

Microsoft Copilot
Google Gemini
Salesforce Einstein
Google Workspace
Microsoft 365


Cisco and OpenAI redefine enterprise engineering with Codex

Summary: Cisco partnered with OpenAI to integrate Codex (an AI code generation tool) directly into their enterprise software engineering workflows, treating it as an AI teammate rather than just a developer productivity tool. By using Codex in production environments, Cisco accelerated development on products like AI Defense (a security solution protecting against AI-related risks), compressing work that normally takes quarters into just weeks, while also automating large-scale defect repairs and build optimization across interconnected code repositories.


‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems

Summary: SymJack is an attack that exploits AI coding agents by tricking them into inserting malicious code into software projects through disguised symlinks (shortcuts that point to files). The attacker controls a code repository and hides malicious instructions in an innocent-looking file request, which the AI agent approves and executes without the developer realizing what's happening, potentially stealing credentials or compromising production systems.

Solution: Anthropic hardened Claude Code to resolve symlinks (determine where shortcuts actually point) before asking for approval and display the real destination path in the prompt to the user. The source notes that persuading users to consider before acting on automation requests could help stop SymJack attacks and would be simple for other coding agents to implement.

Anthropic Claude Code
Google Gemini CLI
Cursor Agent CLI
xAI Grok Build CLI
GitHub Copilot CLI


The NSA, ‘Mythos’ and the quiet emergence of AI cyber doctrine

Summary: Advanced AI models like Claude Mythos are becoming autonomous cyber-attack tools that can identify vulnerabilities, chain multiple exploits together, and conduct multi-stage attacks with minimal human input, fundamentally changing how cyber offense and defense operate. Major tech companies have formed a defensive coalition (Project Glasswing) to respond to this emerging threat, signaling that AI-powered cyber operations have moved beyond experimentation into real operational capability. This represents a shift in cyber doctrine where speed, scale, and autonomy (the ability of AI to act without human direction) have become the defining factors in cyber conflict.

Anthropic OpenAI Google Microsoft Amazon Apple

Anthropic
Claude
OpenAI
Google
Microsoft
Amazon
AWS
Apple
Broadcom
Cisco
CrowdStrike
NVIDIA
Palo Alto Networks
Linux Foundation
JPMorgan Chase


DSPM buyer’s guide: Top 10 data security posture management tools

Summary: Data security posture management (DSPM, tools that help find sensitive data scattered across systems) helps security teams locate hidden data across cloud and on-premises environments to reduce data loss risk. Shadow data (data stored outside official IT oversight) can come from forgotten repositories, cloud containers, or unauthorized AI usage, making it difficult to track and protect. DSPM tools work alongside broader cloud security tools to discover both known and unknown data and manage exposure risks, with the market consolidating through major acquisitions by companies like Palo Alto Networks, IBM, and Varonis.


Building self-improving tax agents with Codex

Summary: Tax AI is a system built by OpenAI and Thrive Holdings that uses Codex (a code-generating AI model) to automate tax return preparation for accounting firms, and it improves itself automatically rather than waiting for engineers to manually fix problems. The system learns from real-world use by collecting practitioner feedback, tracking how returns are processed (production traces, or a structured record of inputs and outputs), and using tailored evaluations to continuously refine itself. Within six weeks of launch, the system improved from only 25% of returns being correct enough to need minimal fixes to 86% reaching that standard.

Solution: The source describes the infrastructure that enables self-improvement but does not prescribe a specific fix or mitigation for any problem. No version update, patch, or explicit remediation step is mentioned. N/A -- no mitigation discussed in source.


Anthropic Releases New Claude Sandbox, Security Guidance Plugin

Summary: Anthropic released two new security features for Claude: a self-hosted sandbox that lets Claude Managed Agents (AI systems that can perform tasks autonomously) run code in user-controlled environments like their own servers or managed providers, and a security guidance plugin for Claude Code that scans for vulnerabilities (weaknesses that attackers could exploit) as developers write code. The plugin has reduced security issues by 30-40% in internal testing by catching problems before formal code review.

Solution: Anthropic provides two explicit mitigations: (1) Deploy the Claude sandbox by configuring Claude Managed Agents to execute tools in a user-controlled environment, applying your own network policies, audit logging, and security tooling while keeping files and repositories within your perimeter; (2) Use the security guidance plugin for Claude Code, available through the official Anthropic marketplace, which scans for vulnerabilities during file edits, after AI-generated changes, and at commit time to catch issues before full code review.

Anthropic
Claude
Claude Code
Claude Managed Agents
Cloudflare
Daytona
Modal
Vercel


Microsoft previews automatic device isolation in Defender for Endpoint

Summary: Microsoft is previewing automatic device isolation in Defender for Endpoint, a feature that uses AI to quickly disconnect compromised devices from the network while keeping them connected to security services, helping contain attacks that move at machine speed. However, a SANS Institute research paper warns that attackers could potentially exploit this feature to disable user accounts if it is not properly configured and tuned. Security experts emphasize that autonomous AI action tools like this must be carefully configured and tested, similar to any other automation capability.

Solution: N/A -- no mitigation discussed in source. The source warns of a potential risk but does not provide an explicit fix, patch, or configuration guidance to address it. Johannes Ullrich only notes that the feature 'must be carefully tuned' and that organizations should avoid leaving it 'unconfigured,' but the source does not detail specific mitigation steps.

Microsoft
Microsoft Defender for Endpoint
Microsoft Defender XDR


Champion ethical hacker warns AI tools like Mythos could put her out of business

Summary: Champion ethical hacker Valentina Palmiotti warns that powerful AI tools like Claude Mythos (an AI model that can find vulnerabilities, or security weaknesses, in software) could soon make human hackers like her unable to compete in bug bounty competitions (where hackers earn money by finding security flaws before criminals do). While she currently uses AI tools like Claude Code to work faster and win prizes at the Pwn2Own hacking competition, she believes advanced AI models will eventually take over most of the easier hacking tasks, leaving only the very best human hackers with opportunities to find new bugs.

Anthropic
Claude
Claude Mythos
Claude Code
OpenAI
GPT 5.5 Cyber


Did the Pope use AI to write about the dangers of AI?

Summary: An analysis suggests that parts of Pope Leo XIV's encyclical (a formal letter from the Pope) about AI's dangers may have been written by AI itself, with some sections scoring 40-100% AI-generated according to Pangram, an AI detection tool. The document shows linguistic patterns common in AI writing, such as unusual word frequency that matches Claude, an AI made by Anthropic.


CVE-2026-45321: TanStack Unspecified Vulnerability

Summary: TanStack contains a vulnerability that allowed attackers to publish malicious versions of the software to npm (a package repository where developers download code libraries) under the trusted TanStack identity, potentially distributing credential-stealing malware (software that steals login information). This vulnerability is currently being actively exploited by attackers.

Solution: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.


Warp’s big bet on building open source with GPT-5.5

Summary: Warp, a modern terminal application, is using GPT-5.5 to power AI agents (software programs that can autonomously plan and execute tasks) that help write code and manage open-source development. In Warp's internal testing, GPT-5.5 uses 30% fewer tokens (units of text that the AI processes) per coding task than GPT-5.4, making the system more efficient as it scales to handle longer, more complex workflows.


CVE-2026-44895: GitLab MCP Server lets an AI agent talk directly to GitLab. Prior to 0.6.0, the HTTP transport in src/transport.ts ships

Summary: GitLab MCP Server (a tool that lets AI agents interact with GitLab) had a critical security flaw in versions before 0.6.0 where its HTTP transport exposed an unauthenticated endpoint (a service that processes requests without checking who is calling it) to any website, combined with a misconfiguration that made it accessible from all network interfaces instead of just locally. This allowed attackers from anywhere to make changes to GitLab repositories using the server operator's stored credentials.

Solution: Update GitLab MCP Server to version 0.6.0, which fixes the vulnerability.


Trump officials split over Pope Leo’s AI warning as Vatican feud enters new front

Summary: Pope Leo XIV released an encyclical (a formal church letter) warning that artificial intelligence could displace workers, increase inequality, and remove humans from lethal weapons decisions, but Trump administration officials disagreed on how to respond. Interior Secretary Doug Burgum dismissed the pope's concerns as outside his role, while Vice President JD Vance praised the message as important moral leadership, highlighting a split in the administration over whether AI should face stronger oversight or remain deregulated for competitive advantage.


For Enterprises, Security Remains Agentic AI's Biggest Challenge

Summary: Companies need strategies for using agentic AI (AI systems that can plan and execute multi-step tasks independently), but security tools to safely deploy these systems are still being developed. The main obstacle preventing wider adoption is the lack of proven security solutions to protect enterprises from risks that agentic AI introduces.


CVE-2026-44723: Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pul

Summary: Vowpal Wabbit, a machine learning system, has a vulnerability in its GitHub workflow file where pull request titles are inserted directly into bash commands without proper protection. An attacker can craft a malicious pull request title with shell commands that will execute on the build system before Python runs, since the shell processes the string first. Since pull requests can be opened on any branch without special permission, anyone can trigger this attack.

Solution: This vulnerability is fixed by commit 998e390e80a7e8192d7849b7784bc113dbd190ad.


CVE-2026-24162: NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of unt

Summary: NVIDIA Transformers4Rec for Linux has a vulnerability where attackers can exploit improper deserialization (unsafe processing of data that was converted into a storable format) of untrusted data, potentially leading to code execution (running commands on the system), data tampering, and information disclosure. The vulnerability is tracked as CVE-2026-24162 and a CVSS score (a 0-10 rating of how severe a vulnerability is) has not yet been assigned by NIST.


Microsoft Copilot Cowork Exfiltrates Files

Summary: Microsoft Copilot Cowork had a security flaw where its agents (automated systems that perform tasks) could send emails to users without approval, and these emails could contain external images that leak data when opened. An attacker could use prompt injection (tricking the AI by hiding instructions in its input) to make the agent create download links to files on OneDrive, allowing the attacker to steal those files.


Rethinking organizational design in the age of agentic AI

Summary: Many organizations want to adopt agentic AI (AI systems that can independently execute complete workflows with minimal human input), but 76% say their current operations cannot support this change. The problem is that most companies are simply adding AI agents onto existing human-centered business models rather than fundamentally redesigning their operations, technology, workflows, and decision-making systems to work with AI as an integrated part of the organization.


CVE-2026-9540: A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component

Summary: A vulnerability (CVE-2026-9540) was found in vllm version 0.19.0 that affects the OpenAI-compatible Serving Path component and can be exploited remotely to cause a denial of service (making a service unavailable by overwhelming it). The vulnerability has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 5.5 (medium severity), and a public exploit is already available.

Solution: A pull request to fix this issue awaits acceptance (mentioned in the source as pending at https://github.com/vllm-project/vllm/pull/37594).


GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos

Summary: The Megalodon campaign used compromised credentials to inject malicious commits into over 5,500 GitHub repositories, modifying GitHub Actions workflows (automation tools that run code tasks) to steal sensitive secrets like cloud credentials and SSH keys (authentication files). The attack hid malicious code in base64-encoded bash payloads (encoded script commands) and used fake author names like "build-bot" to disguise itself as routine maintenance, with researchers detecting unexpected workflow runs as a warning sign.

Solution: SafeDep recommended checking GitHub Actions tabs for unexpected workflow_dispatch runs (manual workflow triggers), and if using OIDC federation (a cloud authentication method) for deployments, review cloud audit logs for token requests from unknown workflow runs. The researchers also shared a list of indicators of compromise (IOCs), including the attacker's command-and-control domain (216.126.225.129:8443), campaign signatures, forged author names and emails, commit messages, and names of compromised repositories to aid in detection and cleanup.


How Varonis Atlas integrates Claude Compliance API for AI governance

Summary: Varonis Atlas has integrated with the Claude Compliance API to help organizations monitor and secure their use of Claude Enterprise and Claude Platform, which are AI tools used for tasks like document analysis and building custom applications. The integration allows security teams to track AI usage, detect misuse and sensitive data exposure, investigate complete chat sessions, and test for vulnerabilities like prompt injection (tricking an AI by hiding instructions in its input) and jailbreaks. Varonis Atlas connects AI activity to underlying data permissions and access controls to help organizations understand what data their AI systems can reach and whether that access is safe.

Solution: The source does not explicitly describe a specific fix or mitigation for a particular vulnerability. Instead, it describes Varonis Atlas's features for monitoring and securing AI systems: continuous monitoring of conversation content, real-time detection of sensitive data exposure and jailbreak attempts, session-level investigations, runtime guardrails, and proactive pen testing (stress-testing assistants and agents for vulnerabilities). Organizations can access these capabilities through the Varonis Atlas platform, including its AI inventory, posture management, security testing, runtime guardrails, and compliance reporting functionality.

Varonis
Claude
Claude Enterprise
Claude Platform
Varonis Atlas


Sundar Pichai on AI, the future of search, and what’s happening to the web

Summary: Google CEO Sundar Pichai discusses major AI changes coming to Google Search and YouTube, including new Gemini models (advanced AI systems for generating text and understanding information) and AI agents that can perform tasks rather than just deliver search results. These changes will likely reduce traffic to websites from Google Search, a phenomenon the interviewer calls 'Google Zero,' forcing publishers and content creators to adapt their business strategies.


Check Point Frontier AI Models Readiness Program – Security Update

Summary: Check Point launched a proactive Frontier AI Models Readiness Program to protect their products against threats from increasingly capable AI systems that could help attackers find and exploit vulnerabilities. The program involved scanning their code with AI tools, reviewing security, strengthening weak components, and speeding up their ability to create and release security patches.


Musk and Altman’s AI rivalry reaches boiling point as IPO race heats up

Summary: This article discusses the competitive race between Elon Musk's SpaceX and Sam Altman's OpenAI as both companies move toward initial public offerings (IPOs, which is when a private company sells shares to the public for the first time). The piece highlights how a small group of tech leaders is gaining increasing influence over the future direction of artificial intelligence development.

OpenAI
SpaceX
Elon Musk
Meta
Nvidia
Tesla
Grok


Anthropic Expands Claude’s Enterprise Security Governance With 28 New Integrations

Summary: Anthropic announced that Claude now integrates with 28 enterprise security and compliance platforms, allowing organizations to monitor and govern Claude's use alongside other workplace software. The integration works through the Claude Compliance API, which gives security teams access to conversation content and activity logs from Claude Enterprise, enabling them to apply their existing monitoring policies to Claude.

Anthropic
Claude
CrowdStrike
Palo Alto Networks
Microsoft
Okta
Zscaler
Netskope
Cloudflare
Datadog
Fortinet
Wiz
SailPoint
Relativity
ReliaQuest
Sumo Logic
Geordie AI
Forcepoint
Cribl
Mimecast
Smarsh
Snyk
Cyera
Proofpoint
Rubrik
Tenable
Trellix
Theta Lake
Varonis
IBM
Google
OpenAI
1Password


TrapDoor malware campaign puts developer workstations in CISO spotlight

Summary: The TrapDoor malware campaign compromised over 34 malicious packages across npm, PyPI, and Crates.io (popular code repositories where developers download libraries) to steal developer secrets like AWS credentials, GitHub tokens, and SSH keys (authentication credentials for secure systems). The campaign is particularly dangerous because it targets entire developer workflows, including AI coding assistants, and uses normal software development processes as cover, making it harder to detect and potentially giving attackers access to CI/CD pipelines (automated systems that build and deploy software) and cloud infrastructure.


Uber president says AI spending is getting ‘harder to justify’

Summary: Uber has spent its entire annual AI budget in just four months of 2026 and is questioning whether the spending is worthwhile, as the company struggles to see a clear connection between rising token consumption (the computational cost of running AI models like Claude Code) and actual improvements in features delivered to customers. Uber's president says it's difficult to prove that increased AI spending is directly producing more useful features for consumers.


CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks

Summary: India's CERT-In has issued new security guidelines requiring organizations to patch critical vulnerabilities in internet-exposed systems within 12 hours because attackers are increasingly using AI and LLMs (large language models, which are AI systems trained on large amounts of text) to automate the discovery and exploitation of security weaknesses faster than ever before. The guidelines warn that AI-assisted attacks can compress the time needed for attackers to find and weaponize vulnerabilities, and recommend defensive measures like continuous vulnerability monitoring, Zero Trust security (verifying access at every step), layered security controls, and secure-by-design practices.

Solution: CERT-In recommends organizations implement the following: "Assume breach and prepare for rapid detection, containment, and recovery from compromise scenarios. Adopt a Zero Trust approach by enforcing continuous verification and least-privilege access. Implement a defense-in-depth strategy with layered controls across infrastructure to eliminate single points of failure and minimize the overall impact of a successful breach. Monitor and reduce exposure to security vulnerabilities. Embed a secure-by-design paradigm into systems, applications, and AI workflows. Maintain operational continuity during cyber incidents and disruption scenarios. Safeguard sensitive and operationally critical data throughout its lifecycle. Reduce software supply chain risks arising from third-party software, AI models, and dependencies through SBOM (software bill of materials), provenance validation, and assessments. Test security effectiveness against evolving threats through red teaming, vulnerability assessments, penetration testing, and independent audits." Organizations should also adopt "continuous, risk-based vulnerability and patch management practices" and prioritize patching known exploited vulnerabilities affecting internet-facing and critical systems.

confidentiality integrity availability safety


Stop treating AI governance as a review layer. Make it release infrastructure

Summary: AI systems change continuously between deployments (such as when retrieval indexes update overnight or new tools are added), which breaks the traditional governance model where compliance is checked after development is complete. Most organizations still treat governance as a separate review layer rather than embedding it into the actual deployment process, leaving companies blind to changes most likely to affect the system. Chinese AI companies instead treat governance as release infrastructure, embedding compliance checkpoints directly into the deployment pipeline so that no product launches without passing these checks.

Solution: Embed governance checkpoints directly into the deployment pipeline as release infrastructure rather than treating it as a separate review layer. According to the source, this means making governance 'part of the product' by including compliance checks that must be cleared before any product launch occurs, similar to how Chinese AI companies structure their deployment processes. Specific practices mentioned include maintaining current, pipeline-generated records of components like retrieval indexes, establishing output-monitoring thresholds that are owned by responsible parties, and tying model evaluation results to enforceable release gates.


Project Glasswing has uncovered 10,000 vulnerabilities: Anthropic

Summary: Anthropic's Project Glasswing, which uses Claude Mythos Preview (an AI model trained to find software bugs), has discovered approximately 10,000 critical or high-severity vulnerabilities across over 1,000 open-source projects and 50 partner organizations. While the AI successfully identified thousands of real vulnerabilities, maintainers are overwhelmed by the flood of bug reports and lack the capacity to patch them quickly, creating a major cybersecurity challenge where finding bugs is now much easier than fixing them.

Anthropic
Claude
Claude Mythos Preview
Claude Security


Anthropic’s restricted Claude Mythos model may be coming to Claude Code

Summary: Anthropic is preparing to publicly release its Mythos model, an advanced AI designed for code analysis that can automatically develop professional-level cyberattacks but also help find and fix software bugs before they're exploited. The company initially delayed public release due to security concerns, but has since developed a guardrail system (safety restrictions built into the model) and is now testing Mythos in Claude Code and Claude Security. Anthropic is also running a project called Glasswing, which partners with companies to use Mythos Preview to find vulnerabilities in critical software, having uncovered 10,000 high or critical-severity vulnerabilities in its first month.

Solution: Anthropic decided against public rollout of the Mythos model until it prepared a powerful guardrail system (safety restrictions to prevent misuse). The company is also collaborating with other companies through the Glasswing project to identify and secure potential AI-driven exploits before widespread release.

Anthropic
Claude
Claude Mythos
Claude Code
Claude Security
Claude Opus


Pope Leo calls for being ‘profoundly human’ in the age of AI

Summary: Pope Leo XIV released a papal encyclical (an official open letter from the Catholic Church) called 'Magnifica Humanitas' warning about risks from AI and rapid technological advancement, including AI-powered warfare and job displacement. The document emphasizes that current legal and ethical protections are inadequate to safeguard human dignity as AI adoption accelerates.


Secure Optimization With Asynchronous Structured Skyline Predicates Under Vertical Data Federation

Summary: This paper presents a method for performing skyline optimization (a technique that filters data to find the most important records based on multiple criteria) on encrypted data that is split across multiple locations in a vertical data federation (a system where different organizations each hold different columns of the same dataset). The researchers developed an asynchronous structured skyline predicate that improves both efficiency and security while protecting sensitive data from unauthorized access.


Deformable 3-D Point Cloud Perturbations Using Cage-Based Deformation for Semantic Consistency

Summary: Researchers developed a new method to attack deep neural networks that analyze 3D point clouds (collections of data points representing 3D objects) by using cage-based deformation, which smoothly warps the entire shape rather than moving individual points. The method generates adversarial attacks (malicious inputs designed to fool AI systems) that look natural to humans while successfully tricking classifiers, and these attacks remain effective even against defense methods.


Federated Contrastive Diffusion Prototypes for Robust Private Learning

Summary: Federated Learning (FL, a technique where multiple computers train an AI model together without sharing raw data) faces security challenges from adversarial attacks (attempts to trick the model with carefully crafted inputs) and data heterogeneity (when each computer has different types of data). The paper introduces Fed-CDP (Federated Contrastive Diffusion Prototypes), a new approach that uses a server to actively synthesize improved features from client data rather than just collecting them, which helps make the shared model more robust against attacks and reduces model drift (when local models diverge from each other).


Fundamental Limit of Discrete Distribution Estimation Under Utility-Optimized Local Differential Privacy

Summary: This research paper studies how to estimate discrete distributions (collections of data categories and their frequencies) while protecting sensitive information using utility-optimized local differential privacy (ULDP, a privacy protection method that keeps data private locally while allowing more accurate results for non-sensitive information). The authors mathematically prove the fundamental limits of this privacy-utility trade-off and propose new optimal mechanisms called utility-optimized block design schemes to achieve the best possible accuracy under these privacy constraints.


Reliable Multi-Modal Object Re-Identification via Modality-Aware Graph Reasoning

Summary: This paper presents MGRNet, a graph reasoning model (a method that uses network structures to understand relationships between data points) designed to improve multi-modal object re-identification (ReID, the task of matching the same object across different image types like visible and infrared photos). The approach handles low-quality local features by constructing modality-aware graphs (structures that represent relationships between image patches while accounting for different image types) and selectively swapping graph nodes to combine local and global information, ultimately creating more reliable object representations.


EA-APO: A Universal Proactive Defense Against Facial Manipulation

Summary: Facial manipulation techniques like face-swapping and face attribute editing (changing features in images) threaten privacy and identity security, but existing defense methods work poorly against both types of attacks in a unified way. Researchers developed EA-APO (Epoch-Adaptive Adversarial Perturbation Optimization), a defense framework that adds specially designed invisible noise patterns to face images to disrupt both face-swapping and attribute-editing AI models, even ones the defense hasn't seen before. The method was tested across multiple commercial facial manipulation tools and remained effective even after common image processing and social media compression.


AI security needs a shift from models to systems, researchers argue

Summary: Researchers argue that enterprises cannot secure AI agents by making the underlying models more robust. Instead, they must enforce security controls at the system level, treating AI models as fundamentally untrusted components, similar to how operating systems treat processes. The paper identifies five security principles from traditional systems security (least privilege, tamper resistance, complete mediation, secure information flow, and accounting for human error) that should be applied to AI agents, and notes that all eleven real-world attacks analyzed violated the secure information flow principle.

Google
University of California San Diego
University of Wisconsin-Madison
Microsoft
ChatGPT
Claude
Cursor
Jira


Infer-Shield: Defending against membership inference attacks in heterogeneous federated learning via adaptive distillation

Summary: This research paper describes a defense technique called Infer-Shield that protects AI models trained across multiple organizations (federated learning, where different parties train a shared model without sharing raw data) from membership inference attacks (attempts to determine if specific individuals' data was used in training). The paper proposes using adaptive distillation (a technique where a smaller model learns from a larger one to reduce information leakage) as a way to make these distributed AI systems more secure.


As AI speeds coding, CVE Lite CLI keeps security deliberately AI-free

Summary: CVE Lite CLI is an open-source tool that scans JavaScript and TypeScript project dependencies for vulnerabilities by analyzing lockfiles (files that track which packages a project uses) locally while developers are coding, rather than waiting for security checks to fail later in the CI pipeline (automated testing system). The tool provides detailed remediation guidance, distinguishing between direct dependencies (packages you explicitly use) and transitive dependencies (packages that your dependencies use), and recommending specific upgrade paths. According to the creator, this local-first approach is increasingly important because AI coding assistants allow developers to add packages quickly, potentially without proper security review.

Solution: CVE Lite CLI scans npm, pnpm, and Yarn lockfiles using OSV vulnerability data and can be configured for JSON, SARIF, or HTML outputs and integrated into CI workflows as a GitHub Action. The tool analyzes lockfiles to identify which vulnerabilities are direct versus transitive, validates upgrade targets, and recommends actionable fix paths while developers are still writing code.


The Alert Firehose Finally Meets Its Match

Summary: Network Detection and Response (NDR, a security tool that monitors network traffic for threats) has traditionally been criticized for generating too many alerts, but newer NDR systems using agentic AI (AI that autonomously performs tasks like data analysis and alert prioritization) are reducing false positives by correlating multiple data points and automatically triaging alerts for analysts. This allows security teams to focus on genuine threats rather than sorting through overwhelming amounts of data.

Solution: The source discusses operational best practices but does not explicitly describe a specific fix or mitigation. It mentions that NDR systems should be properly deployed through baselining (allowing the system to learn normal network behavior), staying tuned (ongoing configuration), and SOC integration, but does not present these as solutions to a problem—rather as necessary deployment steps. N/A -- no mitigation discussed in source.


Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects

Summary: Anthropic's Claude Mythos model, an AI system designed to find security vulnerabilities (bugs that attackers could exploit), discovered over 23,000 potential weaknesses across more than 1,000 open source software projects, with 1,726 confirmed vulnerabilities including over 1,000 rated as high or critical severity. So far, 75 of these serious issues have been patched by software vendors, and Anthropic expects this number to grow significantly as vendors continue their 90-day review period. The company has also released Claude Security, a tool to help developers scan their own code for security issues.

Solution: Anthropic has unveiled Claude Security, a codebase scanner designed to help developers find security issues in their applications. Additionally, Anthropic is working to add safeguards to prevent misuse of Mythos and has limited its access through Project Glasswing (a program that gives about 50 organizations controlled access to the model) while developing stronger protections before making it more widely available.

Anthropic
Claude
Mythos
Mozilla
Firefox
Palo Alto Networks
Google
Chrome
Curl
XBOW


The AI Era Is Creating a Bug Hunting Arms Race

Summary: AI models are becoming better at automatically finding software vulnerabilities (weaknesses in code) and creating exploits (tools to attack them), which is flooding bug bounty programs (programs that reward researchers for reporting bugs) with submissions. This surge is changing how companies pay for bug discoveries and forcing faster security responses, potentially shortening the traditional 90-day responsible disclosure window (the agreed-upon time between finding a bug and publicly revealing it) where companies typically release patches (fixes).

Solution: N/A -- no mitigation discussed in source.


OpenAI, Grupo Folha and Grupo UOL announce strategic content partnership

Summary: OpenAI has partnered with two major Brazilian news organizations, Folha de S.Paulo and Grupo UOL, to integrate their journalism into ChatGPT. Starting immediately, ChatGPT's 900 million weekly active users can access summaries and articles from these sources with attribution and links back to the original reporting. This partnership is part of OpenAI's broader effort to work with news publishers globally and bring trusted journalism into AI-powered experiences.


Scotland’s ‘green datacentres’ policy ignores emissions impact of AI, analysis shows

Summary: Scotland's policy encouraging "green datacentres" (facilities designed to minimize environmental impact) was created in 2022 before AI tools like ChatGPT became widespread, and a Scottish charity warns it may not account for the significant carbon emissions that AI systems actually produce. The policy is meant to attract AI investment to Scotland as part of the country's economic development strategy, but it appears outdated regarding the true environmental costs of running AI.


Hackers are learning to exploit chatbot ‘personalities’

Summary: Early AI chatbots were vulnerable to jailbreaks, which are attacks where users trick the AI into ignoring its safety guidelines by simply asking it to do so, requiring no technical expertise or coding knowledge. Hackers are now becoming more sophisticated in exploiting chatbot personalities to bypass safety measures that were built into these expensive AI systems.


How big tech got its way on Trump’s AI executive order

Summary: President Trump reversed his plan to require a government safety review of new AI models before their release, deciding instead that the US government would not slow down AI development. The reversal happened hours before the executive order was set to be signed, and Trump cited American competitiveness and competition with China as reasons for prioritizing speed over safety reviews despite expert warnings about security risks.


Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

Summary: Anthropic's Project Glasswing uses Claude Mythos Preview, an advanced AI model, to automatically find security flaws (vulnerabilities) in widely-used software before attackers can exploit them. Since launching last month, the program has identified over 10,000 high-severity vulnerabilities across critical software, with 97 already patched and 88 security advisories issued. However, Anthropic notes that finding vulnerabilities is much easier than fixing them, presenting a major challenge for cybersecurity.

Solution: Anthropic recommends that software developers and network defenders shorten their patch cycles and deployment timelines. Specific steps mentioned include: hardening networks' default configurations, enforcing multi-factor authentication (requiring two or more ways to verify identity), and keeping comprehensive logs for detection and response. Additionally, Anthropic launched a Cyber Verification Program that allows security professionals to use its models without safety restrictions for legitimate purposes such as vulnerability research, penetration testing, and red teaming (simulated attacks by friendly security experts).

Anthropic
Claude Mythos
OpenAI
GPT-5.5-Cyber
WolfSSL
Oracle
Microsoft
XBOW


Google’s new anything-to-anything AI model is wild

Summary: Google's Gemini AI model can generate realistic videos from simple inputs, as demonstrated by an experiment where someone created deepfake (synthetic media made to look real) videos of a stuffed animal. The article highlights how accessible and effective these video generation tools have become, raising questions about the line between harmless creative use and potentially misleading AI-generated content.


Adaptive Trust-Aware SOC Human–AI Teaming for resilient operations

Summary: This research paper examines how Security Operations Centers (SOCs, teams that monitor and respond to security threats) can work effectively with AI systems by using adaptive trust mechanisms. The study focuses on building resilient operations, meaning systems that can continue functioning even when problems occur, through better collaboration between human security experts and AI tools that can process large amounts of data quickly.


Elon, stop trying to make Grok happen

Summary: According to a Reuters report, Grok (Elon Musk's AI chatbot) is not performing well and has minimal adoption, appearing in only 3 out of over 400 documented cases of U.S. government AI use, and only for basic tasks like document drafting or social media management. This low usage is a sign of trouble for xAI's flagship product, despite Musk's plans to make it central to a major financial offering.


CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI

Summary: Kiro CLI, a command-line tool that lets developers use AI to run code and shell commands, has a security flaw (CVE-2026-9255) where it doesn't properly check where input comes from before authorizing tool execution. An attacker on the same computer could trick the tool into running arbitrary commands without the user's permission by sending specially crafted data through stdin (the standard input stream that feeds data into a program).

Solution: Update kiro-cli to version 1.28.0 or later. The affected versions are kiro-cli prior to 1.28.0.


Microsoft says it’s making AI ‘safe for work’ in your browser

Summary: Microsoft is testing agentic AI (AI that can perform multi-step tasks automatically) in its Edge for Business browser to help employees complete routine work like filling forms and gathering information across tabs. A key focus is protecting corporate data through features that keep AI prompts within the company's Microsoft 365 tenant (a private cloud environment), prevent copy-paste operations, block sensitive uploads, and allow companies to audit what users do.

Solution: Microsoft provides several data protection features in Edge for Business: enterprises can block copy and paste functionality, ensure all AI prompts and responses stay within their Microsoft 365 tenant (preventing use for model training), enable audit capabilities for prompts, and use the Purview compliance tool to analyze file uploads and detect sensitive data to block risky actions. These protections are active as soon as users sign into Edge for Business.

Microsoft
Edge for Business
Copilot
Microsoft 365
Purview


The literary world isn’t prepared for AI

Summary: A story selected for a prestigious British literary award appears to have been written by an LLM (large language model, an AI trained on text to generate human-like writing) rather than by a human author, raising concerns about how the literary world will handle AI-generated submissions. The story exhibits characteristic patterns of AI-generated text, such as repetitive sentence structures and predictable phrasing.


Spotify says its AI remix tool is for superfans, but I’m not convinced

Summary: Spotify has partnered with Universal Music Group (UMG) to create a new tool that uses generative AI (AI that creates new content from patterns in training data) to let users make remixes and covers of songs from UMG's music catalog. The article expresses concern that this tool will make it even easier to flood the internet with AI-generated music covers, which already appear widely on platforms like YouTube, TikTok, and Instagram.


FairRoP: Robust Client Selection Scheme for Fairness-Aware Federated Learning

Summary: Federated learning (a system where multiple computers train an AI model together while keeping their data private) can be unfair to some participants and vulnerable to attacks where bad actors tamper with the process. FairRoP is a new method that uses adaptive client selection (choosing which computers to include based on their trustworthiness) and a bandit algorithm (a technique for balancing exploration and exploitation in decision-making) to improve both fairness and robustness against attacks. The approach combines three components: fairness awareness, attack detection, and q-Balance to handle the different challenges involved.


AI Attacks Are No Longer Experimental: Key Findings from the March-April 2026 AI Threat Landscape

Summary: Between December 2025 and February 2026, a single attacker compromised nine Mexican government agencies using AI as the core tool to carry out the entire attack, rather than just a helper tool. The attacker accessed sensitive data including tax records, civil registry information, patient files, and electoral systems, and researchers only discovered the breach after finding materials on the attacker's servers.


The Download: coding’s future, the ‘Steroid Olympics,’ and AI-driven science

Summary: At Anthropic's developer event, nearly half the attendees reported shipping code written entirely by Claude (an AI assistant), with many not reading it first before deploying it live. The article discusses how AI coding tools are becoming increasingly capable and how developers are automating their work, though not everyone agrees this approach is beneficial.

Anthropic
Claude
Code with Claude
Google
Google DeepMind
Gemini
Gemini for Science
Meta
OpenAI


Mega-IPOs could signal market top, say analysts as SpaceX and OpenAI prep record floats

Summary: SpaceX, OpenAI, and Anthropic are planning major initial public offerings (IPOs, where companies sell shares to the public for the first time) in 2026, with SpaceX targeting a $1.75 trillion valuation. However, analysts warn these mega-cap floats resemble the late-1990s dot-com bubble, noting that all three companies are unprofitable and have opaque business models, with SpaceX's only profitable division being its Starlink internet service while its AI and space divisions operate at significant losses.


Why your AI strategy stops where the PLC starts: Hard lessons from the OT frontlines

Summary: AI security strategies often fail in operational technology (OT) environments, like power plants and factories, because critical legacy systems don't send data to AI systems—a maintenance laptop running unpatched Windows 7 is common. AI trained on typical IT data (like web traffic logs) often misclassifies normal industrial traffic as threats, and automated responses can accidentally shut down production lines faster than actual attacks, because in OT systems availability (keeping things running) is more important than the IT security priorities of confidentiality and integrity.

Microsoft Defender for IoT
Nozomi Networks
Claroty


Google folds CodeMender into agent ecosystem amid push for AI-led AppSec

Summary: Google is integrating CodeMender, an AI agent that automatically finds and fixes software vulnerabilities, into its larger Agent Platform ecosystem rather than keeping it as a standalone tool. CodeMender uses Gemini reasoning models (advanced AI that can think through complex problems) to analyze code vulnerabilities, generate fixes, and test them before showing them to developers. This shift suggests Google believes enterprises want autonomous security tools embedded within a governed infrastructure framework with identity and monitoring systems, rather than as isolated products.

Google
Google DeepMind
CodeMender
Gemini


OpenAI named a Leader in enterprise coding agents by Gartner

Summary: OpenAI's Codex, an AI tool that helps developers write and manage code, has been recognized as a Leader by Gartner in enterprise coding agents. Codex goes beyond simple autocomplete (where an AI completes code as you type) by letting developers delegate complex tasks like understanding large codebases, running tests, and preparing work for human review while maintaining security and governance controls. The recognition highlights Codex's strengths in enterprise features like approval gates, RBAC (role-based access control, which limits what different users can do), sandboxing (isolating code in a safe environment), and audit trails.

OpenAI
Codex
GPT-5.5
Cisco
Datadog
Dell Technologies
NVIDIA
Amazon Bedrock


GHSA-j3vx-cx2r-pvg8: Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

Summary: Network-AI v5.4.4 has a critical authentication bypass where the MCP server (a tool that lets AI models call external functions) defaults to an empty secret, causing all authentication checks to pass unconditionally. Additionally, the server allows requests from any origin (CORS wildcard), so an attacker can trick a user into visiting a malicious website that sends commands to their localhost Network-AI server without needing any password, potentially invoking dangerous tools like config_set and agent_spawn.


GHSA-f396-4rp4-7v2j: Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

Summary: Boxlite, a sandbox service for running containers, has a path traversal vulnerability (a security flaw where attackers can access files outside intended boundaries) in how it extracts container images. When processing tar files (compressed archives), Boxlite doesn't validate symlink targets (shortcuts to files or directories), allowing an attacker to create a malicious container image that writes files anywhere on the host system, potentially leading to remote code execution (running unauthorized commands on the computer).

github.com/boxlite-ai/boxlite/sdks/go@< 0.9.0 (fixed: 0.9.0)

@boxlite-ai/boxlite@< 0.9.0 (fixed: 0.9.0)


GHSA-g6ww-w5j2-r7x3: BoxLite: Permission Bypass Allows Modification of Read-Only Files

Summary: BoxLite is a sandbox service that runs untrusted code in lightweight virtual machines (VMs, which are isolated computing environments). It claims to protect host files by mounting directories in read-only mode (preventing writes), but the vulnerability bypasses this: BoxLite tells the underlying VM system (libkrun) to mount directories without actually enforcing read-only restrictions, and it doesn't limit container capabilities (special permissions), so malicious code can remount directories as read-write and modify files that should be protected.


GHSA-cqp8-fcvh-x7r3: Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)

Summary: Pydantic AI had a security flaw where attackers could bypass protections against accessing cloud-metadata endpoints (special internal servers that store sensitive credentials) by encoding the IP address in IPv6 transition forms (IPv4-mapped IPv6, 6to4, or NAT64, which are ways to represent IPv4 addresses using IPv6 format). This flaw only affects applications that explicitly allow local file downloads with the `force_download='allow-local'` setting on URLs that could be influenced by untrusted users.

Solution: Upgrade to Pydantic AI version 1.99.0 or later, which extends the blocklists to cover IPv6 transition forms that route to blocked IPv4 endpoints and adds protection for additional IANA-reserved IP ranges. For unpatched versions, avoid using `force_download='allow-local'` on URLs influenced by untrusted input, or resolve hostnames manually and validate them against your own blocklist including IPv6-encoded forms before creating the FileUrl.


Unpatched ChromaDB flaw leaves servers open to remote code execution

Summary: ChromaDB, a popular vector database used in AI applications, has a critical vulnerability (CVE-2026-45829) that allows unauthenticated attackers to run arbitrary code on servers. The flaw exists because ChromaDB checks authentication after it has already downloaded and executed a malicious model from Hugging Face, meaning attackers can trick the system into running their code by uploading a malicious model and requesting ChromaDB to use it.

Solution: Until a patch becomes available, researchers advise: (1) deploy ChromaDB using the Rust implementation instead of the Python FastAPI server, as the Rust version is not affected, and (2) restrict network access to the ChromaDB port to trusted IP addresses only.


GHSA-7p85-w9px-jpjp: Twig: PHP code injection via `{% use %}` template name

Summary: Twig (a PHP template engine) has a vulnerability where template names in `{% use %}` tags aren't properly escaped, allowing attackers to inject arbitrary PHP code that executes when the template cache loads. This bypasses Twig's security sandbox, giving attackers remote code execution (the ability to run commands on the server).

Solution: `Compiler::string()` now escapes single quotes in addition to the characters it previously escaped, preventing template names from breaking out of the surrounding PHP string context.

LangChain (indirect via Twig dependency)


CVE-2026-47102: LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint c

Summary: LiteLLM versions before 1.83.10 have a vulnerability where users can change their own role to proxy_admin (an administrative role) through the /user/update endpoint, giving them full control over the system including all users, teams, and API keys. Even users with org_admin privileges can exploit this flaw without needing to chain it with other attacks.

Solution: Update LiteLLM to version 1.83.10 or later.


CVE-2026-47101: LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role

Summary: LiteLLM versions before 1.83.14 have a privilege escalation vulnerability (a security flaw that lets someone gain higher-level permissions than they should have) where authenticated internal users can create API keys (credentials for accessing the system) that grant access to admin-only routes without proper verification. This allows attackers to bypass role-based access controls (the system that restricts what different users can do) and gain full admin privileges.

Solution: Update LiteLLM to version 1.83.14 or later.


How CISOs Should Prep for Agentic-Ready AI BOMs

Summary: This article discusses how security leaders (CISOs, or Chief Information Security Officers) should prepare for AI systems that can take independent actions (agentic AI). The key challenge is creating an AI bill of materials (AI BOM, a detailed list of all components and dependencies in an AI system) that documents both what components make up the AI system and how those components actually behave when running.


Roundtables: Can AI Learn to Understand the World?

Summary: This is a discussion panel about how AI companies are working to build systems that understand the physical world, moving beyond the current limitations of LLMs (large language models, which are AI systems trained on text). The conversation explores recent developments in world models, which are AI systems designed to understand and predict how the physical world works.


GHSA-cr22-wjx7-2w6m: MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement

Summary: The `mcp-server-kubernetes` tool had a security flaw where access control settings (environment variables that limit which Kubernetes operations are available) only worked when listing tools, but not when actually running them. This meant an attacker or misconfigured AI agent could bypass these restrictions and run any Kubernetes command, like deleting pods or accessing containers, even if they were supposed to be blocked.

Solution: The fix applies the same filtering logic from the tool listing layer to the tool execution layer in the `CallToolRequestSchema` handler, so that restricted tools return an error when called directly. This was fixed in v3.6.0.

mcp-server-kubernetes@< 3.6.0 (fixed: 3.6.0)

mcp-server-kubernetes
Claude (via MCP integration)


Anthropic, Microsoft in talks for AI chip deal after $5 billion investment

Summary: Microsoft is negotiating to supply its custom Maia AI chips to Anthropic, a company that makes Claude, a popular AI assistant. This deal would help Microsoft compete with Amazon and Google in providing specialized AI hardware to clients, while Anthropic seeks to address its computing capacity challenges after experiencing rapid growth in demand for its AI tools.

Microsoft Anthropic OpenAI Amazon Google Nvidia SpaceX


GHSA-7hh5-prp2-mfh5: Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path

Summary: Amazon SageMaker Python SDK has a vulnerability where it stores an HMAC signing key (a cryptographic secret used to verify that model files haven't been tampered with) in plaintext as an environment variable that can be read by anyone with access to certain AWS APIs. An attacker with the right permissions could steal this key, use it to forge valid model files, and run malicious code on the system running the model.

Solution: Upgrade to Amazon SageMaker Python SDK v2.257.2 or v3.8.0. According to the source: 'AWS recommend upgrading to the latest version and rebuilding any models previously created with ModelBuilder using the updated SDK.' As a temporary workaround if upgrading is not immediately possible: 'users can manually remove the SAGEMAKER_SERVE_SECRET_KEY environment variable from existing SageMaker models by recreating the model without this variable in the container environment configuration.'

Amazon SageMaker
TorchServe
Multi-Model Server
TensorFlow Serving
Triton


GHSA-m549-qq94-fvhg: LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization

Summary: LMDeploy, a model serving tool, hardcodes `trust_remote_code=True` (a setting that allows executing custom Python code from downloaded models) when loading models from HuggingFace. An attacker who can control which model path the system loads could point it to a malicious model repository, causing arbitrary code execution (running any commands they want) with the privileges of the LMDeploy server process. This affects LMDeploy version 0.12.3 and earlier.


Claude Enterprise Meets the Security Graph: Wiz Integrates with Anthropic's Compliance API

Summary: Wiz has integrated with Anthropic's Claude Compliance API to give organizations visibility into how Claude Enterprise is being used across their environment. The integration lets security teams see Claude users, projects, permissions, and connected datasets mapped into Wiz's Security Graph (a centralized system for tracking and connecting all resources), helping with compliance audits and governance.

Anthropic
Claude
Claude Enterprise
Google Gemini
Wiz


OpenAI makes breakthrough on 80-year-old maths problem

Summary: OpenAI's AI model has made progress on the planar unit distance problem, a math question posed 80 years ago asking how many pairs of dots on a sheet can be the same distance apart. The AI disproved the long-standing assumption that square grids provided the best solution by discovering a new family of mathematical arrangements that perform better, though the broader problem remains unsolved. While mathematicians have validated this work, humans were significantly involved in improving and refining the AI's original proof.


macOS Kernel Memory Corruption Exploit

Summary: Apple's Memory Integrity Enforcement (MIE, a hardware-based protection against memory corruption attacks, where attackers modify data in a computer's RAM to take control) was bypassed by researchers using AI systems, who developed a working exploit for macOS on M5 chips in under a week. The article argues that while defense-in-depth (layering multiple security barriers in hardware and software) can slow attackers down, AI-assisted exploration of vulnerabilities now happens faster than traditional human-only methods, making older security designs insufficient.


Spotify Studio’s AI agent creates a daily podcast just for you

Summary: Spotify Studio is a new AI application that creates personalized daily podcasts and briefings by analyzing your Spotify listening history and connected apps like email and calendar. The AI can perform actions like web searches and task organization on your behalf, with generated content savable to your Spotify library.


AI Agents Are Shifting Identity Security Budget Dynamics

Summary: Companies are increasingly deploying AI agents (software programs that can act independently to complete tasks), and these agents need identity management, security, and governance like human users do. New research shows that budgeting and planning for AI agent identity security works differently than it does for traditional IAM (identity and access management, the systems that control who can access what resources) projects.


Anthropic’s Code with Claude showed off coding’s future—whether you like it or not

Summary: At Anthropic's Code with Claude developer conference, nearly half of attendees reported shipping pull requests (code updates submitted for review) entirely written by Claude, an LLM (large language model, an AI trained on vast amounts of text to generate responses), with many not even reading the code themselves. Anthropic is pushing automation further by having Claude check and correct its own work through self-prompting and a new feature called "dreaming," where Claude agents write notes to themselves to learn from past errors and improve on shared codebases without requiring human developers to review intermediate steps.

Anthropic
Claude
Claude Code
Claude 4.6
Claude 4.7
OpenAI
Codex
Google
Microsoft
Spotify
Delivery Hero
Lovable
Base44
Monday.com


Anthropic is paying $15 billion a year for access to Elon Musk’s data centers

Summary: Anthropic, an AI company, agreed to pay SpaceX $1.25 billion per month (totaling $15 billion annually) through May 2029 for access to SpaceX's Colossus data centers in Memphis, Tennessee, which are used for AI training. This deal was revealed in SpaceX's IPO filing (a document companies file when offering stock to the public for the first time).


Protect GenAI Chatbots with Check Point WAF

Summary: Generative AI chatbots are becoming important customer-facing tools for businesses, but they create security risks because they can access sensitive information, speak for the brand, and be manipulated into harmful actions. The text provides examples of real incidents where chatbots caused problems, such as offering incorrect discounts or giving misleading information to customers.


I can’t believe how fast Google vibe coded my first Android app

Summary: A developer used Google's AI Studio to quickly generate Android apps by typing brief text descriptions into a web browser, with the AI automatically handling all the coding and app building. The process required minimal manual setup (enabling USB debugging mode and connecting a phone to a computer), and a 148-word description resulted in a working app installed on an actual Android device in about ten minutes.


DEGAN : Towards botnet detection in IIoT with dual-enhanced GAN under imbalanced data

Summary: This research paper proposes DEGAN, a machine learning approach using dual-enhanced GAN (generative adversarial network, a type of AI that learns by having two competing neural networks) to detect botnets (networks of infected computers controlled remotely) in IIoT (industrial internet of things, devices like sensors and machines in factories connected to the internet). The method addresses the challenge of imbalanced data, where there are far fewer examples of botnet attacks than normal network activity, which makes training detection systems difficult.


AdventHealth advances whole-person care with OpenAI

Summary: AdventHealth, a hospital system across nine states, is using ChatGPT for Healthcare (an AI tool built by OpenAI with extra protections for medical settings) to reduce time spent on administrative tasks like documentation and case review, allowing clinicians to focus more on patient care. The health system treated AI adoption as a core business goal rather than just a technical pilot, tracking usage metrics and having teams within each department share AI workflows tailored to their specific work. By framing the technology as 'time back' for staff rather than just automation, AdventHealth aimed to improve both operational efficiency and patient access to care.

OpenAI
ChatGPT
ChatGPT Enterprise
ChatGPT for Healthcare


Ocean Emerges From Stealth With $28M for Agentic Email Security Platform

Summary: Ocean, a newly launched startup, received $28 million in funding to develop an agentic email security platform, which uses specialized AI agents (software programs that can act autonomously to complete tasks) to analyze incoming emails and detect threats like business email compromise (when attackers impersonate trusted business contacts) and AI-generated phishing (fraudulent messages created by AI). The platform goes beyond simple filtering by examining sender intent, conversation context, and infrastructure details to identify malicious intent in emails that appear legitimate.


Microsoft releases open-source tools to operationalize AI agent safety

Summary: Microsoft has released two open-source tools, Rampart and Clarity, designed to catch safety problems in AI agents (software systems that can take actions autonomously) earlier in development. Rampart automates repeated safety testing throughout the development process to find issues like prompt injection (tricking an AI by hiding instructions in its input) and unsafe tool use, while Clarity helps engineers document and validate their design assumptions before coding begins.

Solution: Microsoft's explicit solutions are: (1) Rampart, which transforms red-team findings into repeatable automated tests that run continuously in CI/CD workflows (continuous integration/continuous deployment, the automated systems developers use to test and release code) to surface issues before production; and (2) Clarity, a tool available as a desktop app, web UI, or embedded in coding agents that guides engineers through structured conversations about agent behavior, permissions, and trust boundaries, with outputs saved as markdown files in the repository for review and version control.


Shifting Budget Dynamics for Identity Security and AI Agents

Summary: Enterprises are rapidly deploying AI agents (software systems that can act independently to complete tasks), and these agents need identity management (systems that verify who or what is accessing resources and what they're allowed to do). New research shows that budgeting for AI agent security differs significantly from how companies budget for traditional identity management projects.


AI becoming an SOC imperative for curtailing emerging cyber threats

Summary: Security teams need to adopt AI tools to defend against increasingly automated cyberattacks, but AI should only be added after securing security fundamentals like system hardening and access control. Experts stress that humans must maintain oversight of AI security systems, and security roles are evolving to focus on validating AI decisions and managing AI model hallucination (when an AI generates false information) rather than purely monitoring alerts.


CVE-2026-2734: In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` G

Summary: MLflow versions up to 3.9.0 have a security flaw in the SearchModelVersions feature (an API endpoint that retrieves information about different versions of machine learning models) that fails to check user permissions properly. This allows any logged-in user to see all model versions and sensitive details across the entire system, which is dangerous in shared environments where different teams should only access their own models.

Solution: The issue is resolved in version 3.10.0.


New Claude Integration Brings Audit Data into the Falcon Platform

Summary: CrowdStrike has integrated Anthropic's Claude Compliance API into its Falcon platform to give security teams real-time visibility into Claude AI activity, addressing the problem that AI usage is often invisible to security teams and creates audit and compliance gaps. The integration combines Claude audit data (authentication events, user activity logs, administrative changes, API usage) with other security events in Falcon Next-Gen SIEM (a security information and event management system that collects and analyzes security data) to help analysts detect threats and correlate suspicious patterns across AI and other systems. CrowdStrike's Charlotte Agentic SOAR (a tool that automates security response workflows) can then automatically trigger investigations and containment actions based on detected anomalies.

Solution: Organizations can implement the Claude Compliance API integration with CrowdStrike Falcon to ingest Claude audit data into their SOC (security operations center, the team monitoring systems for threats). As stated in the source: 'security teams can ingest and act on this data using existing SOC workflows.' The integration brings 'authentication events, user activity logs, administrative changes, and API usage' into the Falcon platform, allowing analysts to 'investigate AI-related incidents using the same workflows they already rely on' and enabling automated response through Charlotte Agentic SOAR to 'automatically trigger investigation and response workflows based on detection logic and defined policies.'

Anthropic
Claude
CrowdStrike Falcon
Falcon Next-Gen SIEM
Charlotte Agentic SOAR


In SpaceX’s IPO, Elon Musk is the risk factor

Summary: SpaceX's IPO filing reveals extensive financial interconnections between Elon Musk's various companies, including Tesla, xAI (an AI company), Grok (an AI chatbot), and others, with their relationships mentioned hundreds of times throughout the regulatory documents. These overlapping business dealings make it difficult to track how money moves between the companies, creating complexity in understanding the actual financial structure of the offering.

xAI
Grok
Tesla
Neuralink
Boring Company
Optimus


Anthropic set to hit $10.9 billion in revenue during second quarter, source says

Summary: Anthropic, an AI company known for its Claude models, is on track to generate $10.9 billion in revenue during the second quarter of 2026, which would mark its first profitable quarter and more than double its first-quarter revenue of $4.8 billion. The company has experienced explosive growth driven by enterprise demand, consumer usage, and government interest, though it faces intense competition from other AI companies like OpenAI.

Anthropic
Claude
Claude Code
OpenAI
SpaceX


Nvidia’s revenue blows past Wall Street expectations as AI boom accelerates

Summary: Nvidia's financial results exceeded Wall Street predictions, driven by continued demand for AI infrastructure and datacenters. CEO Jensen Huang emphasized that the expansion of AI computing facilities is accelerating rapidly, and that agentic AI (AI systems that can independently plan and execute tasks to accomplish goals) is now being deployed across businesses and generating measurable value.


‘Solve all diseases,’ you say?

Summary: At Google I/O, DeepMind CEO Demis Hassabis announced that Google aims to use AI to transform drug discovery and eventually solve all diseases. The article appears to be a critical analysis examining the feasibility and implications of this ambitious claim.


Why Policy in Amazon Bedrock AgentCore chose Cedar for securing agentic workflows

Summary: AI agents (autonomous systems using LLMs to solve problems) create security risks because LLMs are unpredictable and vulnerable to prompt injection (tricking an AI by hiding instructions in its input), so they can make harmful decisions with confidence. The solution is to place authorization controls (decisions about which actions are allowed) at the boundary where the agent calls external tools, rather than relying on hard-coded workflows or human approval alone. Amazon Bedrock AgentCore uses Cedar, an open-source authorization policy language, to centralize and enforce these controls outside the LLM where they cannot be bypassed.

Solution: Amazon Bedrock AgentCore Gateway sits between the agent and the tools it calls. When you associate a Policy (written in Cedar) with a Gateway, it blocks everything by default and selectively allows only specified tool invocations under defined conditions. Cedar is an open source authorization policy language developed by AWS that is purpose-built for authorization, readable by humans, and analyzable by machines using automated reasoning.


Cheap AI could derail OpenAI and Anthropic's IPOs

Summary: OpenAI and Anthropic's expected IPO valuations (both projected over $800 billion) depend on maintaining high pricing power, but cheaper AI alternatives are rapidly emerging and becoming competitive. Chinese AI labs like DeepSeek and Kimi charge a fraction of what OpenAI and Anthropic do for comparable work, and enterprises are adopting cost-reduction strategies like "advisor models" (where a cheap open-source model handles most tasks and only calls expensive frontier models when needed), causing usage of Chinese models on some platforms to jump from 1% to 60% in just one year.

OpenAI
Anthropic
Google
Meta
DeepSeek
Cohere
Mistral
NVIDIA
Databricks
Figma
Kimi
Zhipu
Moonshot
Xiaomi
CloudZero
Artificial Analysis
OpenRouter


OpenAI to confidentially file for IPO as soon as Friday: Source

Summary: OpenAI is preparing to confidentially file documents for an IPO (initial public offering, when a private company becomes publicly traded) as soon as this week, working with major investment banks like Goldman Sachs and Morgan Stanley. The company, valued at over $850 billion, is planning this public debut as part of normal strategic planning, though leadership hasn't confirmed a specific timeline.


Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development

Summary: Microsoft released two open-source tools to help developers test AI agent security during development. RAMPART is a testing framework (built on PyRIT, an earlier tool) that lets developers write test cases to find safety problems like cross-prompt injections (when untrusted data reaches an AI indirectly through sources like emails or files) and data exfiltration (unauthorized data leakage). Clarity is a planning tool that guides developers through design decisions early in a project, before coding begins, so potential issues can be addressed cheaply rather than fixed later.

Solution: Microsoft provides RAMPART and Clarity as open-source tools. According to the source: RAMPART is 'a Pytest-native safety and security testing framework for writing and running safety and security tests for AI agents' that 'evaluates the outcome of those tests and reports the results.' Clarity helps developers 'arrive at the right approach even before writing a single line of code' by 'guiding them through problem clarification, solution exploration, failure analysis, and decision tracking.' Microsoft states that using these tools 'move[s] AI safety from a one-time review to a set of living artifacts that developers can use throughout the lifecycle.'


You can now remix other people’s YouTube Shorts with AI

Summary: Google has introduced a new YouTube Shorts Remix feature that uses Gemini (Google's AI model) to let users restyle or modify other people's videos. Users can transform clips into different art styles like pixel art or anime, or digitally alter content by changing appearances, adding people, or inserting themselves into videos. Creators can choose whether to allow or block others from remixing their videos.


Google Search’s AI evolution includes more ads

Summary: Google is integrating its Gemini AI model into search ads, which will now display recommended products with AI-generated explanations of why you should buy them. This update is part of Google's broader shift toward AI-powered search results, including a new conversational search box and AI-generated content alongside traditional search results.


GitHub admits major source code leak after 3,800 internal repositories breached

Summary: GitHub confirmed that attackers compromised an employee's device through a poisoned VS Code extension (a malicious add-on program for a code editor), leading to the theft of code from around 3,800 internal repositories. The breach was detected and contained quickly, and GitHub is investigating the incident while validating that no customer data was affected, only internal GitHub code.

GitHub
Microsoft
Nx Console
AntV
TanStack Router
Trivy
Axios


GHSA-c2c9-mfw7-p8hw: Flowise: Cross-Workspace Chatflow Disclosure via chatflows/apikey Endpoint Returns All Unprotected Chatflows

Summary: Flowise has a security flaw in its `/api/v1/chatflows/apikey` endpoint that allows a user with a valid API key to view chatflow configurations (including system prompts, workflow graphs, and credential IDs) from other workspaces, as long as those chatflows don't have an API key assigned. The endpoint returns both the user's own chatflows and all unprotected chatflows across the entire system without filtering by workspace, breaking the isolation between workspaces.


GHSA-59fh-9f3p-7m39: Flowise: Mass Assignment in PUT /api/v1/user Allows Authenticated Users to Override Password Hash and Bypass Password Change Verification

Summary: Flowise has a mass assignment vulnerability in its PUT /api/v1/user endpoint that lets authenticated users directly change their password hash without verifying their old password. An attacker with a stolen session token can send a crafted request that overwrites the credential field, bypassing password verification, hashing enforcement, and policy validation, which gives them permanent access to the account.


GHSA-m837-xvxr-vqwg: Flowise: Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

Summary: Flowise, an AI tool, has a hardcoded setting that allows any webpage on the internet to make requests to its text-to-speech (TTS, a feature that converts written text into spoken audio) endpoint using your stored credentials. This bypasses the server's normal cross-origin request protection (CORS, which controls what websites can access a server's data), letting malicious webpages secretly generate speech on your behalf.

Solution: Remove the hardcoded CORS wildcard headers from the TTS endpoint. Specifically, delete these lines from `packages/server/src/controllers/text-to-speech/index.ts` at line 83: `res.setHeader('Access-Control-Allow-Origin', '*')` and `res.setHeader('Access-Control-Allow-Headers', 'Cache-Control')`. This allows the server's standard CORS middleware to handle access control instead.


Google I/O, Gemini Spark, Antigravity

Summary: Google announced Gemini Spark, an upcoming AI agent product that connects with Google apps like Gmail and Drive, which runs on Gemini 3.5 Flash and a tool called Antigravity. To address prompt injection risks (tricking an AI by hiding instructions in its input), Google stated that Spark operates in isolated virtual environments with encrypted credentials, data loss prevention policies, and a secure gateway, though the author expresses concern about whether these protections are sufficient given the sensitive data users may process through it.

Solution: According to Google's documentation, Gemini Spark implements the following security measures: 'Spark operates in a fully managed, secure runtime on Google Cloud' with 'every task executes in a fresh, strictly isolated, ephemeral VM to help ensure data never overlaps between sessions.' Additionally, 'all traffic routes through our secure Agent Gateway that enforces Data Loss Prevention (DLP) policies, while user credentials remain fully encrypted and are never exposed directly to the agent.'

Google
Gemini
Gemini 3.5 Flash
Gemini Spark
Antigravity


GHSA-7wx4-6vff-v64p: Diffusers: TOCTOU Trust Remote Code Bypass

Summary: The `diffusers` package has a TOCTOU (time-of-check-time-of-use, where a security check happens at one moment but the actual data used comes from a different moment) vulnerability in its `DiffusionPipeline.from_pretrained` function that loads models from HuggingFace Hub. An attacker can bypass the `trust_remote_code` security check by updating a repository between two separate download calls, allowing arbitrary code to execute without the user explicitly approving it.

Solution: N/A -- no mitigation discussed in source.


GHSA-fvvm-949w-qj4w: RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

Summary: RTK (Rust Token Killer, a tool that filters sensitive data before showing command output to an LLM) had a vulnerability where it automatically loaded filter configuration files from a project directory without asking the user first, allowing attackers to secretly modify what an LLM sees. An attacker could place a malicious filter file in a repository to hide or alter command output (like file contents or security scan results) without any warning, potentially concealing malicious code during development.

Solution: Fixed in v0.32.0 (PRs #623, #625): the `.rtk/filters.toml` file is now blocked by default with a visible warning stating '[rtk] WARNING: untrusted project filters — Filters NOT applied. Run rtk trust to review and enable.' The patch also adds SHA-256 hash verification (a cryptographic check ensuring the file hasn't changed) to re-block filters if the file is modified after being trusted, and introduces new `rtk trust` and `rtk untrust` commands to let users explicitly approve configuration files.


ChatGPT and other AI bots made huge errors before Scottish election, study finds

Summary: A UK study by the thinktank Demos found that AI chatbots like ChatGPT gave voters false information in response to 34% of questions about the Scottish election, including made-up scandals and invented candidates. The Electoral Commission has called for new legal controls to regulate AI platforms and prevent this kind of misinformation (false information spread to deceive people).


AI-Powered App Attacks Are Faster, More Frequent and Harder to Stop

Summary: AI, particularly agentic AI (AI systems that can plan and take actions independently), is making attacks on applications faster, cheaper, and more widespread than ever before. Attackers are now targeting all apps as primary threats rather than some being less important, and apps face hostile attacks within hours of being published online instead of days. Critical sectors like medical devices and automotive apps are seeing the steepest increases in attacks because AI tools have made it easier to reverse engineer (understand how software works by analyzing it) the complex, specialized code that once protected these systems.


On AI Security

Summary: Simply using security and privacy benchmarks (standardized tests that measure how well a system performs) is not enough to ensure AI is truly secure, because benchmarks don't accurately measure AI capabilities. Instead of relying on benchmarks alone, organizations should apply proven security engineering practices, such as process-driven standards like BSIMM (Building Security In Maturity Model, a framework that guides companies through security best practices), while staying extra vigilant since AI systems don't have a single reliable security measurement like software does.


It’s make or break time for AI labeling systems

Summary: Google and other companies are expanding AI labeling systems like SynthID (invisible watermarking that tags AI-generated images) and C2PA Content Credentials to help people identify fake or AI-generated content online. These technologies aim to combat deepfakes (manipulated videos or images made to look realistic) and other misleading AI content that has been deceiving people on social media.


1Password Teams With OpenAI to Stop AI Coding Agents From Leaking Credentials

Summary: 1Password partnered with OpenAI to protect credentials from being leaked by AI coding agents, which are AI systems that can write and deploy software automatically. The companies created an Environments MCP Server (a module that connects different systems together) for Codex that gives AI agents access to credentials only when needed, without storing them in code, prompts, or the AI model's memory where they could be stolen. Credentials are issued just-in-time, scoped to specific tasks, and kept encrypted in 1Password's vault rather than exposed where attackers could find them.

Solution: 1Password introduced an Environments MCP Server for Codex that implements just-in-time credential access. According to the source, the solution works by: (1) issuing credentials only when needed and scoped to the specific task, (2) keeping secrets outside the model's context window, (3) providing a secure runtime environment where secrets are mounted, used, and discarded with user authentication required at access time, (4) using 1Password's vault technology to keep secrets end-to-end encrypted and centrally managed, (5) limiting access through custom permissions, and (6) injecting required variables directly into the application process at runtime so credentials exist in memory only for the authorized process and only as long as needed. The source states: 'The credentials never appear in code, terminals, or model context.'


If Google can’t make AI agents useful, maybe no one can

Summary: Tech companies have long promised AI assistants but delivered disappointing results until recently, with OpenClaw, an open-source AI agent platform (software that can perform tasks autonomously), gaining popularity. Google has now announced new AI agents at I/O 2026 that can perform various tasks like gathering information and planning events, running continuously in the background with claimed seamless integration.


Optimizing Leaky Private Information Retrieval Codes to Achieve O(log K) Leakage Ratio Exponent

Summary: This research addresses leaky private information retrieval (L-PIR), a system where a user queries a database while accepting some measurable privacy leakage, quantified using differential privacy (a mathematical framework that bounds how much information an observer can learn about individual data). The researchers developed an improved L-PIR scheme that reduces privacy leakage from O(K) to O(log K) by using cyclic permutations (mathematical rearrangements) and assigning higher probabilities to keys with lower Hamming weights (fewer 1-bits in binary representation), achieving better privacy-to-cost tradeoffs than previous methods.


Trigger Without Trace: Toward Stealthy Backdoor Attack on Text-to-Image Diffusion Models

Summary: Researchers have developed a new backdoor attack method called Trigger without Trace (TwT) that can secretly compromise text-to-image diffusion models (AI systems that generate images from text descriptions) while avoiding detection. The method works by using syntactic structures (grammar patterns) as hidden triggers and employing a mathematical technique called Kernel Maximum Mean Discrepancy (KMMD, a way to match statistical distributions) to make malicious samples look identical to legitimate ones, achieving a 97.5% success rate while bypassing three existing defense detection systems.

text-to-image diffusion models
Stable Diffusion


Vul-CTG: A Multimodal Framework for Software Vulnerability Detection via Code Text and Graph Integration

Summary: Vul-CTG is a new AI framework for detecting software vulnerabilities (bugs that create security weaknesses) by combining two approaches: PLMs (pretrained language models, AI systems trained on large amounts of text) and GNNs (graph neural networks, AI systems that analyze connected data structures). The framework improves on existing methods by better combining code text analysis with program graph analysis, using contrastive learning (training the AI to recognize similarities and differences) and handling unreliable training labels, achieving about 3% better accuracy than previous approaches.


MDV: Resolving the Auxiliary Data Dilemma in Model Extraction Defenses

Summary: Model extraction attacks (MEA, where attackers steal the functionality of AI models by creating a clone with similar behavior) are a security threat that defenders counter by using auxiliary data to make the victim model give misleading predictions. However, realistic auxiliary data is hard to obtain, gives inconsistent protection, and doesn't protect all data categories equally. The paper proposes MDV (Model Defense Variational Autoencoder, a machine learning technique that generates synthetic data rather than using real data) to create virtual auxiliary data that effectively addresses all three problems.

Solution: The proposed solution is to use Model Defense Variational Autoencoder (MDV) to generate virtual auxiliary data as a replacement for realistic auxiliary data. MDV combines a Variational Autoencoder (VAE, a machine learning model that generates new synthetic data similar to training data) and a classifier, forcing learned features to follow different statistical distributions by category, then samples synthetic data from low-likelihood regions of these distributions to use as auxiliary data in defense methods.


Deepfake Detection via Exploring Degradation Inconsistency

Summary: This research presents a method to detect deepfakes (AI-generated fake videos or images of faces) by identifying inconsistencies in how image quality degrades between the background and the manipulated face regions. The approach uses a framework that learns to spot these degradation differences through two connected neural networks (deep learning models), one that creates fake images and another that detects them, working together in an adversarial process similar to a GAN (generative adversarial network, where two AI systems compete to improve each other). The method shows better performance when detecting deepfakes created by new, unseen manipulation techniques.


Anthropic Silently Patches Claude Code Sandbox Bypass

Summary: Anthropic patched a vulnerability in Claude Code's network sandbox (a restricted environment that controls where the AI can send data) that could have allowed attackers to bypass security controls and steal sensitive information. The vulnerability, called a SOCKS5 hostname null-byte injection issue (a trick where attackers hide a malicious server address using special characters to fool the security filter), was silently fixed in version 2.1.88 released on March 31, 2025, but was never publicly disclosed or assigned a tracking identifier.

Solution: The vulnerability was fixed in Claude Code version 2.1.88, released on March 31, 2025. According to Anthropic, the fix was included in a public commit to the 'sandbox-runtime' repository on March 27, 2025.

Anthropic
Claude
Claude Code
Google Gemini
GitHub Copilot


Why some security fixes never reach your vulnerability dashboard

Summary: A malicious version of Bitwarden CLI was published on npm for 90 minutes in April 2026, stealing developer credentials through a compromised GitHub Action (an automated workflow tool). The incident received a CVE (common vulnerabilities and exposures, an official vulnerability identifier), but the CVE only notified defenders after the fact rather than providing a patch to apply, highlighting how CVE has drifted from its original purpose of identifying code flaws with fixable versions to tracking security incidents.

Bitwarden
npm
Checkmarx
Red Hat
OpenSSL
Apache Struts
SolarWinds
node-ipc


CVE-2026-24215: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled

Summary: NVIDIA Triton Inference Server has a vulnerability in its DALI backend (a component that processes data) that allows attackers to cause uncontrolled resource consumption, potentially leading to a denial of service attack (making the service unavailable to legitimate users).


CVE-2026-24214: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer ove

Summary: NVIDIA Triton Inference Server has a vulnerability in its DALI backend (a component that processes data) where an attacker could trigger an integer overflow (a bug where a number exceeds the maximum value a system can store). This could allow an attacker to execute malicious code, modify data, or crash the service.

NVIDIA
NVIDIA Triton Inference Server
DALI backend