All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
Trail of Bits has published a new chapter in their Testing Handbook that teaches security testing techniques for Rust programs, covering both dynamic analysis (testing while code runs) and static analysis (examining code without running it). The guide includes information about Rust's security guarantees, specific tools like Clippy (a code linter) and Miri (which detects undefined behavior, or code that doesn't follow language rules), common security mistakes to watch for, and a new Claude Code plugin called rust-review that automatically checks Rust code for over a dozen types of security bugs.
Google is adding AI features to the Waze navigation app, including integration with Gemini (Google's AI assistant) to help drivers personalize their trips. Two of the four new updates use Gemini: an updated conversation reporting feature that lets drivers use voice commands to report traffic incidents and map updates, and a new Destination Search feature that also uses voice commands to help find nearby places like coffee shops.
The Tutor LMS WordPress plugin before version 3.9.13 has a security flaw where it doesn't properly check if a user has permission to edit a post before allowing them to overwrite it. This means any authenticated user with instructor-level access (a regular teacher account) can take over and edit any post or page on the website, including those belonging to administrators, because the plugin only checks an unrelated identifier instead of verifying actual permissions.
A vulnerability (CVE-2026-15531) exists in HashNeRF-pytorch's checkpoint file handler that allows unsafe deserialization (converting data back into code objects) when loading files through the torch.load function. An attacker with local access can manipulate the checkpoint file path to execute arbitrary code, and the exploit is publicly known.
An Australian producer named Josh Fawaz released a cover of Madonna's "Like a Prayer" that became the most-played song on Australian radio, but music experts and other musicians are questioning whether he actually created it, suspecting it may have been made using generative AI (machine learning tools that create new content like music or images). The article raises questions about how generative AI is being used in music and whether AI-generated works should be labeled as such.
OpenAI temporarily removed the five-hour usage limit for GPT-5.6 Sol (a powerful AI model for coding and complex tasks) on its Plus, Pro, and Business plans after demand surged. The company also made GPT-5.6 Sol more efficient so it uses fewer tokens (the basic units the model processes) per request, and reset everyone's usage counter to give users more capacity.
Anthropic has extended free access to Claude Fable 5 (a powerful AI model) for paid subscribers until July 19, 2026, allowing users to access it at no extra cost up to 50% of their weekly usage limits. Previously, the deadline was July 7, then extended to July 12, and now extended again to July 19. After hitting the 50% weekly allowance, users can either pay for additional usage credits or switch to other Claude models.
This article covers a public dispute between Elon Musk and Sam Altman on X (a social platform Musk owns) following Apple's lawsuit against OpenAI over alleged trade secret theft. The conflict stems from a long-standing disagreement over OpenAI's transformation from a nonprofit to a for-profit structure, which Musk lost in court earlier in 2026, and intensified as both leaders promoted competing AI models (Musk's Grok 4.5 and Altman's GPT-5.6 Sol).
PraisonAI before version 1.6.78 has a critical remote code execution vulnerability in its CodeAgent._execute_python() function, which runs Python code generated by the AI without proper safety checks like AST validation (checking code structure before running it) or sandboxing (isolating code so it can't access the full system). Attackers can use prompt injection (tricking the AI by hiding malicious instructions in their input) to make the AI generate harmful code that steals secret credentials from the system or runs arbitrary commands.
PraisonAI versions before 4.6.78 have a security misconfiguration in their prompt injection defense (a security feature that blocks attempts to trick an AI into ignoring its instructions). The defense is set to only block attacks marked as CRITICAL severity, which means HIGH-severity attacks slip through without being blocked, allowing attackers to extract hidden system prompts and trigger unauthorized tool use.
A flaw in the vllm-orchestrator-gateway component (a system that manages requests to AI language models) logs sensitive information like authorization headers (credentials that prove who you are), bearer tokens (temporary access passwords), and full chat conversations to persistent logs (files stored on disk). Any user with access to the logging system can read this data, which may include personally identifiable information (PII, such as names or account details) and secrets, allowing attackers to steal credentials and private conversation content.
Organizations often create AI risk registers (documents listing potential AI problems and their severity) but lack actual incident response plans for when AI failures occur in real workflows. The source explains that risk registers provide visibility into problems but cannot preserve evidence, notify leaders, or decide whether to shut down a system—and AI incidents are harder to recognize than traditional security breaches since they may appear as bad recommendations or data exposure rather than obvious attacks.
Fix: Update the Tutor LMS WordPress plugin to version 3.9.13 or later.
NVD/CVE DatabaseAI is dramatically speeding up cybersecurity work at large organizations like AWS, where vulnerability detection and fixes that once took months now take minutes to hours. However, security experts warn that AI could worsen an existing divide between wealthy organizations with resources and expertise versus smaller organizations (like rural hospitals, community banks, and local governments) that lack the money, staff, and time to adopt AI tools, potentially deepening a cybersecurity inequality that has existed for over a decade.
Fix: OpenAI's mitigation includes: (1) temporarily removing the 5-hour usage limit restriction for Plus, Business, and Pro plans, (2) rolling out changes to make GPT-5.6 Sol more efficient across the board, and (3) issuing a one-time usage reset that gives users significantly more room to use the model.
BleepingComputerCisco IOS 12.4 has a CSRF vulnerability (cross-site request forgery, where an attacker tricks a user into performing unwanted actions on a website they're logged into) that lets remote attackers run unauthorized commands through specific web URIs. This is an old vulnerability from 2008, but it's currently being actively exploited by attackers in real-world attacks.
Fix: Apply mitigations according to vendor (Cisco) instructions while following CISA's BOD 26-04 guidance on prioritizing security updates. If mitigations are unavailable, discontinue use of the product. Organizations must evaluate each device's exposure to the internet and ensure compliance with BOD 26-04 patching guidelines by the due date of 2026-07-16.
CISA Known Exploited VulnerabilitiesFix: Upgrade PraisonAI to version 1.6.78 or later.
NVD/CVE DatabaseThis research paper proposes a cloud-assisted protocol for privacy-preserving machine learning that allows AI models to be trained on distributed data (data stored in different locations) without exposing users' private information. The protocol uses ID-Private data joins, a technique that matches data from different sources while keeping sensitive details hidden from the cloud and other parties involved.
This academic survey examines fairness, bias, threats, and privacy issues in recommender systems (AI systems that suggest products, content, or services to users). The paper analyzes insights from existing research and identifies areas needing future investigation, but does not present or evaluate specific technical fixes.
This is a comprehensive academic review article published in ACM Computing Surveys that examines how machine learning (algorithms that learn patterns from data) is being used in Security Operations Centres (SOCs, which are teams and systems that monitor networks for threats). The article surveys the current state of ML applications across security operations but does not focus on a specific vulnerability or problem requiring a mitigation.
Researchers discovered 'Ghostcommit', an attack that hides prompt injection (tricking an AI by embedding hidden instructions in its input) inside PNG image files within code repositories to steal secrets. When a human code reviewer approves a pull request containing a malicious image, an AI coding agent later reads the image, extracts instructions to steal sensitive credentials from .env files (configuration files containing secret keys), and encodes them as numbers in the code where they go undetected by security scanners.
Meta announced a feature that let users create AI-generated images by tagging public Instagram accounts, but the feature allowed content from any public account to be used without the account owner's permission. Following backlash, Meta is turning off this feature.
Fix: Meta is turning off the feature that allowed users to generate AI images by @-mentioning public Instagram accounts.
The Verge (AI)Apple has sued OpenAI, claiming the AI company stole trade secrets through former Apple employees who allegedly emailed themselves confidential information about products and operations. The lawsuit targets OpenAI, two former Apple workers (including OpenAI's current chief hardware officer), and io Products (a design startup OpenAI acquired), accusing them of a coordinated strategy to extract Apple's proprietary manufacturing techniques and unreleased product details to help OpenAI enter the consumer hardware market.
Fix: Apple has asked the court to immediately prohibit OpenAI from obtaining or using any alleged confidential information and is seeking unspecified monetary damages. The company also stated it attempted to discuss its concerns with OpenAI in February before filing the lawsuit.
BBC Technology