All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
Anthropic disabled access to its Fable 5 and Mythos 5 AI models after receiving a U.S. government order citing national security concerns and export control restrictions, preventing foreign nationals from using them whether inside or outside the United States. The company immediately suspended the models for all customers to ensure compliance, though other Anthropic models remain available. Anthropic stated the government did not provide specific details about the security concern and said the action did not follow transparent or fair procedures.
OpenAI released a new model called GPT-Realtime-2 for their WebRTC API (a protocol for real-time audio communication in web browsers), which offers improved reasoning capabilities with knowledge through September 2024. A developer updated their audio conversation tool to support this new model and added the ability to paste document context, allowing users to have voice conversations in their browser about custom information.
ApostropheCMS versions up to 3.6.0 contain a command injection vulnerability (CWE-78, a weakness where user input is directly used in system commands without cleaning) in the @apostrophecms/cli package's apos create command. An attacker can input malicious commands through the password prompt that will execute on the host system because the input is not properly sanitized (cleaned of dangerous characters) before being used in a shell command.
AgenticMail, a tool that allows AI agents to access email and phone services, has a security flaw in versions before 0.9.27 where the /mcp endpoint (a communication interface) accepts requests without requiring authentication (verification of identity) when started in HTTP mode. This means a remote attacker could connect to the service and use its tools directly to access real email addresses and phone numbers.
This item describes TYPO3 HTML Sanitizer (a tool that removes potentially dangerous code from HTML), which has a Cross-site Scripting vulnerability (XSS, where attackers inject malicious scripts into web pages). The content provided explains the framework for measuring vulnerability severity through metrics like attack vector, complexity, and impact, but does not describe the actual vulnerability details or its fix.
Parse Server, an open source backend framework that runs on Node.js, has a vulnerability where attackers can send specially crafted HTTP requests that cause the server to spend seconds or minutes processing a single request before checking user permissions or rate limits. An attacker only needs to know the application's public ID and can overload the server by sending a few concurrent requests or one large request, making it slow or unresponsive for legitimate users.
Google is suing a Chinese cybercrime network called Outsider that uses Gemini (Google's AI agent) to create phishing pages and send smishing attacks (fraudulent text messages impersonating trusted brands to steal personal and financial information). The network sells access to its phishing-as-a-service (PhaaS, a software tool that makes it easy for criminals to launch phishing campaigns) for as little as $88 per week, and has victimized over 100,000 people with millions in losses.
Budibase's VectorDB configuration endpoint accepts a host parameter with no validation, allowing any authenticated builder-level user to make the server connect to internal IP addresses or cloud metadata endpoints (like AWS's 169.254.169.254). This is an SSRF vulnerability (server-side request forgery, where a server is tricked into making requests to unintended destinations), enabling attackers to scan internal networks, discover running services, and potentially steal cloud credentials.
ChromaDB Rust (version 1.0.0 and later) has a security flaw where authorization validation (checking whether a user has permission to access data) is missing, allowing any logged-in user to read, write, update, or delete data from any tenant's collection (a storage area for data), even if they shouldn't have access to it. This is rated as HIGH severity with a CVSS score (a 0-10 rating of how severe a vulnerability is) of 8.8.
ChromaDB (a Python database project) versions 0.4.17 and later have a code injection vulnerability (CVE-2026-45833) that allows an authenticated attacker (someone with valid login credentials) to run arbitrary code (malicious programs) on the server by sending a malicious model repository when a specific setting is enabled. This vulnerability has a CVSS score (a 0-10 rating of how severe a vulnerability is) of 9.4, meaning it is critical.
CVE-2026-45832 is a vulnerability in ChromaDB's Python project where V1 collection-level endpoints (API access points for managing data collections) pass None (empty/null values) for the tenant and database parameters to the authorization layer, allowing attackers with login credentials to bypass authorization controls (security checks that verify what users are allowed to do) by using these older endpoints. The vulnerability has a CVSS score (0-10 severity rating) of 8.8, indicating it is high-severity.
ChromaDB Python versions 0.5.0 and later contain a vulnerability in the SimpleRBACAuthorizationProvider (a tool that checks user permissions) where it verifies that a user has permission to do something but fails to check which tenant, database, or collection that permission applies to. This allows users to perform actions across different tenants (separate customer environments) that they shouldn't be able to access.
ChromaDB (a Python tool for managing data collections) version 0.4.17 and later has a security flaw where authorization validation (checking if a user should be allowed to access something) is missing. This allows any user who is already logged in to read, write, change, or delete data in any tenant's collection (a shared workspace), even if they shouldn't have access to it. The severity is rated as HIGH with a CVSS score of 8.8 (a 0-10 scale measuring how serious a vulnerability is).
LangGraph's MongoDBSaver had a NoSQL injection vulnerability (a type of attack where special database commands are sneaked into queries) that allowed attackers to read checkpoint data (saved conversation states) from other users or tenants by injecting MongoDB operators like $gt into identifier fields. This happened because the code didn't enforce that these fields must be strings before using them in database queries.
OpenAI says it will work constructively with state attorneys general who are investigating the company over concerns about advertising, data handling, and potential harms to minors and seniors. The investigation comes amid multiple lawsuits against OpenAI, including cases where families allege ChatGPT (a conversational AI chatbot) was misused to cause harm, and as the company prepares for a public stock offering.
Fix: OpenAI stated that 'Today's ChatGPT includes a more protective experience for minors and people experiencing difficult situations, with safeguards that direct them to real-world resources and trusted human contacts.' No specific version numbers or technical implementation details are provided in the source.
CNBC TechnologyResearchers discovered that they can figure out what actions industrial robots are performing just by analyzing encrypted network traffic (data traveling across networks in scrambled form) without being able to read the actual messages. The study shows both practical attacks that successfully identified robot movements and theoretical limits on how much information can be extracted from this type of traffic. This reveals a security gap where encryption alone may not fully protect sensitive robot operations from being monitored.
Fix: This issue has been patched in version 0.9.27.
NVD/CVE DatabaseFix: Update Parse Server to version 8.6.77 or 9.9.1-alpha.1 or later, as this issue has been patched in these versions.
NVD/CVE DatabaseFix: Google is filing a lawsuit to dismantle the network's infrastructure and partnering with AT&T, T-Mobile, and Verizon to block phishing messages from reaching customers.
The Hacker NewsShadow AI (AI tools used by employees without IT approval or visibility) is becoming a major security risk because employees adopt AI faster than security teams can track, often on devices that traditional security tools can't monitor. Most organizations cannot see how many AI tools are in use, where they're being used, or what data is being shared with them, creating a dangerous gap between employee activity and security oversight.
Fix: Upgrade to @langchain/langgraph-checkpoint-mongodb@1.3.1 or later. Version 1.3.1 adds runtime validation for configurable checkpoint identifiers and rejects invalid values before they reach MongoDB query paths. The patch also includes regression tests covering object and operator payloads. As additional protection, validate identifier fields at API boundaries and avoid passing raw client objects into graph config.
GitHub Advisory DatabaseThumbnail-preserving encryption (TPE, a method that keeps some visual information visible in encrypted images to balance usability and privacy) has a security weakness: existing approaches encrypt pixels, blocks, or channels separately, creating vulnerabilities. Researchers propose a new 'triple-chain architecture' that links encryption at three levels (pixels, blocks, and channels) so that any small change to an image causes completely different encryption results, making the system more secure while still maintaining TPE benefits.
This paper addresses the challenge of training prohibited item detection models for X-ray security screening, which normally requires large amounts of manually collected and labeled images. The authors propose Xsyn, a one-stage synthetic image generation pipeline using text-to-image generation (a type of AI that creates images from text descriptions) that automatically creates realistic X-ray security images without requiring labor-intensive manual image extraction and annotation.
This paper presents a new cryptographic method called certificateless lattice-based matchmaking encryption (CLLME) designed to secure data sharing on cloud platforms while meeting regulations like GDPR. CLLME provides post-quantum security (protection against future quantum computers), allows both senders and receivers to control who can access data, and includes a filtering mechanism to avoid decrypting irrelevant encrypted files. The researchers proved the method is mathematically secure and showed it works efficiently in real-world scenarios.