Top GenAI security resources — November 2026

Summary

A large request to GLM-5.3 on Cloudflare Workers AI could return another tenant's inference content instead of an answer, a flaw traced to upstream SGLang and since fixed by Cloudflare. vLLM received three October advisories covering remote code execution, a route to pickle.loads(), and a denial of service from a single request.

Related items

• InfoMicrosoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 NeuronsSame vendor · The Hacker News
• MediumNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentialsSame vendor · CSO Online
• MediumDetecting sleeper agents hiding in AI model neuronsSame vendor · Microsoft Security Blog
• MediumCVE-2026-83953 GitHub Copilot for Jetbrains Information Disclosure VulnerabilitySame vendor · MSRC Security Update Guide
• InfoCVE-2026-119990 Azure OpenAI Elevation of Privilege VulnerabilitySame vendor · MSRC Security Update Guide