How MCP Servers Can Expose Enterprise Secrets
The Hacker NewsAug 17, 2026AI Security / Identity Security MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned...
2026AI
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Swati KhandelwalAug 11, 2026AI Security / Cyber Attack A malicious tool server connected to an AI coding assistant can quietly...
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Ravie LakshmananAug 05, 2026AI Security / Threat Intelligence Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access...
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Swati KhandelwalAug 04, 2026AI Security / DevSecOps Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python...
Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost
Swati KhandelwalJul 28, 2026AI Security / Vulnerability Management Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability...
The Fastest Path to AI Adoption Runs Through Security
The Hacker NewsJul 22, 2026AI Security / Shadow IT Security leaders who build fast, visible paths to AI adoption are...
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
Ravie LakshmananJul 22, 2026AI Security / Cloud Security OpenAI on Tuesday said a combination of its artificial intelligence (AI) models,...
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Ravie LakshmananJul 20, 2026AI Security / Vulnerability In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that...
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Ravie LakshmananJul 10, 2026AI Security / Vulnerability Details have emerged about three now-patched security flaws in the OpenClaw personal artificial...
AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up
The Hacker NewsJul 09, 2026AI Security / Zero Trust AI has changed how fast attacks move. Work that once took...
What Changes When Your Software Supply Chain Includes AI Writing Your Code?
The Hacker NewsJul 07, 2026AI Security / Software Supply Chain Software supply chain security was hard enough. Then AI joined...
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Swati KhandelwalJul 01, 2026AI Coding / Vulnerability Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking...
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
Swati KhandelwalJun 30, 2026AI Security / Software Supply Chain The safety check that is supposed to stop an AI coding...
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
Swati KhandelwalJun 26, 2026AI Security / Vulnerability A high-severity flaw in Amazon Q Developer let a malicious repository run commands...
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
Ravie LakshmananJun 25, 2026AI Security / Malware A previously undocumented Rust-based macOS implant and information stealer has been found to...
