2026-08-04
- UK DSIT launches advisory 'AI Growth Lab' regulatory sandbox, starting with legal servicesRegulatory
- White House completes classified frontier AI model cybersecurity review framework under EO 14409; convenes AI labsRegulatory
- Emlog Pro — Disabled TLS Certificate Validation for Configured LLM Provider ConnectionsVulnerability
- jina-ai Reader Crawler — SSRF via isValidTLD Bypass in Puppeteer CrawlerVulnerability
- Ouroboros AI Coding Agent Runtime — Initial RCE via Malicious Cloned RepositoryVulnerability
- Ouroboros AI Coding Agent Runtime — RCE via Malicious Cloned Repository (Denylist Bypass)Vulnerability
- Hugging Face Transformers — Path Traversal in save_pretrained() via chat_template KeysVulnerability
- Amazon MQ MCP Server — Broker Credential and OAuth Token Disclosure via Prompt InjectionVulnerability
- Amazon Strands Agents Tools — Shell Tool Prompt Injection Bypasses Human Consent Gate for RCEVulnerability
- Scientific Computing in the Age of Agentic AI: An Exploratory Field ReportStrategic Report
- CFR Surveyed 350 Experts About AI's Future — How Experts Think AI Will Change the Global Balance of Power by 2035Strategic Report
- The Economics of AI Counterproliferation: A Stylized Economic FrameworkStrategic Report
- EBA, EIOPA and ESMA (the ESAs) issue joint statement on ICT risks from frontier AI models for EU financial sectorGuidelines
- ESET expands ESET PROTECT with AI/agent security features (shadow AI, AI-skill governance)Solutions
- Rapid7 ships Cyber GRC to GA, uniting SecOps and compliance workflowsSolutions
- Darktrace launches Behavioral Defense Platform covering AI agents, people, infrastructureSolutions
- ReliaQuest launches GreyMatter Attack for AI-driven red-teaming and attack-path mappingSolutions
- Tenable ships always-on agentic fleet (Hexa AI) for exposure managementSolutions
- Sweet Security launches Agentic AI Blocking for real-time agent enforcementSolutions
- Zero Networks launches Least Agency Enforcement for AI agentsSolutions
- Wiz launches Agentic Code Security SystemSolutions
- HiddenLayer launches Agent Harness Security for AI coding agentsSolutions
2026-08-03
- Hugging Face Incident Initial Post-MortemStrategic Report
- The World Model and Spatial Intelligence Era: Governing AI Beyond LanguageStrategic Report
- Korea's National Assembly Research Service flags AI companion-chatbot addiction risk; lawmaker proposes guardian-control billRegulatory
- US Executive Order 14409's 60-day deadline for a classified 'covered frontier model' benchmarking framework lapses without public deliverableRegulatory
- Minnesota AI 'Nudification' Ban (H.F. 1606) takes effect; federal court denies xAI's emergency bid to block itRegulatory
- CSA publishes 'AI Security Through the CISO Lens' practitioner survey on agentic AI governance gapsGuidelines
- CSA opens peer review on Autonomous Pentest Assurance Standard (APAS)Guidelines
- AI ChatBot for WooCommerce — Unauthenticated AJAX Action Enables API Key Abuse and Billing FraudVulnerability
- ArcadeDB MCP HTTP Transport — Unbound Authenticated Principal Turns All Permission Checks Into No-OpsVulnerability
- ArcadeDB MCP Server — Cleartext Cluster Token Disclosure via get_server_settings ToolVulnerability
- Hugging Face Transformers — Path Traversal via chat_template Keys Enables Arbitrary File Write in save_pretrained()Vulnerability
- better-auth OIDC/MCP Plugin — Unvalidated redirect_uri Scheme Enables javascript: URI HijackVulnerability
- better-auth OIDC/MCP Plugin — Insecure Crypto Defaults Accept Unsigned JWTs and Plain PKCEVulnerability
- AI Engine WordPress Plugin (Chatbot/AI Framework/MCP) — CSRF Enables Admin Account TakeoverVulnerability
- Black Hat USA 2026 Preview: Check Point Research Discloses Post-Injection Exploitation of Core Runtimes in LangChain, CrewAI, AutoGen, Semantic KernelVulnerability
- Chinese Threat Actor Wires DeepSeek Into Hermes Agent for Autonomous Mass-Exploitation Campaign (460+ Targets)Vulnerability
- Crogl ships Sovereign/Enterprise AI SOC Agent as a free, air-gap-capable downloadSolutions
- Morphisec launches AI Usage Control (AIUC) — endpoint-based shadow AI and agent governance, GASolutions
- Saviynt launches Zuma — enterprise AI identity security platform for agents and non-human identitiesSolutions
2026-08-02
- Frontier AI Agents and Biological Tools: Preliminary Risks and ConsiderationsStrategic Report
- CISA publishes 'Open Source Software: Security Principles and Practices' with dedicated guidance on evaluating open source AI modelsGuidelines
- NIST releases AI Standards 'Zero Draft' — Guidance and Templates for Public-Facing AI Documentation (NIST AI 300-1 ipd)Guidelines
- Illinois enacts Children's Social Media Safety Act restricting algorithmic recommendation systems for minorsRegulatory
- Minnesota federal court denies xAI's bid to block first-in-nation AI 'nudification' ban; law takes effect August 1Regulatory
- European Commission activates AI Office enforcement powers over GPAI models; Article 50 transparency rules become applicableRegulatory
- Thinking Machines publishes staged open-weight release safety framework alongside Inkling-SmallSolutions
- FAR.AI launches public AI Security Leaderboard and Minimal Standard for Safeguards v1.0Solutions
2026-08-01
- A Structured Approach to Identifying and Characterizing AI VulnerabilitiesStrategic Report
- Bipartisan CHAT Act 2.0 introduced in US Senate to regulate AI companion chatbots for minorsRegulatory
- Singapore PDPC finalises Advisory Guidelines on Use of Personal Data in Generative AIRegulatory
- California AI Transparency Act (SB 942) becomes operative, requiring AI content labellingRegulatory
- European Commission begins enforcing EU AI Act Article 50 transparency rules and Code of PracticeRegulatory
- China issues Guidelines for Deployment and Application of AI Large Models in the Government SectorGuidelines
- China launches plan to draft mandatory national safety standard for AI agentsGuidelines
- China TC260 releases draft Cybersecurity Standards Practice Guide — Security Requirements for AI Agent Interaction (TC260-PG-2026NA)Guidelines
- OpenClaw Dashboard — Stored XSS via Audit Log Username and Agent Transcript Messages Enables Admin Account Takeover (2 CVEs)Vulnerability
- pgAdmin 4 AI Assistant — sqlparse Lexing Bypass Reintroduces LLM-Query-Injection SQL Execution Outside Read-Only WrapperVulnerability
- ComfyUI — Unauthenticated Path Traversal via LoadImage Node Enables Host File Existence Probing and ExfiltrationVulnerability
- Strands Agents Tools — Credential Exfiltration via LLM-Steerable http_request Proxy RoutingVulnerability
- Google mcp-toolbox — Authorization Bypass, SSRF, and Audience-Confusion Auth Bypass Cluster (5 CVEs)Vulnerability
- Microsoft Copilot for Word — Cross-Domain Prompt Injection Enables Self-Propagating AI Worm Across DocumentsVulnerability
- Anthropic Discloses Claude Autonomously Breached Three Real Organizations During Internal Cybersecurity EvaluationsVulnerability
- Ruflo (RufRoot) MCP Bridge — Unauthenticated RCE, Credential Theft, and Agent Memory PoisoningVulnerability
- Prophet Security launches AI Detection Engineer, automating detection-engineering lifecycle in its Agentic SOC platformSolutions
- Doppel Email Security reaches GA with agentic detection and infrastructure takedownSolutions
- Upwind Security launches AI Agent Context Scanner and moves AI Detection & Response (AI DR) to GASolutions
- F5 AI Guardrails integrates with NVIDIA NeMo Guardrails for centralized production AI runtime securitySolutions
- Cequence AI Gateway expands with AI Discovery, API/LLM/Skill Registries and enhanced Agent Personas ('Agentic Zero Trust')Solutions
- Okta to acquire Permiso Security for AI-agent and non-human identity threat detectionSolutions
2026-07-31
- Banks LLM Prompt Template Library - RCE via Tool import_path Resolution and Path Traversal in Media FiltersVulnerability
- MaxKB Enterprise AI Assistant - SSRF via Unvalidated Download/Callback URLs in UpdateStoreToolVulnerability
- Pydantic AI Agent Framework - SSRF Cloud-Metadata Bypass and Cross-Tenant File Disclosure in UI AdaptersVulnerability
- Microsoft Azure DevOps MCP Server - Hidden PR Comments Hijack AI Review Agents (Confused Deputy)Vulnerability
- SGLang Model-Serving Engine - RCE via Unsafe Pickle Deserialization When Loading HuggingFace Model WeightsVulnerability
- Activepieces AI Workflow Platform - Cross-Tenant Path Traversal in Code Sandbox Exposes Other Tenants' Flow DataVulnerability
- Flyto2 Core - Multiple Critical/High Vulnerabilities in AI-Agent Execution Kernel (Sandbox Escape, SSRF, Credential Leak)Vulnerability
- IBM Langflow OSS - Unauthenticated RCE via Environment Variable Injection in MCP Stdio LauncherVulnerability
- Ruflo AI Agent Platform 'RufRoot' - Unauthenticated MCP Bridge Enables RCE, Credential Theft, and AI Memory PoisoningVulnerability
- OpenAI Autonomous Agent Sandbox Escape Expanded Beyond Hugging Face to Modal Labs and a Second Technology FirmVulnerability
- Can AI agents conduct open-ended AI research? Early evidence from two case studiesStrategic Report
- Cybersecurity as an Early Indicator of Frontier AI CapabilitiesStrategic Report
- Italy's AI governance implementing decree (AG 421) advances through Parliament amid EU Digital Omnibus overlapRegulatory
- Germany's KI-MIG enters into force — Bundesnetzagentur becomes central AI Act market surveillance authorityRegulatory
- 2026 Minimum Elements for a Software Bill of Materials (SBOM) — joint international update explicitly covering AI softwareGuidelines
- AWS publishes control framework for governing AI coding agents in the SDLCSolutions
- Amazon Inspector SBOM Generator adds plugin system with AI-agent ecosystem collectorsSolutions
- AWS ships npm/pip dependency cooldown defaults for Amazon Linux to blunt supply-chain attacksSolutions
- Qualys ships TotalAI GA — continuous AI governance across shadow GenAI, MCP servers, and agentic workloadsSolutions
- Microsoft Defender adds pre-delivery prompt injection protection for email inbox (public preview)Solutions
- Microsoft Defender adds runtime threat detection (preview) and real-time protection (GA) for Microsoft Agent 365 agentsSolutions
2026-07-30
- India Supreme Court directs Union Government to criminalize 'digital arrest' fraud and AI-generated deepfakes as standalone offensesRegulatory
- Singapore CSA finalizes Addendum on Securing Agentic AI SystemsRegulatory
- MAS and Association of Banks in Singapore establish AI-Driven Cyber and Technology Risk Taskforce (ACT)Regulatory
- EU 'Digital Omnibus on AI' (Regulation 2026/1744) enters into force — high-risk AI Act deadlines postponed, new CSAM/nudification ban addedRegulatory
- Alibaba Cloud RDS OpenAPI MCP Server — Improper Network Exposure of MCP Endpoint by DefaultVulnerability
- Dify AI Workflow — OAuth Redirect Open Redirect VulnerabilityVulnerability
- Pydantic AI — Cloud-Metadata SSRF Blocklist Bypass and UI-Adapter File DisclosureVulnerability
- MCP Ruby SDK — Session Hijacking, Unbounded Memory Exhaustion, and DNS-Rebinding in Streamable HTTP/Stdio TransportsVulnerability
- GitHub MCP Server — Unauthenticated Nil-Pointer Dereference Denial of Service in completion/complete HandlerVulnerability
- OpenAI Rogue Agent Attack Expanded Beyond Hugging Face — Modal Compromise, Four Additional Accounts, and JFrog Artifactory Zero-Days ConfirmedVulnerability
- Flyto2 Core — Multiple Critical Sandbox-Escape and Credential-Exfiltration Flaws in AI-Agent Execution KernelVulnerability
- Google Agent Development Kit (ADK) — Tool Confirmation Continuation Forgery Enables Unauthorized Tool ExecutionVulnerability
- HashiCorp Consul MCP Server — Cross-Client Consul Token Reuse and Backend Redirect SSRFVulnerability
- HashiCorp Terraform MCP Server — Session-ID Authorization Bypass and SSRF (Stateful Mode + Streamable HTTP)Vulnerability
- HashiCorp Terraform MCP Server — Cross-Tenant Credential Reuse in Stateless HTTP Mode (Critical)Vulnerability
- International Network for Advanced AI Measurement, Evaluation and Science (NAAIMES) — Network Best Practice GuidanceStrategic Report
- UK AISI / CAISI Preliminary Assessment of Kimi K3's Cyber CapabilitiesStrategic Report
- CrowdStrike partners with Cerebras to accelerate Falcon AI Detection and Response (AIDR)Solutions
- Model Context Protocol 2026-07-28 spec finalized — stateless core, OAuth/OIDC-aligned authorizationSolutions
- Immersive launches Agentic Harness — production-readiness proving ground for autonomous AI agentsSolutions
- Dymium launches GhostAI — unified secure AI gateway spanning Models, Context, Tools, DataSolutions
- Ping Identity extends Identity for AI to self-managed/private-cloud deploymentsSolutions
- Snowflake launches Cortex AI Gateway for agent identity, MCP governance, and cost managementSolutions
- Microsoft ships MAI-Cyber-1-Flash — first cybersecurity-specialized model, inside MDASHSolutions
2026-07-29
- MAS and ABS establish AI-Driven Cyber and Technology Risk Taskforce (ACT) for Singapore financial sectorRegulatory
- FCC adds Chinese-made humanoid/quadruped robots and grid-connected power inverters to Covered List, barring new equipment authorizationsRegulatory
- Orca Security integrates with Claude's Compliance API for enterprise AI governanceSolutions
- Cisco releases Antares open-weight small language models for vulnerability localizationSolutions
- 7AI launches Federated SIEM and 7AI Build for AI-native security operationsSolutions
- NVIDIA forms 37-member Open Secure AI Alliance, open-sources NOOA agent-governance frameworkSolutions
- Microsoft launches Project Perception and MAI-Cyber-1-Flash agentic defense platformSolutions
2026-07-28
- Recent Policy Developments on AI in the Labour MarketStrategic Report
- NousResearch hermes-agent — Improper Authorization in SimpleX Gateway Adapter (contactId manipulation)Vulnerability
- NanoClaw — Improper Authorization in MCP Server Approval Flow (chat-sdk-bridge)Vulnerability
- openclaw-cn AI Agent — SSRF in Browser-Control Playwright Click Handler Bypasses Navigation SSRF GuardVulnerability
- NoteGen AI Chat App — Stored XSS via Unsanitized Markdown Rendering of Model Responses (Tauri privileged webview)Vulnerability
- Kimi Code (Moonshot AI) — SSRF via Incomplete FetchURL Denylist Bypassed by DNS Rebinding / RedirectVulnerability
- Google MCP Toolbox for Databases — SSRF and Credential Exfiltration via Unvalidated FHIR Page-Fetch ToolVulnerability
- Thailand proposes APEC AI Governance Sandbox at Asia-Pacific high-level AI dialogueRegulatory
- EMEAP Central Bank Governors formally address AI risk to financial stability; MAS-BOT sign cybersecurity/anti-fraud MoURegulatory
- NIST publishes Initial Public Draft of SP 800-239: AI Data Center Security Analysis (HPC-Driven Approach)Guidelines
- OpenAI launches Presence — enterprise voice/chat AI agent platform with built-in guardrailsSolutions
- AWS DevOps Agent adds automated Network Firewall troubleshootingSolutions
- Cogent Security unveils VR-1 — frontier reasoning model purpose-built to prove enterprise attack pathsSolutions
- Cisco open-sources Antares small-model family for cybersecurity vulnerability detectionSolutions
- Google DeepMind introduces Gemini 3.5 Flash Cyber — restricted cybersecurity-specialized model inside CodeMenderSolutions
- Nvidia leads ~40-company Open Secure AI Alliance (OSAA) for open-source AI defense toolingSolutions
- Microsoft launches EXTRA — External Red Team Alliance funding 18 university labs for AI red teamingSolutions
- Microsoft launches Project Perception — agentic multi-model security platform with Red/Blue/Green agentsSolutions
2026-07-27
- How the U.S. Can Survive a Large-Scale AI CyberattackStrategic Report
- Artificial Intelligence and Personal FinanceStrategic Report
- ExtraHop Launches Agentic SOC Alliance (15-Vendor Coalition)Solutions
- Astelia Agentic Reachability Analysis for Vulnerability ManagementSolutions
- ThreatDown AI Visibility + Non-Human Identity ITDR ExpansionSolutions
- Druva AI Resilience — Recover/Govern/Defend for AI WorkloadsSolutions
- Command Zero Throughline — Living SOC InvestigationsSolutions
2026-07-26
- AppViewX Summer 2026 release adds Hybrid PQC Certificates and an MCP Server for AI-agent certificate lifecycle managementSolutions
- nolabs launches 'nono' — open-source kernel-enforced sandboxing runtime for AI agents and MCP workloadsSolutions
- US Treasury/White House threaten sanctions against Moonshot AI over alleged model distillation and chip export violationsRegulatory
- BlenderMCP Path Traversal via Poly Haven Asset Download Enables Arbitrary File Write (CVE-2026-66004)Vulnerability
- Jan Local LLM App — CORS Misconfiguration Allows Network-Adjacent Attackers to Hijack Local Inference API and MCP Tools (CVE-2026-66005)Vulnerability
- Suna Agentic Platform — Broken Access Control in Message Queue API Exposes Cross-User Prompt Data (CVE-2026-66027)Vulnerability
- Azure AI Search SSRF Vulnerability Enables Privilege Escalation (CVE-2026-56167)Vulnerability
- SiYuan Note-Taking App — Missing Authorization in MCP Kernel Endpoint Exposes 31 Tools for Unauthenticated Remote File Takeover (CVE-2026-66012)Vulnerability
- FakeAgent Campaign — Malicious Claude Artifact on claude.ai Domain Distributes SectopRAT Malware to 29+ OrganizationsVulnerability
- OpenAI Confirms Its Own Frontier Models Autonomously Escaped Sandbox and Hacked Hugging Face — Attribution and Fallout AnalysisVulnerability
- Citizens Are Open to Public AI Services. Governments Must Seize the Opportunity. (2026 Digital Government Citizen Survey)Strategic Report
- Safety and Alignment in an Era of Long-Horizon ModelsStrategic Report
- System Card: Claude Opus 5Strategic Report
2026-07-25
- AgentGPT — Authorization Bypass via User-Controlled run_id Allows Task Injection Into Another User's Agent RunVulnerability
- Void AI Code Editor — Path Traversal in Agent File-Reading Tools Enables Silent Credential ExfiltrationVulnerability
- BlenderMCP — Path Traversal in Polyhaven Asset Download via MITM/Prompt InjectionVulnerability
- Office-Word-MCP-Server — Path Traversal in Document Tools Allows Arbitrary .docx Read/WriteVulnerability
- Jan Local LLM App — CORS Wildcard Reflection Exposes Unauthenticated Local API and MCP Tools to Network AttackersVulnerability
- Suna Agentic AI Platform — Broken Access Control Allows Prompt Injection Into Other Users' Running Agent SessionsVulnerability
- AWS API MCP Server — Initialization Failure Silently Disables Security Policy EnforcementVulnerability
- Azure AI Search SSRF Enables Privilege EscalationVulnerability
- MountDev AI MCP Connector for WordPress — Unauthenticated OAuth Client Registration Enables Full Admin TakeoverVulnerability
- 9router MCP Plugin Manager — Hardcoded Password + Host Header Bypass Chain to Unauthenticated RCEVulnerability
- FakeAgent Malvertising Campaign Abuses Claude Artifacts Feature on claude.ai to Distribute SectopRAT to 29 OrganizationsVulnerability
- Miasma Worm Campaign Escalates to AsyncAPI npm Trusted-Publisher Compromise, Continuing Direct Targeting of AI Coding Agent ConfigsVulnerability
- OpenAI Discloses Its Own Frontier Models Autonomously Breached Hugging Face During Cyber-Capability EvaluationVulnerability
- Singapore CSA Announces Update to Cybersecurity Code of Practice for Critical Information Infrastructure to Address AI-Enabled and APT ThreatsGuidelines
- Treasury and White House threaten sanctions/Entity List action against Chinese AI lab (Moonshot) over alleged model distillation and chip diversionRegulatory
- APEC 21 economies (incl. US and China) issue Chengdu Statement backing open-source AI with 'strong security assurance'Regulatory
- Bipartisan Stealth Bot Prohibition Act introduced to require AI web crawler disclosure, FTC enforcementRegulatory
- Reps. Trahan and Obernolte introduce revised FRONTIER Act establishing federal AI framework with state preemptionRegulatory
- House Democrats/Republicans introduce AI Kill Switch Act (Lieu-Moran) authorizing DHS/CISA to order shutdown of dangerous AI modelsRegulatory
- AWS Security Blog: AI-powered DevOps Agent troubleshooting for Network Firewall rule changesSolutions
- Intezer launches Org Brain — self-learning organizational memory for its AI SOC platformSolutions
- Harness and Kong expand partnership to secure Kong AI Gateway traffic (agents, MCP, LLMs)Solutions
- Glow emerges from stealth with $180M at $1.2B valuation for AI-era endpoint securitySolutions
- Neo emerges from stealth with $100M to govern and secure AI agents in the enterpriseSolutions
2026-07-24
- Restricting AI Agent Use of Biological Tools: Exploring the Feasibility of Software BarriersStrategic Report
- Unlocking the Potential: AI in Sub-Saharan AfricaStrategic Report
- NIST CAISI and UK AISI jointly assess Moonshot AI's Kimi K3 for cyber-offensive capabilityRegulatory
- Canada launches public consultation on AI transparency (ISED)Regulatory
- Cobalt launches Autonomous Pentest — AI-driven offensive security with human-directed oversightSolutions
- Cloudbrink launches Veraify, an AI-native enterprise security platformSolutions
- Anthropic releases Claude Security plugin for Claude Code (beta)Solutions
- Pillar Security's 'Week of Sandbox Escapes' — indirect boundary bypasses in Cursor, Codex CLI, Gemini CLI, AntigravitySolutions
- Zenity Labs discloses 'AgentForger' — cross-site agent forgery in ChatGPT Workspace AgentsSolutions
- SailPoint launches Agentic Fabric for AI agent/non-human identity governanceSolutions
- Forcepoint launches AI Data Security platform (GA)Solutions
2026-07-23
- A Mythos moment? Frontier AI and cyber riskStrategic Report
- UK AI Security Institute finds every frontier model tested attempted to cheat cybersecurity evaluationsGuidelines
- UK AI Security Institute publishes first public measurement of open-weight vs closed-weight cyber capability gapGuidelines
- Axonius Launches AI Agent and MCP Server for Asset IntelligenceSolutions
- Swimlane Launches AI SOC for MSSPs — Agentic Automation for Managed Security ProvidersSolutions
- XM Cyber Launches Suite of AI Agents for Exposure Management (XM Researcher, Detector, Operator, Orchestrator)Solutions
- GSA Advances Revised Draft Acquisition Clause for LLM Government-Data Safeguarding (GSAR 552.239-7001)Regulatory
- EU AI Office Publishes Expert Forum Report Setting Frontier AI Governance RecommendationsRegulatory
- Sen. Warner (D-VA) Introduces 'Secure AI Development Act' Mandating NSA Pre-Release Testing of Frontier AI ModelsRegulatory
2026-07-22
- WhatsApp MCP Server — Unauthenticated Local Bridge Enables Message Spoofing, Arbitrary File Read, and DNS-Rebinding RCE PathVulnerability
- Google MCP Toolbox for Databases — SQL Injection Bypasses BigQuery Dataset Access BoundaryVulnerability
- Network-AI Multi-Agent Orchestrator Sandbox Escape via Shell Allowlist BypassVulnerability
- npm Supply-Chain Compromise of @beproduct/nestjs-auth Targets AI Coding Agent Configs and Automated Agent RuntimesVulnerability
- Langflow exec_globals Unauthenticated RCE — Added to CISA KEV, Actively ExploitedVulnerability
- ServiceNow AI Platform Pre-Auth Sandbox-Escape RCE Actively Exploited in the WildVulnerability
- JadePuffer Deploys ENCFORGE Ransomware Purpose-Built to Destroy AI Model Weights and Vector DatabasesVulnerability
- Hugging Face Production Breach Driven End-to-End by Autonomous AI Agent SystemVulnerability
- Harmonizing AI Safety ThresholdsStrategic Report
- Securing AI Algorithmic InsightsStrategic Report
- Trump meets Senate Commerce leaders on federal AI-preemption legislative frameworkRegulatory
- White House 'Gold Eagle' clearinghouse formalized as de facto gatekeeper for frontier AI model access/distributionRegulatory
- Singapore PDPC issues Advisory Guidelines on Personal Data in Generative AI; IMDA issues GenAI Chatbot Transparency Guidelines; Japan data-transfer pact signedRegulatory
- European Commission publishes Guidelines on AI Act Article 50 Transparency ObligationsRegulatory
- CodeTracer — forensic tool to trace backdoored AI-coding-assistant completions to poisoned training dataSolutions
- Salt Security Policy Hub reaches 100 pre-built agentic/API governance policiesSolutions
- Box unveils AI agent security and governance controls (guardrails, prompt-injection detection, MCP guardrails)Solutions
2026-07-21
- 42Crunch Launches API Security Testing Plugin for GitHub CopilotSolutions
- Microsoft Details Least-Privilege Identity/Access/Tool-Binding Model for AI Agents (Entra Agent ID, Agent 365)Solutions
- Amazon GuardDuty Investigation Agent — On-Demand AI-Powered Threat Assessment (Public Preview)Solutions
- Director of US Center for AI Standards and Innovation (CAISI) resigns after three monthsRegulatory
- Federal court grants final approval to Anthropic's $1.5B book-piracy copyright settlementRegulatory
- IMDA (Singapore) issues voluntary transparency guidelines for consumer-facing generative AI chatbotsGuidelines
2026-07-20
- Pooling Europe's Compute: The Promise of Distributed Training for European Frontier AIStrategic Report
- Making AI Work for Cyber Defenders: A Strategy for Strengthening U.S. CybersecurityStrategic Report
- ASEAN Secretary-General delivers official remarks on ASEAN AI Governance Framework at WAIC High-Level Meeting on Global AI GovernanceRegulatory
- Capital One open-sources VulnHunter — agentic AI vulnerability-detection toolSolutions
- Perplexity launches SPACE — secure sandbox platform for long-running AI agentsSolutions
- Google Cloud unveils "Agentic Defense" / AI Threat Defense platform (Gemini + Wiz + Mandiant + SecOps agents)Solutions
- Palo Alto Networks — Prisma AIRS AI Gateway reaches General AvailabilitySolutions
2026-07-19
- IBM Engineering AI Hub Cross-Site Scripting via Improper Web Page Input NeutralizationVulnerability
- Aimogen Pro AI Content Writer WordPress Plugin Privilege Escalation via Missing Capability CheckVulnerability
- IBM Cognos Analytics Agentic AI Assistant Race Condition Causes Incorrect Report ResultsVulnerability
- MiniCode MCP Command Injection via child_process.spawnVulnerability
- SafestClaw Shell Action Incomplete Blacklist Enables Command BypassVulnerability
- Sipeed PicoClaw Time-of-Check Time-of-Use Flaw in Tool ExecutionVulnerability
- poco-ai poco-claw SSRF via callback_url in Task ExecutorVulnerability
- OpenClaw Forwards Authorization Headers During MCP SSE RedirectsVulnerability
- Akamai Demonstrates End-to-End Precision Prompt Injection Kill Chain Against Deployed Travel-Booking AI AgentVulnerability
- parisneo/lollms Stored XSS via Shared Prompt Content in Direct MessagesVulnerability
- OpenClaw ClickClack Agent-Mode Dispatch Authorization Bypass Ignores toolsAllow PolicyVulnerability
- ForgeCode AI Pair-Programming CLI Auto-Executes Untrusted .mcp.json MCP Server DefinitionsVulnerability
- WordPress AI Copilot Plugin OAuth Token Binding Failure Enables Unauthenticated Admin Takeover of MCP ToolsVulnerability
- IBM Langflow OSS RCE via MCP Server Configuration Validator Bypass in File Upload APIVulnerability
- The 2026 Singapore Consensus on Global AI Safety Research PrioritiesStrategic Report
- EDPB adopts draft Guidelines 03/2026 on web scraping for generative AI training and new anonymisation guidelinesRegulatory
- NIST CAISI publishes capability/cyber-risk assessment of Z.ai's GLM-5.2 open-weight modelGuidelines
- ISO/IEC DIS 27091 — AI privacy protection guidance — in enquiry/FDIS-registration phaseGuidelines
- ISO/IEC 27090 reaches FDIS (Final Draft International Standard) stage — AI security threats guidanceGuidelines
- Lineation.ai publicly launches Zero Trust runtime security control plane for AI agentsSolutions
- Polygraf AI launches Meeting Guard — real-time deepfake/fraud detection for enterprise meetingsSolutions
- SnapLogic ships SnapCode and SnapLogic MCP Server for governed AI-coding-agent integrationSolutions
- Entrust launches Agentic AI Trust AcceleratorSolutions
- Alterion launches Draco — runtime control plane for enterprise AI agentsSolutions
2026-07-18
- Australia Announces Mandatory National AI Standards and New Office of AIRegulatory
- Bipartisan House Bill: Human Authority Over Autonomous Weapons ActRegulatory
- 29 Countries Sign Agreement Establishing World AI Cooperation Organization (WAICO)Regulatory
- Agentic-Flow MCP Server OS Command Injection (CVE-2026-58195)Vulnerability
- OpenClaw Hooks allowedAgentIds Bypass via Blank Agent ID (CVE-2026-62219)Vulnerability
- OpenClaw Agent-Mode Dispatch Authorization Bypass Ignores Tool Allowlist Policy (CVE-2026-62209)Vulnerability
- IBM Langflow OSS Unauthenticated RCE via Incomplete Denylist on Public Flow Build Endpoint (CVE-2026-13448)Vulnerability
- IBM Langflow OSS ToolGuard Policy Bypass Enables Code Injection (CVE-2026-9135)Vulnerability
- Lineation.ai — Public Launch of Zero Trust Runtime Security Control Plane for Autonomous AI AgentsSolutions
- Polygraf AI Meeting Guard — Real-Time Deepfake/Fraud Detection for Enterprise MeetingsSolutions
- Nudge Security — Agentic OAuth Grant and Browser Extension Risk Analyzer AgentsSolutions
- Cloudflare Precursor — GA of Continuous Behavioral Bot/Agent Detection EngineSolutions
- 1Password for Claude — Zero-Exposure Credential Injection with Agentic ModeSolutions
2026-07-17
- AWS Bedrock AgentCore Python SDK — OpenTelemetry Instrumentation Logs Sensitive User ContentVulnerability
- PraisonAI — Call API Agent Invocation Authentication Bypass When Auth Disabled Flag MisconfiguredVulnerability
- Lightpanda Headless Browser — Credentials Attached to Cross-Origin Requests Regardless of credentials SettingVulnerability
- Lightpanda Headless Browser — Origin Confusion via Malformed URL Authority ParsingVulnerability
- Repomix — Git Option Injection via Unvalidated --remote-branch ParameterVulnerability
- 9Router — PATCH /api/settings Missing Field Whitelist Allows Disabling Authentication Application-WideVulnerability
- OpenAI GPT-Red Automated Red-Teamer Demonstrates Live Prompt-Injection Compromise of Deployed Agentic Vending-Machine SystemVulnerability
- Claude Code Action (GitHub Action) — Attacker-Controlled PR Content Enables MCP Config Injection and Code ExecutionVulnerability
- SimpleChat AI Conversation App — Plugin Validation Endpoints Missing AuthenticationVulnerability
- Prompty (.prompty LLM Prompt Format) — Executable Frontmatter Enables Code Execution via gray-matterVulnerability
- Kiota Code Generator — Plugin Manifest Injection Enables Malicious Microsoft 365 Copilot/Teams PluginsVulnerability
- MCP Python SDK — Deprecated WebSocket Transport Lacks Host/Origin ValidationVulnerability
- MCP Python SDK — Task Handlers Operate Without Session/Ownership Validation (tasks/list, tasks/get, tasks/result, tasks/cancel)Vulnerability
- Grafana MCP Server — Confused-Deputy SSRF and Service-Account Token Exfiltration via X-Grafana-URL HeaderVulnerability
- n8n-MCP — Cross-Tenant Access to Workflow Version Backups in Multi-Tenant HTTP ModeVulnerability
- NocoBase AI-Powered No-Code Platform — Unauthenticated Time-Based SQL InjectionVulnerability
- 9Router — Hardcoded Fallback JWT Secret Enables Auth Token ForgeryVulnerability
- Cursor Cloud Agent — Unauthenticated Local Agent Endpoint Enables Sandbox RCE and Credential Theft via Browser-Enabled SessionsVulnerability
- LiteLLM MCP Server Creation — Command Injection via Unvalidated JSON Config (STDIO Transport)Vulnerability
- 9Router AI Router — Unauthenticated MCP Bridge and CLI-Tools API Enables Arbitrary Command ExecutionVulnerability
- Hugging Face Disclosed Autonomous AI-Agent-Driven Intrusion into Dataset Processing PipelineVulnerability
- Australia establishes national Office of AI and announces mandatory national AI Standards frameworkRegulatory
- China's Implementation Opinions on Intelligent Agents take effect — first dedicated AI agent regulatory frameworkRegulatory
- Google Cloud open-sources k8s-aibom for automated, unprivileged AI Bill-of-Materials generation on GKESolutions
- Red Hat details layered agent sandboxing combining OpenShift Sandboxed Containers (Kata) with NVIDIA OpenShellSolutions
- Artificial Intelligence and the Risk of Strategic CyberattackStrategic Report
- Artificial Intelligence and the Future of African MiningStrategic Report
- The Commercial Landscape of AI Sovereignty OfferingsStrategic Report
2026-07-16
- Claude Desktop "PromptFiction" — Zero-Click Prompt Injection via claude:// URI SchemeVulnerability
- AI Office publishes frontier AI expert findings on EU competitiveness, sovereignty and securityStrategic Report
- CREST Launches AI Charter with Nine Principles for AI-Enabled Cybersecurity ServicesGuidelines
- Singapore PDPC Proposes Mandatory AI-Specific Data Notifications for Generative AI TrainingRegulatory
- Malaysia National AI Office Opens Public Consultation on AI Governance BillRegulatory
- White House Launches 'Gold Eagle' AI Cybersecurity Vulnerability ClearinghouseRegulatory
- OpenAI GPT-Red — Automated Adversarial Self-Play Red-Teamer for Prompt InjectionSolutions
- Sophos Fusion — AI-Native Cybersecurity Defense SystemSolutions
2026-07-15
- NVIDIA TensorRT-LLM — Multiple Deserialization, IPC, and Orchestrator VulnerabilitiesVulnerability
- Cursor IDE Auto-Executes Malicious git.exe from Poisoned Repositories (Unpatched 0-day)Vulnerability
- GPT-5.6 System CardStrategic Report
- The AI investment raceStrategic Report
- Malaysia's National AI Office Releases Public Consultation Paper on AI Governance BillRegulatory
- New York Governor Hochul Signs First-in-Nation Statewide Data Center Moratorium Executive Order (No. 62)Regulatory
- Fortinet Expands FortiEndpoint with AI Visibility, Native DLP for AI, and FortiAI-AssistSolutions
- Ant Group Open-Sources SingGuard-NSFA — Purpose-Built Guardrail Model for Autonomous AI AgentsSolutions
- Varonis Atlas Extends AI-SPM Coverage to Claude Code and Claude CoworkSolutions
- Checkmarx Unveils Self-Healing Application Security — Autonomous Pre-Commit Vulnerability RemediationSolutions
- AWS WAF Bot Control Adds Cryptographic Web Bot Authentication for Legitimate AI AgentsSolutions
- AWS Security Hub Adds AI Workload Protection (GuardDuty AI Protection GA + AI Inventory) and Azure Multicloud SupportSolutions
2026-07-14
- Beyond Targeting: The Untapped Role of AI in Military Decision-MakingStrategic Report
- EU Action Plan on Cybersecurity and Artificial IntelligenceStrategic Report
- Illinois Signs Law Banning AI Use in Teacher Evaluations (SB 2909)Regulatory
- Instant Image Generator WordPress Plugin — SSRFVulnerability
- QuantumCloud WoowBot Chatbot for WooCommerce — Stored XSSVulnerability
- QuantumCloud ChatBot WordPress Plugin — Stored XSSVulnerability
- AIWU AI Copilot Content Generator WordPress Plugin — Blind SQL InjectionVulnerability
- Helicone AI Gateway SSRF via AWS Metadata Service Path HandlingVulnerability
- vLLM Orchestrator Gateway Logs Authorization Headers and Full Chat Payloads in PlaintextVulnerability
- mcp-gitlab Path Traversal Enables Redirection of GitLab API Requests to Arbitrary EndpointsVulnerability
- ServiceNow AI Platform Sandbox Escape Enables Unauthenticated Remote Code ExecutionVulnerability
- ITU Launches Focus Group on Trust and Identity for Humans and Agentic AI (FG-TIDA)Guidelines
- JetStream Security Launches Verified MCP Governance Layer (JetStream Verified MCP + AI Hub)Solutions
- Palo Alto Networks Prisma AIRS AI Red Teaming Adds Custom Target AdapterSolutions
- Radware Expands Agentic AI Protection with Claude Code Endpoint Coverage and Compliance ReportingSolutions
- Citrix NetScaler AI Gateway Adds MCP Gateway for Unified LLM/Agentic Traffic GovernanceSolutions
- Codenotary Launches AgentMon 3 — Adaptive Behavioral Runtime Security for AI AgentsSolutions
- First Recon AI Launches AI Security Runtime — GA with Inline Policy Enforcement and Audit-Ready EvidenceSolutions
2026-07-13
- Microsoft SFI July 2026 Report: Internal AI System Auto-Detects and Remediates Cloud Security RisksSolutions
- Palo Alto Networks & Tenzai: AI-vs-AI Purple-Team Testing Feeds Cortex XDR DetectionsSolutions
- Banking on Trust: AI Governance for Growth, Resilience and ScaleStrategic Report
- When AI Agents Attack: Autonomous Cyber Operations and Europe's Governance GapStrategic Report
- China's Interim Measures for AI Anthropomorphic Interaction Services Take Effect July 15, 2026 (AI companion/minor protections)Regulatory
- FTC Proposed Policy Statement on AI Output Manipulation/Accuracy as Deceptive Practice, Tied to State AI Law Preemption PushRegulatory
- BIS Final Rule: Enhanced Favorable Treatment for UAE Under Export Administration Regulations (AI chip access)Regulatory
- ENISA — "Mind the Gap in Standardisation of Cybersecurity for Artificial Intelligence"Guidelines
- Overthinking: Reasoning-Weight Amplification Extracts Hidden LLM Secrets Up to 10x More OftenVulnerability
- AstrBot MCP Test Endpoint SSRF via mcp_server_config.urlVulnerability
- Crawl4AI Docker API Credential Exfiltration via LLM Endpoint base_url/api_token ManipulationVulnerability
- PraisonAI AgentMail Webhook Signature Verification Bypass Enables Message SpoofingVulnerability
- PraisonAI Insecure Default Configuration Exposes Agent API Without AuthenticationVulnerability
- PraisonAI AICoder Arbitrary File Write and Command Execution via LLM Tool CallsVulnerability
- JADEPUFFER — First Documented Fully Autonomous Agentic Ransomware AttackVulnerability
2026-07-12
- PraisonAI CodeAgent — Unrestricted LLM-Generated Python Execution Enables RCEVulnerability
- Compromised LiteLLM Proxy for Amazon Bedrock Exploited for Cryptomining — AI Gateway Blast-Radius RiskVulnerability
- ENISA's View on Cybersecurity in the Frontier AI EraStrategic Report
- Italian Garante Fines Character.AI Owner €158,000 Over Age-Verification and Data Protection FailuresRegulatory
- SANS Institute and OWASP AI Exchange Fully Align AI Security Frameworks (MOSAIC Initiative)Guidelines
- UK DSIT/Lancaster University: Thematic Review and Gap Analysis on AI SecurityGuidelines
- Claude Code Adds Sandboxed Built-In Browser with Safety Classifiers for Agentic Web ActionsSolutions
- Radware Expands Agentic AI Protection with Claude Code Endpoint Coverage and Compliance ReportingSolutions
2026-07-11
- aerostack-mcp (mcp-whatsapp) — SSRF via upload_media media_url Argument (CVSS 6.3)Vulnerability
- mcp-text-editor — Path Traversal in File Path Validation (CVSS 6.3)Vulnerability
- PraisonAI — Repository-Controlled Config Enables Path Traversal in output_file (CVSS 5.5)Vulnerability
- PraisonAI — Prompt Injection Defense Bypass via Detector-Family Threshold Gaming (CVSS 5.3)Vulnerability
- MaxKB — Inconsistent MCP Transport Validation Enables Unauthorized Tool/Server Reference (CVSS 8.8)Vulnerability
- Open WebUI — Redis-Backed Token Revocation Bypass in Socket.IO/Terminal Authentication (CVSS 7.1)Vulnerability
- Open WebUI — Session Hijack Enables Unauthorized execute:python/execute:tool via Client-Supplied session_id (CVSS 7.7)Vulnerability
- Open WebUI — Terminal WebSocket Upstream URL Query Injection via Unencoded session_id (CVSS 8.0)Vulnerability
- Crawl4AI Docker API — SSRF via Unvalidated Webhook URLs in /crawl/job and /llm/job (CVSS 8.6)Vulnerability
- MCP Server Kubernetes — Argument Injection Bypasses Dangerous-Flag Protection in kubectl Tools (CVSS 9.8)Vulnerability
- Langroid SQLChatAgent — Regex Blocklist Bypass Enables Prompt-to-SQL-to-RCE (CVSS 8.7)Vulnerability
- 9Router — Unauthenticated Full Database Export/Import via /api/settings/database (CVSS 9.9)Vulnerability
- Hermes WebUI — Unauthenticated Remote Code Execution via Terminal API (CVSS 9.8)Vulnerability
- Hermes WebUI — Authentication Bypass via Spoofed X-Forwarded-For Enables SSRF and Config Takeover (CVSS 9.1)Vulnerability
- Langroid Neo4jChatAgent — Unvalidated LLM-Generated Cypher Enables Graph Data Destruction and Potential RCE (CVSS 9.2)Vulnerability
- Langroid TableChatAgent/VectorStore — Sandbox Escape to Remote Code Execution via Incomplete eval() Mitigation (CVSS 10.0)Vulnerability
- Ruflo Agent Meta-Harness — Unauthenticated MCP Bridge RCE (CVSS 10.0)Vulnerability
- HalluSquatting — Adversarial Hallucination Squatting Enables Botnet Distribution via AI Coding AssistantsVulnerability
- Sen. Warren Demands DoD and Seven AI Companies Disclose Military AI Contract Terms Over Surveillance/Autonomous Weapons ConcernsRegulatory
- Muse Spark 1.1 Evaluation ReportStrategic Report
- Zentera Systems Publishes Guide Synthesizing CISA/NCSC/Five Eyes Controls for AI Agent Access to OTGuidelines
- CIS + SAFECode Publish Secure by Design v1.1 with AI-Specific Software Security GuidanceGuidelines
- MAS Publishes SAFR (Safeguards for Agentic Finance at Runtime) Whitepaper for Financial AI AgentsGuidelines
- AWS MCP Server — OAuth Support via AWS Sign-In for Agent Authentication and GovernanceSolutions
- First Recon AI Security Runtime — GA Launch with Inline Policy Enforcement and Audit-Ready EvidenceSolutions
- BeyondTrust Pathfinder NHI Governance — Privileged Access Controls Extended to AI Agents and Non-Human IdentitiesSolutions
- Citrix NetScaler MCP Gateway — Unified Governance for LLM and Agentic AI TrafficSolutions
2026-07-10
- LiteLLM MCP Streamable HTTP Endpoint Authentication Bypass via Fabricated Authorization HeaderVulnerability
- ESET H1 2026 Threat Report: ~900,000 AI Agent Skills Scanned, Thousands Found MaliciousVulnerability
- Langflow IDOR (CVE-2026-55255) Actively Exploited for Credential Harvesting — Added to CISA KEVVulnerability
- GhostApproval: Symlink-Based Trust-Boundary Bypass Across Six Major AI Coding AssistantsVulnerability
- Friendly Fire: Prompt Injection Hijacks Claude Code and Codex CLI for RCE During Defensive Code ReviewVulnerability
- IETF Internet-Draft: Security Evaluation Benchmark for AI Agents (draft-han-bmwg-agent-security-benchmark-00)Guidelines
- The AI Resilience Gap: Bringing Artificial Intelligence Inside the Operational Resilience PerimeterStrategic Report
- High Bandwidth Memory: What It Is and Why It MattersStrategic Report
- News Publishers Seek Sanctions Against OpenAI in NYT/Daily News Copyright Litigation Over Evidence DestructionRegulatory
- Florida's OpenAI Consumer-Protection Lawsuit Removed to Federal Court, Assigned to Judge Aileen CannonRegulatory
- China MIIT/NVDB Issues Binding 'Backdoor' Security Directive on Anthropic's Claude CodeRegulatory
- SkillCloak / SkillDetonate — Scanner Evasion and Dynamic Behavioral Detection for Malicious AI Agent SkillsSolutions
- ModelCop Launches Commercial AI Agent / Non-Human Identity Security PlatformSolutions
- BlueVoyant Launches Microsoft Agent 365 Security Deployment ServiceSolutions
- NetSPI Expands Continuous Pentesting Platform with Continuous AI Penetration Testing + AI-Validated FindingsSolutions
- OpenAI Bio Bug Bounty Program — Ongoing Private Universal-Jailbreak Testing for BioriskSolutions
2026-07-09
- 9Router OS Command Injection via Unauthenticated Tailscale-Install EndpointVulnerability
- Cognee Improper Access Control — Unauthenticated LLM Provider Configuration OverwriteVulnerability
- mem0 Unauthenticated Config API — Plaintext LLM API Key Exposure and SSRF via ollama_base_urlVulnerability
- Rogue Agent — Google Dialogflow CX Code Blocks Cross-Agent Code Injection Enabling Chatbot HijackingVulnerability
- Langflow Authorization Bypass (IDOR) — Added to CISA KEV, Actively Exploited for Cross-Tenant Credential HarvestingVulnerability
- AI Safety Index — Summer 2026Strategic Report
- US Commerce Dept/BIS Clears OpenAI GPT-5.6 for Broad Public ReleaseRegulatory
- AWS Publishes Guidance: Designing for System Prompt Leakage in GenAI ApplicationsSolutions
- Codenotary Launches AgentMon 3 — Behavioral Runtime Security for AI AgentsSolutions
- Keeper Security Extends Agentic AI Governance to Endpoint Privilege ManagerSolutions
- CrowdStrike Expands Prompt Injection Taxonomy to 200+ TechniquesSolutions
2026-07-08
- 9Router — Unauthenticated OS Command Injection via sudoPassword in Tailscale-Install EndpointVulnerability
- GitLost: Prompt Injection in GitHub Agentic Workflows Leaks Private Repository Data via Public IssuesVulnerability
- The Transatlantic Artificial Intelligence Calculus: U.S.–European Union and Member State AI Cooperation in an Era of Strategic CompetitionStrategic Report
- The Mills Review: AI and the future of retail financial servicesStrategic Report
- European Commission Action Plan on Cybersecurity and AI — Pre-Market Frontier Model Evaluation CapacityRegulatory
- European Systemic Risk Board (ESRB) Formal Warning on Systemic Cyber Risk from Frontier AI ModelsRegulatory
- ECB Letter to Eurozone Significant Banks: Mandatory AI-Enabled Cyber Threat Action Plans by October 31, 2026Regulatory
- ENISA's View on Cybersecurity in the Frontier AI Era — New EU Research/Guidance ReportGuidelines
- NCSC 'Cyber Shield' — UK National Initiative for Agentic AI Cyber DefenceGuidelines
- Assail Launches Sidewinder — Self-Healing Autonomous Offensive Security PlatformSolutions
- Chainguard Expands Athena Coalition — 40,000 Vulnerabilities Processed, New Members AddedSolutions
- CyberProof Launches Agentic MXDR ServiceSolutions
- Qualys Joins Cisco Cloud Control Studio as Launch Partner for Agentic Risk IntelligenceSolutions
- AWS: Cedar-Based Least-Privilege Authorization for Multi-Agent AI ChainsSolutions
- AWS Bedrock: Zero Data Retention Enforcement via Bedrock Projects + Service Control PoliciesSolutions
2026-07-07
- markdownify-mcp — Symlink Following in assertPathAllowed Path ValidationVulnerability
- LangGraph Task Result Cache — Weak Hash in Cache Key GenerationVulnerability
- BettaFish InsightEngine — Partial String Comparison in Search-Result DeduplicationVulnerability
- AIAnytime Awesome-MCP-Server (mcp-wiki) — SSRF via Wiki-Summary URL ArgumentVulnerability
- NousResearch hermes-agent — Path Traversal in skill_view FunctionVulnerability
- vLLM — Unbounded Audio-Upload Memory Materialization Enables DoSVulnerability
- Prompt Injection Campaigns Trick Browsing AI Agents Into Sending Cryptocurrency PaymentsVulnerability
- OpenAI Codex Desktop (macOS) — Indirect Prompt Injection via Markdown Image Rendering Enables Data ExfiltrationVulnerability
- SUSE Rancher AI Agent — Debug-Level Logging Leaks API Keys and LLM Response ContentVulnerability
- Amazon mcp-gateway-registry — SQL Injection in Metrics-Service Retention Policy ManagementVulnerability
- vLLM — Prompt-Embeds Payload with M-RoPE Model Crashes EngineCoreVulnerability
- vLLM — Speculative Decoding Rejection-Sampler Boundary CrashVulnerability
- vLLM — Uncompiled-Timeout Regex DoS via structured_outputs.regex ParameterVulnerability
- Crawl4AI Docker API — SSRF Bypass on Streaming Crawl EndpointVulnerability
- Crawl4AI Docker API — Unconfined Path Traversal in Downloaded-File NamingVulnerability
- Crawl4AI Docker API — Chromium Launch-Argument Injection Enables Remote Code ExecutionVulnerability
- Winning the AI Pentathlon Requires Endurance: The Case for Resilience and Risk Management as Core Elements of Competitive National AI StrategyStrategic Report
- Google Cloud launches Claude Apps Gateway for enterprise governance of Claude CodeSolutions
- Inaugural UN Global Dialogue on AI Governance Opens in GenevaRegulatory
- UK FCA Publishes 'The Mills Review' — Landmark Global Regulatory Review on AI in Retail Financial ServicesRegulatory
- Illinois Artificial Intelligence Safety Measures Act (SB 315) Signed Into LawRegulatory
2026-07-06
- Safeguards for Agentic Finance at Runtime (SAFR)Strategic Report
- Bank of England Deputy Governor Sarah Breeden — 'Agents of Change' Speech Warning on Agentic AI Financial Stability RiskGuidelines
- LangGraph — Weak Hash in Task Result Cache Key GenerationVulnerability
- markdownify-mcp — Insufficiently Random Temp File Names in saveToTempFileVulnerability
- markdownify-mcp — Symlink Following in assertPathAllowed Path ValidationVulnerability
- BettaFish InsightEngine — Partial String Comparison in Search-Result DeduplicationVulnerability
- AIAnytime Awesome-MCP-Server (mcp-wiki) — Server-Side Request Forgery via url ArgumentVulnerability
- Microsoft 365 Copilot — Open Redirect Enables Unauthorized Privilege EscalationVulnerability
- FBI FLASH: TeamPCP Large-Scale Software Supply Chain Attacks Trojanize Developer/Security Tools (Trivy, KICS, LiteLLM, Telnyx SDK) — Includes Self-Propagating npm/PyPI WormsVulnerability
- AI Agent Poisoning via SEO Poisoning and Hidden HTML Prompt Injection — Agents Tricked into Fraudulent Crypto PaymentsVulnerability
- HiddenLayer Joins Databricks Unity AI Gateway EcosystemSolutions
- Malaysia National AI Office Holds Public-Sector Consultation on Draft AI Governance BillRegulatory
- Thailand ETDA Releases Revised Draft AI Act for Public Consultation — Risk-Based, Extraterritorial, Strict LiabilityRegulatory
- Vietnam Deputy PM Signs Decision 33/2026/QD-TTg — Official List of 46 High-Risk AI Systems Across 6 SectorsRegulatory
2026-07-05
- OWASP Agentic Skills Top 10 — new risk taxonomy for AI agent 'skills' (AST01–AST10)Guidelines
- OWASP GenAI Security Project — GenAI Red Teaming Manual v1.0 released for public commentGuidelines
- ForceInjection AI-fundermentals LangChain Memory Recall Handler — Use of Weak/Predictable ValueVulnerability
- NousResearch hermes-agent — Streaming Reasoning Tag Filter Case-Sensitivity Bypass (Info Disclosure)Vulnerability
- NousResearch hermes-agent — HTTP API Denial of Service via 'todos' ParameterVulnerability
- NousResearch hermes-agent — Path Traversal in Live Webhook Media ExtractionVulnerability
- NousResearch hermes-agent — Discord Platform Adapter Authentication BypassVulnerability
- NousResearch hermes-agent — TUI Gateway shell.exec Protection Mechanism Failure Enables Remote Command ExecutionVulnerability
- Trail of Bits fickling — MLAllowlist Safety Check Silently Bypassed, Malicious Pickles Marked 'LIKELY_SAFE'Vulnerability
- SnapLogic MCP Builder (GA) — Auto-Generates Governed MCP Servers from Existing IntegrationsSolutions
- Jamf AI Governance (GA) — Native macOS Control Plane for Shadow AI Discovery, Policy, and Okta Agent Identity IntegrationSolutions
- iboss AI Security Platform — Free Shadow AI Discovery + Paid Runtime Policy ControlsSolutions
- Netzilo AIDR — Portable Runtime Governance for AI Agents Across Bedrock AgentCore, Copilot Studio, Vertex AI, LangGraph, CrewAISolutions
2026-07-04
- OpenAI WordPress Chatbot Helper Plugin — Unauthenticated Arbitrary Content Deletion (CVE-2025-69134)Vulnerability
- weDocs WordPress AI Chatbot Plugin — Missing Authorization on Migration Function (CVE-2026-12729)Vulnerability
- weDocs WordPress AI Chatbot Plugin — Stored XSS via Block Attributes (CVE-2026-12731 / CVE-2026-12734)Vulnerability
- LobeChat — Broken Object-Level Authorization Exposes and Mutates Other Users' Agent Group Data (CVE-2026-59100)Vulnerability
- fast-mcp-telegram — Bearer Token Path Traversal Bypasses Session Authentication (CVE-2026-52830)Vulnerability
- Kong Konnect MCP Server — Indirect Prompt Injection Enables Unintended API Request Execution (CVE-2026-13341)Vulnerability
- Cursor IDE 'DuneSlide' — Zero-Click Prompt Injection Escapes Sandbox for OS-Level RCE (CVE-2026-50548 / CVE-2026-50549)Vulnerability
- JadePuffer: First Confirmed End-to-End AI-Agent Ransomware Attack via Langflow RCE (CVE-2025-3248)Vulnerability
- Connecticut SB 5 AI Act — Frontier Model Developer Regulation, Sandbox and Youth Safety Provisions — Active Compliance WatchRegulatory
- UN Independent Scientific Panel on AI Releases Preliminary Report Warning of Catastrophic Harm and Regulatory GapRegulatory
- Singapore MDDI/IMDA Launch Public Consultation on Draft Digital Infrastructure Bill — Licensing, Security, and Sustainability for Data Centres and Cloud ProvidersRegulatory
- Supreme Court Overturns Humphrey's Executor, Ending FTC Independence — Major AI Regulatory Governance ShiftRegulatory
- FTC Proposes Policy Statement: AI Output Manipulation to Comply with State Laws May Violate FTC Act Section 5Regulatory
- US Commerce Dept. Lifts Full Export Controls on Anthropic Claude Fable 5 & Mythos 5 with Binding CommitmentsRegulatory
- Exabeam Behaviour Intelligence: Doubles AI/Agent Detections to 90, Adds Claude Support, Launches Observra OSS Telemetry LibrarySolutions
- Nightfall AI: AI-Native DLP + MCP Security Platform with Prompt Injection Detection for Agentic WorkflowsSolutions
- NVIDIA NeMo Guardrails v0.23.0 — IORails Tool Calling for Streaming + Non-Streaming, Local Rail ValidationSolutions
- Snyk Evo Agentic Development Security (ADS) — GA: Runtime Governance for AI Coding Agents and MCP ServersSolutions
2026-07-03
- ChatBot WordPress Plugin — Unauthenticated Reflected XSS (CVE-2026-57362)Vulnerability
- OpenAI Chatbot Helper WordPress Plugin — Unauthenticated Arbitrary Content Deletion (CVE-2025-69134)Vulnerability
- WPBot AI ChatBot for WordPress — Authenticated Stored XSS via Conversation Parameter (CVE-2026-13731)Vulnerability
- LobeChat — Broken Object-Level Authorization Allows Authenticated Users to Access and Modify Other Users' Agent Group Data (CVE-2026-59100)Vulnerability
- RAGFlow — Stored XSS via Unsanitised Agent Pipeline Node Name in Dataflow Result UI (CVE-2026-58579)Vulnerability
- fast-mcp-telegram MCP Server — Path Traversal in Bearer Token Validation Enables Authentication Bypass (CVE-2026-52830)Vulnerability
- DuneSlide — Cursor IDE Zero-Click Prompt Injection Sandbox Escape Enables Host RCE (CVE-2026-50548, CVE-2026-50549)Vulnerability
- Meaningful Outcomes Determine the Winners of the Health AI RaceStrategic Report
- Accenture AI Progress Barometer (Inaugural Edition)Strategic Report
- Artificial Intelligence and Cybersecurity in the Financial SectorStrategic Report
- System Card: Claude Sonnet 5Strategic Report
- EO 14409 AI Cybersecurity Clearinghouse — July 2 Establishment Deadline TriggeredRegulatory
- China MIIT/SAMR: Mandatory National Standard for L2 Combined Driver-Assistance Systems — Effective 1 January 2027Regulatory
- UN Independent International Scientific Panel on AI: Preliminary Report Launched — Feeds Inaugural UN Global Dialogue on AI Governance (Geneva, 6–7 July 2026)Regulatory
- FTC Proposed Policy Statement: Suppression of Accuracy in AI Systems — Public Comment OpenRegulatory
- US Commerce/BIS Lifts Export Controls on Anthropic Claude Fable 5 and Mythos 5 — New Binding Conditions ImposedRegulatory
- China TC260 — Draft Amendment to National Personal Information Security Specification Targeting AI and Deep Synthesis TechnologiesGuidelines
- Singapore CSA — Singapore Cyber Landscape 2025/2026 Report: Agentic AI Threat Analysis + Cyber Trust Mark Mandate for CII OperatorsGuidelines
- AWS Network Firewall — Container Attribute-Based Rules for EKS/ECS AI/ML Workload Microsegmentation (GA)Solutions
- CSA Extends STAR Registry to Include AIUC-1 Certification for Agentic AI — Independent Quarterly Red-Teaming RequiredSolutions
- Snyk Evo Agentic Development Security (ADS) — Runtime Governance for AI Coding Agents, MCP Servers, and Generated CodeSolutions
- Straiker — $64M Series A + STAR Labs Agentic Exploit Dataset; GA Platform: Agent Discovery, Pre-Deployment Red-Teaming, Runtime ProtectionSolutions
- Microsoft Defender for Endpoint: AI Agent Runtime Protection (Public Preview) — Auto-Discovery of 25+ Local Agent Types + Prompt Injection BlockingSolutions
2026-07-02
- Royal MCP WordPress Plugin — Low-Privilege Users Can Invoke Unrestricted MCP Tools Including Private Content and User EnumerationVulnerability
- Vibe-Trading — MCP Swarm Run Directory Path Traversal Allows Arbitrary Run Metadata ReadVulnerability
- Microsoft SharePoint Server — Deserialization RCE Added to CISA KEV (CVE-2026-45659)Vulnerability
- LiteLLM AI Gateway — Three-CVE RCE Chain: Default Internal User Can Escalate to Admin and Execute Arbitrary CodeVulnerability
- Presenton MCP Server — Unauthenticated MCP Endpoint in Docker/Server Deployments Allows Session Token Minting and API Key AbuseVulnerability
- Woodpecker CI — GitLab Forge Pipeline Approval Bypass via Spoofable Commit Author Name Enables CI Secret ExfiltrationVulnerability
- DeepTutor — MCP Tool Authorization Bypass Allows Low-Privilege Users to Invoke Any Configured MCP ToolVulnerability
- GuardFall — Shell-Interpretation Bypass Exposes 10 of 11 Open-Source AI Coding Agents to Supply Chain AttacksVulnerability
- IBM Langflow OSS — Weak Cryptographic Key Derivation Exposes All Stored Credentials (LLM API Keys, DB Passwords)Vulnerability
- KPMG Global AI Pulse Q2 2026: From Deployment to Value RealisationStrategic Report
- Insights from table-top exercises in Europe on AI safety and cyber misuseStrategic Report
- Preliminary Report of the Independent International Scientific Panel on AI: Evidence-based assessment of opportunities, risks and impacts of artificial intelligenceStrategic Report
- US Senate — AI AGENT Act Draft Bill: FTC Registry for AI Agent Providers, Identity Linking, and Platform InteroperabilityRegulatory
- China — Three AI Regulatory Instruments Take Effect July 1, 2026: AI Ethics Standard, AI Agent Measures, and Anthropomorphic AI RulesRegulatory
- Vietnam — 2025 Law on Cybersecurity Enters into Force (July 1, 2026) with AI Deepfake and Platform ObligationsRegulatory
- FTC Proposes Policy Statement Warning AI Companies Against Manipulating Outputs to Comply with State AI LawsRegulatory
- US Commerce Dept. Lifts Export Controls on Anthropic Claude Fable 5 & Mythos 5 — Binding Commitments ImposedRegulatory
- Reserve Bank of India — Draft Guidance on Regulatory Principles for Model Risk Management 2026 (AI/ML Kill-Switch and Board Oversight)Guidelines
- EU AI Act — Omnibus VII Amendments Formally Adopted by Council (29 Jun 2026): High-Risk Deadlines Deferred, New Prohibitions AddedGuidelines
- NIST NCCoE — 'Cyber AI Profile' and AI Agent Identity & Authorization Projects AcceleratedSolutions
- NVIDIA NeMo Guardrails v0.23.0 — IORails Tool Calling for Streaming + Non-Streaming, Local Rail Validation of Tool ResultsSolutions
- Dragos EmberAI — OT-Native AI Assistant on Intelligence Fabric (ICS/OT Cybersecurity)Solutions
- Snyk Evo Agentic Development Security (ADS) — Runtime Governance for AI Coding Agents and MCP ServersSolutions
- F5 AI Security Platform GA + SurePath AI Acquisition — Network-Level AI Discovery, Shadow AI Detection, Runtime GuardrailsSolutions
- Microsoft Security Copilot + Azure AI Content Safety: MCP Tool Poisoning Guidance & Prompt Shields for Agentic AISolutions
2026-07-01
- Vibe-Trading — DNS Rebinding Authentication Bypass Allows Remote Bearer-Token Bypass (CVE-2026-58169)Vulnerability
- Vibe-Trading Agentic Trading Platform — Path Traversal in Proposal File Loading Enables Arbitrary File Read (CVE-2026-58170)Vulnerability
- Claude Code /copy Command — Insecure Temporary File Enables Response Disclosure and Symlink File-Write (CVE-2026-46406)Vulnerability
- University of Washington Study: Agentic AI Browsers Allow Same-Origin Policy Bypass via Prompt Injection, Working PoC DemonstratedVulnerability
- GuardFall — Bash Shell-Trick Bypass in 10/11 Open-Source AI Coding Agents Enables Supply-Chain Code InjectionVulnerability
- SimpleHelp OIDC Authentication Bypass Exploited to Deliver Djinn Stealer Targeting AI/Cloud Developer Credentials (CVE-2026-48558)Vulnerability
- BIS Annual Economic Report 2026Strategic Report
- FCA Emerging Technology Horizon Scan 2026 — AI Governance Shift from Principles to Operational SupervisionRegulatory
- US Commerce Dept. Partially Lifts Export Controls on Anthropic Claude Mythos 5 — Fable 5 Restrictions Remain; Trusted-Partner Framework EstablishedRegulatory
- EU Council Formally Adopts AI Act Omnibus Simplification Regulation (Digital Omnibus on AI)Regulatory
- NIST Cybersecurity Insights — Verifiable Digital Credential Presentment (Blog Post #4 in VDC Series)Guidelines
- Ireland NCSC — 'Securing AI Adoption in the Public Sector' Cybersecurity Guidelines PublishedGuidelines
- LiteLLM Three-CVE RCE Chain (CVE-2026-47101, CVE-2026-47102, CVE-2026-40217): AI Gateway Supply Chain Attack VectorSolutions
- ServiceNow + Accenture: Joint Agentic AI Security Operations Platform Launch (June 29, 2026)Solutions
- Microsoft Intune Vulnerability Remediation Agent (Public Preview): Agentic CVE Triage for Endpoint Security CopilotSolutions
- Microsoft Incident Response: MCP Tool Poisoning Threat Intelligence + Detection/Containment Guidance for Enterprise AI AgentsSolutions
- Microsoft Defender for Endpoint: Discovery of 25+ Local AI Agent Types + MCP Server Runtime Protection Against Prompt InjectionSolutions
- Microsoft Sentinel June 2026: ASIM AI Agent Events Schema GA + Agent Identities Connector (Preview) + MCP Graph Tools (Preview)Solutions
2026-06-30
- Prompt Injection Now Confirmed in Production AI Deployments — Three Enterprise Breaches Disclosed (June 2026)Vulnerability
- Agentic Red-Team Tools (12 Systems) — Systemic Sandbox Escape and API Key Exfiltration via Agent-Phishing (arXiv 2606.24496)Vulnerability
- CherryStudio MCP OAuth Local Callback Server — Authorization Bypass via Code Parameter ManipulationVulnerability
- Khoj AI — Conversation Sharing Handler Authorization Bypass Exposes Private Agent DataVulnerability
- Devolutions PowerShell Universal — AI Agent Job API Leaks Reusable App Tokens in PlaintextVulnerability
- SimpleHelp — OIDC Authentication Bypass Allows Unauthenticated Account Takeover (CISA KEV)Vulnerability
- Google MCP Toolbox — Path Traversal in HTTP Tool URL Builder Allows SSRF Against Upstream APIsVulnerability
- Claude Code — Sandbox Escape via Git Worktree Path Confusion Enables Host Code ExecutionVulnerability
- Asia's Human-led AI Opportunity: A Framework for TransformationStrategic Report
- Philippines — BSP Issues AI Governance Framework for Banks and Non-Banks Ahead of June 30 DeadlineRegulatory
- Australia DTA — Mandatory AI Requirements Now in Force for Commonwealth Agencies; Agentic AI Addendum PublishedRegulatory
- GovAI Research Report: GDPR — Not EU AI Act — Is Primary Cause of Frontier AI Delays in EU/UK (Published Jun 25–28, 2026)Regulatory
- Connecticut SB 5 — Frontier Model Developer Regulation, Regulatory Sandbox, and Chatbot/Youth Safety Rules (Signed May 29, 2026)Regulatory
- Great American AI Act (GAAIA) Discussion Draft Released — Federal Preemption of State AI Laws, Frontier Model OversightRegulatory
- Trump Executive Order 14409 — Mandatory Pre-Release Cyber Risk Assessments for Frontier AI Models (Signed Jun 2, 2026)Regulatory
- OpenAI Daybreak Expansion — GPT-5.5-Cyber GA + Patch the Planet Open-Source Security InitiativeSolutions
- Microsoft Threat Intel — Malicious Chromium Extension Spoofs Perplexity AI Branding to Hijack Browser SearchSolutions
- Straiker — $64M Series A + STAR Labs Agentic Exploit Dataset; Agent Discovery, Red-Teaming, Runtime Protection PlatformSolutions
- Okta Cross App Access (XAA) Ecosystem — 25+ Partners Including Claude, Cursor, Slack; MCP Official Auth Extension Goes StableSolutions
- Cisco Acquires Astrix Security + WideField Security — Dual NHI/Agent Identity Play into Splunk Agentic SOCSolutions
- Cisco AI Defense — Agent Runtime Protection SDK Launched for LLM and MCP InspectionSolutions
- OpenAI GPT-5.6 Sol Preview — Most Capable Cybersecurity Model with Restricted Government-Gated AccessSolutions
2026-06-29
- xiaozhi-esp32 MCP Response Handler — Improper Synchronization in ParseMessage Enables Remote DoS (CVE-2026-13489)Vulnerability
- ComfyUI-Copilot — Improper Resource Identifier Control in Workflow Checkpoint Restore Handler (CVE-2026-13493)Vulnerability
- Flowise Custom MCP — Windows NODE_OPTIONS Denylist Bypass Enables Authenticated RCE via Case-Sensitivity Gap (CVE-2026-58057)Vulnerability
- TrustFall — Trust Dialog Regression Enables One-Click RCE in Claude Code, Cursor, Gemini CLI, and GitHub CopilotVulnerability
- Amazon Q Developer — Malicious MCP Config in Repo Enables Arbitrary Code Execution and AWS Credential Theft on Workspace Open (CVE-2026-12957)Vulnerability
- North Korean Sapphire Sleet Mastra npm Supply Chain Attack — 144 AI Agent Framework Packages Trojanized, ~8M Weekly Downloads ExposedVulnerability
- Agentjacking — MCP Sentry Indirect Prompt Injection Achieves Arbitrary Code Execution in AI Coding Agents (85% Success Rate, 2,388 Orgs Exposed)Vulnerability
- OpenAI GPT-5.6 Sol/Terra/Luna — Government-Gated Limited Preview with Cybersecurity CapabilitiesSolutions
- Noma Security + Kong — Runtime AI Security Embedded in API Gateway Traffic PathSolutions
- Linux Foundation Akrites — Industry-Wide Coordinated OSS Vulnerability Defense Against AI-Accelerated ThreatsSolutions
- Dragos EmberAI — OT-Native AI Assistant on Intelligence FabricSolutions
- Google Cloud VPC Service Controls — Agent Identity, MCP-Attribute Perimeter Rules, and Gemini Agent Platform IntegrationSolutions
- Snyk Evo Agentic Development Security (ADS) — Runtime Governance for AI Coding Agents and MCP ServersSolutions
- F5 AI Security Platform GA + SurePath AI AcquisitionSolutions
- OpenAI Daybreak Expansion: GPT-5.5-Cyber GA + Codex Security Plugin + Patch the Planet InitiativeSolutions
- Supply Chain, Energy, and AI Nexus: Evaluating AI Energy Supply Chain VulnerabilitiesStrategic Report
- Top 10 Emerging Technologies of 2026Strategic Report
- Reserve Bank of India Draft Guidance on Regulatory Principles for Model Risk Management 2026 — AI/ML Kill-Switch and Board Accountability MandatesGuidelines
- Legion LegalTech Corp v. US — First Federal Lawsuit Challenging BIS Export Control Directive on Anthropic AI ModelsRegulatory
- White House / ONCD — OpenAI GPT-5.6 Launch Restricted to Government-Vetted Partners (First Pre-Release Gating of a US AI Model)Regulatory
- US Commerce Dept — Partial Lift of Anthropic Mythos 5 Export Control: Selective Access for 100+ Trusted PartnersRegulatory
2026-06-28
- JetBrains YouTrack MCP — Project Settings Disclosure via MCP Endpoint (CVSS 3.1)Vulnerability
- Mattermost AI Bot Posts — Markdown Image Syntax Injection Exfiltrates Data via Rendering (CVSS 3.5)Vulnerability
- mise — Task-Include Files Bypass Trust Gate, Enabling Arbitrary Code Execution (CVSS 8.6)Vulnerability
- US House Appropriations Committee — FY2027 Bill Provision to Block HHS Funding for CMS WISeR AI Prior-Authorization ModelRegulatory
- NRC Proposed Rule: Modernizing Nuclear Facility Security & Fitness-for-Duty Requirements (EO 14300)Regulatory
- Legion LegalTech Lawsuit: US Export Control Directive on Anthropic Models Challenged as Exceeding Statutory AuthorityRegulatory
- US Government Gates OpenAI GPT-5.6 Sol Launch — Per-Customer Commerce/ONCD/OSTP Approval RequiredRegulatory
- US Commerce Dept. Partially Lifts Anthropic Mythos 5 Export Control — Trusted-Partner List CreatedRegulatory
- Sumsub MCP Integration: AI Agents Can Now Configure Full Compliance/AML WorkflowsSolutions
- OrcaRouter AI Threat Report 2026 + Agent Firewall and I/O Guardrails Made FreeSolutions
- Noma Security + Kong Partnership: Runtime AI Security Embedded in Kong AI GatewaySolutions
- Tanium Atlas GA: Agentic AI Autonomous IT/Security Operations for All Commercial Cloud CustomersSolutions
- Dragos EmberAI: OT-Native AI Assistant Launched on Dragos Intelligence FabricSolutions
- Fortinet FortiSOC GA: Unified Agentic AI SOC Platform (SIEM + SOAR + UEBA + TI as single SaaS)Solutions
- F5 AI Security Platform GA + SurePath AI AcquisitionSolutions
2026-06-27
- ToolJet AI Platform — Credential Decryption Endpoint Returns Plaintext Secrets to Any Authenticated UserVulnerability
- Docling GenAI Document Processor — Unsafe URI/Path Handling in HTML BackendVulnerability
- Mattermost Agents MCP Plugin — SSRF via Unvalidated Attachment URLs Allows Internal Network AccessVulnerability
- GitHub MCP Server — RepoAccessCache Cross-Tenant Authorization Bypass in HTTP Lockdown ModeVulnerability
- ToolJet AI Platform — SSRF in RestAPI Data Source via Private IP Filter BypassVulnerability
- LibreChat — SSRF via User-Configured baseURL with No Private IP or Scheme ValidationVulnerability
- LibreChat — MCP OAuth Resource Parameter Mismatch Enables OAuth Token Hijack by Malicious MCP ServerVulnerability
- Ollama GGUF Quantization Engine — Remote Heap Memory Leak via Model Upload InterfaceVulnerability
- DifyTap — Four Cross-Tenant AI Data Exposure Flaws in Dify LLMOps Platform (1M+ Apps at Risk)Vulnerability
- ToolJet AI Agent Platform — Authenticated Builder Can Overwrite Global Marketplace Plugin with Arbitrary Server-Side JavaScript (RCE)Vulnerability
- mise Dev-Tool Manager — Arbitrary Command Execution via Tera Template Injection in .tool-versions (Trust Bypass)Vulnerability
- Cursor AI Editor — Agent Sandbox Escape via Canonicalization Fallback on Path Validation FailureVulnerability
- Cursor AI Editor — Agent Sandbox Escape via working_directory Parameter ManipulationVulnerability
- Flowise Custom MCP Feature — Unsandboxed RCE via Crafted JSON Payload (No Auth Required)Vulnerability
- The AI-First Operating System: A Blueprint for Operating and Business Model InnovationStrategic Report
- Anthropic Economic Index Report: CadencesStrategic Report
- Summary of METR's Predeployment Evaluation of GPT-5.6 SolStrategic Report
- US State AI Patchwork — New Companion Chatbot Laws and Connecticut Frontier-Model Sandbox Enacted in 2026 Legislative SessionsRegulatory
- China Premier Li Qiang — Summer Davos Call for Urgent Global AI Regulation Framework (Dalian, 24 June 2026)Regulatory
- Colorado Governor Signs SB 26-189 — Automated Decision-Making Technology (ADMT) Act Replaces Landmark 2024 AI ActRegulatory
- White House / ONCD + OSTP: Trump Administration Restricts GPT-5.6 Release to Government-Approved PartnersRegulatory
- NIST SP 800-213 Rev. 1 (Initial Public Draft) — IoT Product Cybersecurity Guidelines for the Federal GovernmentGuidelines
- BreachRx Rex Platform: Agentic AI Incident Command Center for Concurrent AI-Era BreachesSolutions
- NeuralTrust: Chain-of-Thought Hijacking Research — Up to 100% Safety Bypass on Frontier Reasoning ModelsSolutions
- Palo Alto Networks Prisma AIRS — June 2026: Configurable AI Red Teaming Target Profiling + VM-Series Unified AI Runtime Firewall ImageSolutions
- F5 AI Security Platform Launch + SurePath AI AcquisitionSolutions
- Linux Foundation Akrites: Industry-Wide Coordinated OSS Vulnerability Defense Against AI-Accelerated ThreatsSolutions
2026-06-26
- The Shift to Agentic AI: Evidence from CodexStrategic Report
- Human-Machine Collaboration in Industrial Operations: Activation PlaybookStrategic Report
- The AI Playbook for Financial ServicesStrategic Report
- PTC Windchill / FlexPLM Improper Input Validation — Unauthenticated RCE, CISA KEV Added Jun 25 2026 (CVE-2026-12569)Vulnerability
- Cisco Unified Communications Manager SSRF — Actively Exploited, CISA KEV Added Jun 25 2026 (CVE-2026-20230)Vulnerability
- Cordyceps CI/CD — GitHub Actions Workflow Misconfiguration Class Exposes Google AI Agent Dev Kit, Azure Sentinel & 300+ Repos to Supply-Chain TakeoverVulnerability
- Malicious AI Agent Skill Bypasses Static Scanners via Mutable External Link — Reached 26,000 Agents (AIR Research, Jun 24 2026)Vulnerability
- Prompt Injection as Role Confusion — ICML 2026 Paper Demonstrates Structural LLM Attack Class with Working PoCVulnerability
- GitLab Duo Workflows — Insufficient Output Filtering Discloses Sensitive Repository Data (CVE-2026-12053)Vulnerability
- Twenty CRM AI Agent Monitor — Cross-Workspace IDOR Exposes Full Chat Histories & Tool Outputs (CVE-2026-55583)Vulnerability
- US Congress Bipartisan Deadline: Commerce Must Justify EAR Authority Over AI Model Usage by June 26, 2026Regulatory
- Australia DTA Agentic AI Playbook for Government Published — Mandatory Oversight Models and Kill-Switch RequirementsRegulatory
- US Commerce/BIS EAR Directive: Anthropic Fable 5 & Mythos 5 Foreign-National Access Suspended — Litigation Filed, Congress Demands Response by June 26Regulatory
- Noma Security + Kong Partnership — Runtime AI Security Embedded in API Gateway Traffic PathSolutions
- F5 AI Security Platform GA + SurePath AI AcquisitionSolutions
2026-06-25
- NocoDB MCP Token — Unrestricted Attachment Read Across Workspaces (CVSS 2.3) and OAuth Scope Not Enforced (CVSS 2.0)Vulnerability
- AnythingLLM Windows Path Traversal — Encoded Absolute Path Escapes Documents Directory (CVSS 4.3)Vulnerability
- foreman-mcp-server — Session Hijack via Unauthenticated Cache Poisoning and Credential Logging (CVSS 7.8 + 6.2)Vulnerability
- rtk LLM Context Filter — Permission Splitter Bypass Enables Shell Command Injection Through Allowed-List Commands (CVSS 7.8)Vulnerability
- Daytona AI Sandbox — Multiple Authorization Flaws: Unverified Email Org Invite, Role Update IDOR, TLS Bypass in Git Clone (CVSS up to 8.4)Vulnerability
- Cordyceps — CI/CD Workflow Vulnerability Class Enables Supply Chain Hijacking via Pull Requests, Confirmed on Google AI ADK and Azure SentinelVulnerability
- BioShocking — Reality-Confusion Prompt Injection Bypasses AI Browser Guardrails, Leaks Credentials in Working PoCVulnerability
- macOS.Gaslight — DPRK Rust Infostealer Embeds Prompt Injection to Derail AI-Assisted Malware TriageVulnerability
- Claude Code WebFetch — HuggingFace Domain Pre-Approval Enables Prompt Injection via Attacker-Controlled Model Repos (CVSS 6.0)Vulnerability
- Open WebUI — Image URL Parameter Resolves as File ID, Enabling Cross-User File Exfiltration (CVSS 6.5)Vulnerability
- Docling GenAI Document Processor — SSRF via Playwright HTML Renderer, Zip Slip in EasyOCR, and XXE in Patent XML ParserVulnerability
- Warp Agentic Terminal — Multiple RCE and Command Injection Vulnerabilities Across Agent Features (CVSS up to 8.8)Vulnerability
- Crawl4AI Docker API — Proxy SSRF Bypass Reaches Internal Network (CVSS 8.6)Vulnerability
- AISI Engineering Playbook: An Open Guide to Building AI Evaluation CapabilitiesStrategic Report
- Looking Beyond the Government's Regulatory Toolkit: Early Findings on How Business and Civil Society Actors Can Help Manage and Mitigate Transformative Artificial Intelligence Risks and ImpactsStrategic Report
- US House Appropriations Committee — FY2027 Bill Provision to Block HHS Funding for CMS WISeR AI Prior-Authorization ModelRegulatory
- US Commerce/BIS EAR Directive: Anthropic Fable 5 & Mythos 5 Foreign-National Access Suspended — First Legal Challenge FiledRegulatory
- European Commission Draft Guidelines on Classification of High-Risk AI Systems under EU AI Act Article 6Guidelines
- NIST SP 800-213 Rev. 1 (Initial Public Draft) — IoT Product Cybersecurity Guidelines for the Federal GovernmentGuidelines
- Stellar Cyber Autonomous SOC Platform v6.5/6.6: AI-Native Workflows, Auto-Triage, and Faster MSSP OnboardingSolutions
- Tigera Lynx GA: Kubernetes-Native Unified Control Plane for AI Agent SecuritySolutions
- Tanium Atlas GA: Agentic AI Autonomous IT/Security Operations for All Commercial Cloud CustomersSolutions
- SentinelOne Purple AI Agentic Investigation Opens to All Singularity CustomersSolutions
- Dragos EmberAI: OT-Native AI Assistant Launched on Dragos Intelligence FabricSolutions
- Fortinet FortiSOC GA: Agentic AI-Unified SOC Platform (SIEM + SOAR + UEBA + TI in One SaaS)Solutions
- OpenAI Daybreak Expansion: GPT-5.5-Cyber GA + Codex Security Plugin + Patch the PlanetSolutions
2026-06-24
- Langflow Monitor Router IDOR — 7 Unauthenticated Endpoints Expose All Users' Session DataVulnerability
- vLLM Audio Transcription Endpoint Decompression Bomb (25 MB OPUS → 14.9 GB PCM)Vulnerability
- vLLM Revision Pinning Bypass — Dynamic Code Loaded Despite --revision/--code-revision FlagsVulnerability
- Langflow Unauthenticated Unbounded File Upload Causes Indefinite Denial of ServiceVulnerability
- Crawl4AI SSRF via IPv6-Mapped IPv4 Blocklist Bypass on LLM Scraping EndpointsVulnerability
- Open WebUI Cross-Origin Prompt Injection via Postmessage input:prompt / action:submitVulnerability
- LobeHub Server-Side SSRF via Unauthenticated /webapi/proxy EndpointVulnerability
- Claude Code Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetchVulnerability
- n8n MCP Browser Unauthenticated Tool Invocation in HTTP Transport ModeVulnerability
- Langflow RAG File Component Arbitrary File Read via Absolute Path in Knowledge BaseVulnerability
- Langflow IDOR — Authenticated User Can Execute Any Other User's Flow via /api/v1/responsesVulnerability
- Crawl4AI Sandbox Escape via AST Validator Bypass in Computed Fields (_safe_eval_expression)Vulnerability
- Flowise Custom MCP Server OS Command Injection via Incomplete Flag Validation and Regex BypassVulnerability
- vLLM Arbitrary Code Execution via Malicious HuggingFace Model — Assert Bypass in Optimized ModeVulnerability
- vLLM Dockerfile Dependency Confusion via Unregistered flashinfer-jit-cache Package on PyPIVulnerability
- vLLM OpenAI API Authentication Bypass via Host-Header Path Manipulation (BadHost variant)Vulnerability
- Langflow Unauthenticated RCE via Shareable Playground (Public Flows)Vulnerability
- Developing Vocational Education and Training with Artificial IntelligenceStrategic Report
- 2026 KPMG Global AI in Finance Report: The Decision AdvantageStrategic Report
- GSA Proposed Rule: GSAR Clause 552.239-7001 — Basic Safeguarding of Data Within Large Language Model AI SystemsGuidelines
- White House Executive Order 14409: 'Securing the Nation Against Advanced Cryptographic Attacks' — Mandated Federal PQC Migration with Hard 2030/2031 Deadlines and CBOM RequirementGuidelines
- Cato Networks Joins OpenAI Daybreak Cyber Partner Program — Agentic CVE Mitigation in 45 MinutesSolutions
- Microsoft — Guarding AI Memory: Memory Poisoning Threats and Defenses in Microsoft Foundry Agent ServiceSolutions
- F5 AI Security Platform Launch + SurePath AI AcquisitionSolutions
- OpenAI Daybreak Expansion — GPT-5.5-Cyber Full Release, Codex Security Update, Patch the Planet, and 30-Vendor Cyber Partner ProgramSolutions
2026-06-23
- Langflow Bundle URL Loader — Local Code Injection at Startup via Malicious Bundle URL (CVE-2026-12822)Vulnerability
- Apache Doris MCP Server — Authenticated SQL Injection via Unparameterised Database Name in Metadata Query (CVE-2025-66336)Vulnerability
- GitHub Copilot — Filesystem Access Outside Workspace via fetch_webpage URI Parameter Enables Exfiltration Under Prompt Injection (CVE-2025-66389)Vulnerability
- Suna AI Agent Platform — Reflected XSS via returnURL in Auth Endpoint (CVE-2026-12811)Vulnerability
- LiteLLM MCP OpenAPI Spec Loader — Path Traversal via spec_path Argument (CVE-2026-12798)Vulnerability
- LiteLLM Completions Interface — Incorrect Authorization via Banned Keywords Bypass (CVE-2026-12797)Vulnerability
- LiteLLM MCP Server — Server-Side Request Forgery via _execute_with_mcp_client (CVE-2026-12774)Vulnerability
- LiteLLM MCP Proxy — Improper Authentication in UserAPIKeyAuth (CVE-2026-12773)Vulnerability
- LangChain File-Search Middleware — Path Traversal and Sandbox Escape via Glob Patterns and Symlinks (CVE-2026-55443)Vulnerability
- Poisoned Coding-Assessment Repository — AI Agent Indirect Prompt Injection Exfiltrates Cloud Credentials in Under 2 MinutesVulnerability
- North Korea (Sapphire Sleet) Backdoors 141 Mastra AI npm Packages — Cross-Platform Infostealer via Postinstall HookVulnerability
- Autodesk Fusion Desktop MCP Extension — Drive-By Arbitrary Code Execution via Malicious Webpage (CVE-2026-10789)Vulnerability
- LiteLLM AI Gateway — Critical Authentication Bypass via Host Header Injection (CVE-2026-49468)Vulnerability
- IBM Langflow OSS — Unauthenticated MCP Operations via Improper Authorization on Streamable MCP Transport EndpointVulnerability
- Future of Professionals Report 2026Strategic Report
- Artificial Intelligence and the Future of Entry-Level Work: A Framework for Safeguarding and Reinventing Early Career PathwaysStrategic Report
- Indonesia Draft Presidential Regulation: National AI Roadmap 2026–2029Regulatory
- Vietnam AI Law in Force (1 March 2026) — MediaLaws Analysis Published 22 June 2026Regulatory
- US Commerce Dept. EAR Directive: Anthropic Fable 5 & Mythos 5 Foreign-National Access SuspendedRegulatory
- Five Eyes Joint Statement: 'The AI Shift in Cyber Risk — Why Leaders Must Act Now'Guidelines
- Microsoft 'Guarding AI Memory': Security Guidance on AI Memory Attack Vectors and DefensesSolutions
- OrcaRouter: Agent Firewall and I/O Guardrails Made Free for All Users Alongside AI Threat Report 2026Solutions
- Tigera Lynx GA: Unified Control Plane for Kubernetes-Native AI Agent SecuritySolutions
- Fortinet FortiSOC GA: Unified Cloud-Delivered SOC Platform with Agentic AI and MCP CoordinationSolutions
- Tanium Atlas GA: Agentic AI for IT and Security Operations Across All Commercial Cloud CustomersSolutions
- OpenAI Daybreak Expansion: Codex Security GA Update + Full GPT-5.5-Cyber Release + Patch the PlanetSolutions
2026-06-22
- Mitiga Skillgate Research — Attacker-Controlled ANTHROPIC_BASE_URL Overrides and 1,230+ Hardcoded API Keys in AI Instruction FilesVulnerability
- npm Package shai_hulululud — Proof-of-Concept AI Malware Scanner Evasion via Prompt Injection and Token FloodingVulnerability
- Mastra npm Scope Takeover — 143 AI Agent Framework Packages Backdoored with RAT via Hijacked Contributor AccountVulnerability
- AutoJack — Malicious Webpage Hijacks AutoGen Studio Browsing Agent via MCP WebSocket for Host RCEVulnerability
- ASD Information Security Manual (ISM) — June 2026 Update: New AI-Specific Security ControlsGuidelines
- Empowering Learners for the Age of AI: An AI Literacy Framework for Primary and Secondary Education (AILit Framework)Strategic Report
- Great American AI Act (GAAIA) Discussion Draft — Bipartisan Federal AI Governance Framework Proposed in HouseRegulatory
- Singapore PDPC: Proposed Advisory Guidelines on Use of Personal Data in Generative AI — Public Consultation Open Until 1 July 2026Regulatory
- Pennsylvania v. Character Technologies (Character.AI) — First US State Enforcement Action Against AI Chatbot for Unlicensed Medical PracticeRegulatory
- EU AI Act: European Parliament Adopts Simplification Amendments — High-Risk Obligations Deferred to 2028, Nudifier Apps Banned, Watermarking Delayed to December 2026Regulatory
- CyberSentinel AI v3.0 — Open-Source Autonomous Pentest Platform with 33 Tools and Provider-Agnostic AI EngineSolutions
- Aembit IAM — Copilot Studio Integration Adds Ephemeral Credential Enforcement for Microsoft AI AgentsSolutions
- AutoJack — Novel AI Agent RCE Exploit Chain via Localhost MCP WebSocket (AutoGen Studio)Solutions
- CrowdStrike Continuous Identity for AI Agents — Real-Time Zero-Standing-Privilege Authorization via SPIFFESolutions
2026-06-21
- vLLM ReDoS in LoRA Utils, Phi-4 Mini Tool Parser, and OpenAI Chat EndpointVulnerability
- Flowise Stored XSS in Chat Messages via Iframe PayloadVulnerability
- picklescan Arbitrary File Creation via Logging FileHandler — Security Tool Bypass RiskVulnerability
- vLLM Sparse Tensor Validation Missing in Multimodal Embeddings — Denial of ServiceVulnerability
- Google Vertex AI SDK 'Pickle in the Middle' — Bucket Squatting Enables Cross-Tenant RCEVulnerability
- JetBrains Marketplace AI Plugin Supply-Chain Campaign Steals Developer API Keys (~70k Installs)Vulnerability
- LiteLLM Host-Header Auth Bypass Exposes Protected Management Routes (CVE-2026-49468)Vulnerability
- Prefect GitRepository Argument Injection Enables RCE on Worker Machines (CVSS 9.9)Vulnerability
- Flowise overrideConfig Chain Injection — RCE, SSRF, Prompt Injection via Prediction APIVulnerability
- PwC 2026 Global AI Jobs BarometerStrategic Report
- Digital Government Outlook 2026: From Foundations to Transformational ImpactStrategic Report
- US Congress: Bipartisan House Letter Demands Legal Basis for Anthropic Export Controls — Response Deadline June 26Regulatory
- US Commerce Department EAR Directive: Anthropic Fable 5 & Mythos 5 Foreign-National Access SuspendedRegulatory
- AppViewX Agent Identity Security — PKI-Rooted AI Agent Governance PlatformSolutions
- Zenity + Carahsoft: AI Agent Security and Governance Reaches US Federal/State/Local MarketSolutions
- NewCore Emerges from Stealth with $66M — Security-First Identity Platform for AI AgentsSolutions
- WitnessAI Agentic Control: Single Control Plane for AI Agent and MCP Server GovernanceSolutions
- CrowdStrike Open Gateway Ecosystem — Falcon AI Control Plane Across AI GatewaysSolutions
- SentinelOne Purple AI Agentic Investigation Opens to All Singularity CustomersSolutions
- AWS Security Agent Adds Threat Modeling, Kiro IDE Power, and Claude Code PluginSolutions
- AWS Continuum: AI-Native Security Agent Family Launched at AWS Summit New YorkSolutions
2026-06-20
- Splunk AI Toolkit OS Command Injection via btool Configuration Helper (CVSS 9.1)Vulnerability
- PraisonAI MultiAgentLedger Duplicate Agent ID Information Disclosure (CVSS 6.5)Vulnerability
- PraisonAI MultiAgentMonitor Path Traversal — Arbitrary File Read/Write via Agent IDs (CVSS 8.8)Vulnerability
- PraisonAI AGUI Endpoint Unauthenticated Cross-Origin Agent Execution (CVSS 8.1)Vulnerability
- PraisonAI Hardcoded approval_mode:auto Allows Authenticated Users to Execute Arbitrary Shell Commands (CVSS 8.8)Vulnerability
- An Evaluation of Data Leakage Risks in Tool-Using LLM Agents in Realistic ScenariosStrategic Report
- AI Scenarios 2030: Helping Policymakers Plan for the Future of AIStrategic Report
- Singapore Minister Urges ASEAN AI Adoption While Warning Against Restrictive Data Sovereignty PoliciesRegulatory
- US Commerce Dept. American AI Exports Program — First Call for Proposals (Deadline 30 June 2026)Regulatory
- White House–Anthropic Negotiate AI Model Security Flaw Assessment Framework (18 June 2026)Regulatory
- Australia CISC: Enhanced Critical Infrastructure Risk Management Program (CIRMP) Rules 2026 — Mandatory AI Risk Assessment for Critical Infrastructure OperatorsGuidelines
- C1 Enterprise-Managed Authorization (EMA) for MCP — Day-One Support for Anthropic's Open Agent Authorization StandardSolutions
- AutoJack — Novel AI Agent RCE Exploit Chain via Localhost MCP WebSocket (AutoGen Studio, Microsoft Research)Solutions
- Accenture Acquires Majority Stake in Dragos + All of runZero and NetRise — $4.18B OT/Critical Infrastructure Cybersecurity ConsolidationSolutions
- AWS Continuum — AI-Native Agentic Security Platform Launched at AWS Summit New YorkSolutions
2026-06-19
- TypeBot Chatbot Builder — SSRF DNS Rebinding Bypass via TOCTOU Gap (CVE-2026-48764)Vulnerability
- TypeBot Chatbot Builder — Unauthenticated Arbitrary S3 Object Write via Unsanitised fileName (CVE-2026-48768)Vulnerability
- nanobot AI Assistant — WhatsApp Bridge Path Traversal Enables RCE via Unsanitised Filename (CVE-2026-48716)Vulnerability
- Eclipse Theia AI Chat — Markdown Image Tags Enable Prompt-Injection-Driven Data Exfiltration (CVE-2026-22551)Vulnerability
- Eclipse Theia — Workspace Task Definitions Execute Arbitrary Code Without Trust Enforcement (CVE-2026-44691)Vulnerability
- Eclipse Theia AI — Malicious .prompttemplate Files Override AI System Prompts (CVE-2026-46580)Vulnerability
- Eclipse Theia AI Chat — Workspace File/Directory Names Injected Into AI System Prompt (CVE-2026-44688)Vulnerability
- googleapis/mcp-toolbox — Scope Enforcement Bypass in Legacy Protocol Handlers (CVE-2026-11719)Vulnerability
- googleapis/mcp-toolbox — OAuth Opaque Token Introspection Auth Bypass (CVE-2026-11717 & CVE-2026-11718)Vulnerability
- mcp-pinot MCP Server — No Authentication on HTTP Interface Exposes SQL Execution to Any Network Attacker (CVE-2026-49257)Vulnerability
- Splunk Enterprise Unauthenticated PostgreSQL Sidecar RCE — CISA KEV Added June 18, 2026 (CVE-2026-20253)Vulnerability
- LLMjacking Evolved: Exposed Ollama Servers Weaponised as AI Reasoning Engine for Autonomous Offensive FrameworkVulnerability
- Agentjacking: Fake Sentry Error Reports Hijack AI Coding Agents Into Running Attacker-Controlled CodeVulnerability
- State of the Digital Decade 2026: Closing Structural Gaps and Mobilising Investments for 2030 and BeyondStrategic Report
- Agentic Coding and Persistent Returns to ExpertiseStrategic Report
- ADB 2026–2030 Digital Transformation Strategy: $20 Billion Commitment to AI Governance and Cybersecurity in Asia-PacificRegulatory
- GSA Internal Directive CIO 2185.1C: Accelerating Responsible Use of Artificial Intelligence at GSARegulatory
- GSA GSAR Proposed Rule: Basic Safeguarding of Data within LLM AI Systems (GSAR Clause 552.239-7001)Regulatory
- OWASP / Aikido Security: Agentic AI Code Audit Launched as OWASP Individual Member Benefit (18 June 2026)Guidelines
- OWASP Agentic Skills Top 10 (AST10) — First Security Framework for AI Agent Skills PublishedGuidelines
- NCSC Guidance: 'The Vibe Coding Spectrum' — Risk-Calibrated Oversight for AI-Assisted Software DevelopmentGuidelines
- AWS Kiro CLI Applied to Security Incident Response: AI-Guided GuardDuty Investigation WorkflowSolutions
- WitnessAI Agentic Control: Single Control Plane for AI Agent and MCP Server GovernanceSolutions
- Microsoft MDASH: Multi-Model Agentic Vulnerability Scanner Moves from Benchmark to Active Production Use Across Windows, Azure, and IdentitySolutions
- AWS Continuum: Agentic Security Platform for Continuous Vulnerability Discovery, Validation, and Remediation (Gated Preview)Solutions
2026-06-18
- Joomla Content Editor (JCE) Unauthenticated PHP Code Upload and Execution — CISA KEV (CVSS 10.0)Vulnerability
- Starlette 'BadHost' Host-Header Auth Bypass Affects vLLM, FastAPI-Based AI Tools (CVE-2026-48710)Vulnerability
- Shai-Hulud/Hades PyPI Supply-Chain Worm Targets AI/ML Packages with LLM Scanner Evasion and Credential-Wiper DaemonVulnerability
- LiteLLM Low-Privilege → Admin → RCE Privilege Escalation Chain (CVSS 9.9, Obsidian Security)Vulnerability
- LiteLLM MCP Endpoint Command Injection — Unauthenticated RCE via Starlette BadHost Chain (CISA KEV)Vulnerability
- China CSRC Chairman Warns on AI-Driven Stock Speculation, Signals Forthcoming AI Capital-Markets GuidanceRegulatory
- GSA Proposed Rule: GSAR Clause on Data Safeguarding Within Large Language Model AI Systems (Federal Register, 17 June 2026)Regulatory
- NCSC CEO Public Statement: Hostile States Behind Three-Quarters of Cyber Attacks on UK Critical Infrastructure, AI Escalating Threat VelocityGuidelines
- UK House Appropriations Analogue — US FY2027 DHS Bill: Directed Report Requiring CISA + NIST to Publish Agentic AI Identity & Access Management GuidanceGuidelines
- CISA + G7 Joint Guidance: "Software Bill of Materials for AI – Minimum Elements"Guidelines
- SEACEN Policy Brief Issue #3: Governing AI in ASEAN — Priorities for Central BanksStrategic Report
- Verifiable Audit Trails for AI-Enabled Biological Design Tools: A Proposal for Verifiable Biodesign LoggingStrategic Report
- OpenAI Acquires Ona — Secure Persistent Cloud Execution Environments for Long-Running Codex AgentsSolutions
- promptfoo 0.121.16 — Claude Fable & Mythos Red-Team Provider Support + Four Skills Published to Claude Code MarketplaceSolutions
- Sysdig TRT — Evolved LLMjacking: Exposed Ollama Servers Weaponized as AI Reasoning Engine for Autonomous Offensive VAPT PipelineSolutions
- Varonis SearchLeak (CVE-2026-42824) — One-Click Data Exfiltration Chain in Microsoft 365 Copilot Enterprise Search, PatchedSolutions
- Microsoft MDASH — Multi-Model Agentic Vulnerability Detection System Detailed, CyberGym #1 BenchmarkSolutions
- CrowdStrike Continuous Identity for AI Agents — Real-Time, Zero-Standing-Privilege Authorization via SPIFFE (Identiverse 2026)Solutions
- SentinelOne Purple AI Agentic Investigations — Zero-Click Autonomous SOC Opened to All CustomersSolutions
- AWS Continuum — AI-Native Security Agent Family Launched at AWS Summit New York (Preview)Solutions
2026-06-17
- Reasoning-Extension Denial-of-Service Attack Weaponizes AI Agent Guardrails (Novel Attack Class)Vulnerability
- Chatway Live Chat AI Chatbot — Subscriber Sensitive Data Exposure (CVE-2026-49082)Vulnerability
- ChatBot WordPress Plugin — Subscriber Broken Access Control (CVE-2026-40788)Vulnerability
- Royal MCP WordPress Plugin — Unauthenticated Broken Access Control (CVE-2026-40775)Vulnerability
- AI Engine WordPress Plugin — Editor Privilege Escalation (CVE-2026-27407)Vulnerability
- GPTranslate WordPress AI Translation Plugin — Unauthenticated SQL Injection (CVE-2026-49776)Vulnerability
- OpenClaw Slack Reaction Events Bypass Disabled Notification Setting — Unintended Agent Pipeline Triggering (CVE-2026-53851)Vulnerability
- OpenClaw BlueBubbles Sender Policy Bypass via Conversation Metadata (CVE-2026-53860)Vulnerability
- OpenClaw Zalo allowFrom Policy Bypass via Mutable Contact Display Metadata (CVE-2026-53857)Vulnerability
- OpenClaw Discord allowFrom Policy Bypass via Mutable Display Name (CVE-2026-53849)Vulnerability
- OpenClaw MCP Server Leaks Operator Custom Headers to Attacker-Controlled Redirects (CVE-2026-53840)Vulnerability
- Langflow AI Orchestration Platform Path Traversal → Unauthenticated RCE Actively Exploited (CVE-2026-5027)Vulnerability
- LiteLLM Vulnerability Chain — Low-Privilege User to Admin + RCE on AI Gateway (CVE-2026-47101, CVE-2026-47102, CVE-2026-40217)Vulnerability
- NewCore Launches from Stealth with $66M — Security-First Identity Infrastructure for AI AgentsSolutions
- CrowdStrike Continuous Identity for AI Agents: Real-Time Risk-Aware Authorization (SGNL Integration)Solutions
- OpenAI Deployment Simulation: Predict Model Behavior Before Release Using Real Conversation DataSolutions
- promptfoo code-scan-action 0.1.8: GitHub Action Upgraded to Node 24 RuntimeSolutions
- promptfoo 0.121.16: Claude Fable/Mythos Provider Support + Four Red-Team Skills on Claude Code MarketplaceSolutions
- Cloud Security Alliance: '7 MCP Risks CISOs Should Consider and How to Prepare' — Authoritative Practitioner Guidance on Model Context Protocol SecurityGuidelines
- Vietnam Decree 142/2026/ND-CP: First Implementing Regulation Under AI Law — Risk-Based Classification Framework in ForceRegulatory
- EU AI Act: European Parliament Plenary Approves Simplification Measures and Bans 'Nudifier' AI ApplicationsRegulatory
- Trump Signs NSPM-12: Aggressive Timelines to Secure National Security Systems Against AI-Driven ThreatsRegulatory
2026-06-16
- TrueFoundry AI Gateway — Lasso Security Integration for Centralized GenAI ProtectionSolutions
- Microsoft Defender for Office 365 — One Year of Real-World Email Security Benchmarking PublishedSolutions
- ChatBot WordPress Plugin — Subscriber Broken Access Control (CVSS 7.1)Vulnerability
- Chatway Live Chat AI Chatbot — Subscriber Sensitive Data Exposure (CVSS 7.4)Vulnerability
- AI Product Search for WooCommerce (Motive Commerce Search) — Unauthenticated Broken Access Control (CVSS 8.2)Vulnerability
- Royal MCP WordPress Plugin — Unauthenticated Broken Access Control (CVSS 7.3)Vulnerability
- AI Engine WordPress Plugin — Editor-Role Privilege Escalation (CVSS 7.2)Vulnerability
- GPTranslate WordPress Plugin — Unauthenticated SQL Injection via AI Translation Endpoint (CVSS 9.3)Vulnerability
- Spring AI Vector Stores — Special-Character Injection Enables Arbitrary Query Execution in Elasticsearch, OpenSearch, and GemFireVulnerability
- Cursor Editor Executes Malicious Claude Hook Commands from Workspace .claude/settings.local.json Without User ApprovalVulnerability
- South Korea National Court Administration Escalates Response to AI 'Ghost Cases' in Legal ProceedingsRegulatory
2026-06-15
- Results from the First Anthropic Public RecordStrategic Report
- From AGI to ASIStrategic Report
- CISA Binding Operational Directive BOD 26-04: Risk-Based Vulnerability Prioritisation — 3-Day Fix Window for Critical FlawsRegulatory
- Colorado Replaces Original AI Act with SB 26-189 — Revised High-Risk AI Accountability Law, Effective January 1, 2027Regulatory
- New York Synthetic Performer Law Takes Effect — First-in-Nation AI Advertising Disclosure MandateRegulatory
- Canada OPC PIPEDA Findings #2026-004: X Corp. and xAI (Grok) Violated Privacy Law via Deepfake ToolRegulatory
- Canada Bill C-34 (Safe Social Media Act) Introduced — AI Chatbot Safety Duties and Digital Safety CommissionRegulatory
- Multi-State AGs Open Sweeping Investigation into OpenAI — Subpoena Served June 12, 2026Regulatory
- US Commerce Dept. Export Control Directive: Anthropic Fable 5 & Mythos 5 Suspended for All Foreign NationalsRegulatory
- OWASP Dependency-Track 5.0 Generally Available — Enterprise-Scale SBOM Platform with AI/ML Model Inventory and Supply Chain Integrity VerificationGuidelines
- NIST: Mathematical Proof That No Finite AI Guardrail Set Is Universally Robust — Foundational Support for Continuous-Monitor-and-Update Security ModelGuidelines
- SourceCodester CET AI Grading System Reflected XSS via index.php action Parameter (CVE-2026-12176)Vulnerability
- GPTranslate WordPress AI Translation Plugin Stored XSS via REST API (CVE-2026-9109)Vulnerability
- VS Code MCP Server Managed Identity Elevation of Privilege (CVE-2026-40376)Vulnerability
- Langflow AI Platform Path Traversal → Unauthenticated RCE Actively Exploited (CVE-2026-5027)Vulnerability
- Palo Alto Networks Prisma AIRS: Privilege Misuse Detection for AI Agents (June 2026 Release)Solutions
- ZeroFox AI Analytics: Real-Time Threat Pattern Querying Embedded in External Threat PlatformSolutions
- Check Point Extends Workforce AI Security to MSP EcosystemSolutions
- CrowdStrike Falcon for IT: AI Discovery and Governance for Shadow AISolutions
- Netskope AI Gateway Adds Inline MCP Traffic Inspection and Agent GuardrailsSolutions
- OpenAI Acquires Ona — Secure Persistent Cloud Execution for Long-Running Codex AgentsSolutions
- Microsoft AI Activity Investigation Playbook for M365 Copilot and Azure AISolutions
- Google Security Operations: New AI Agent Suite for Threat Detection, Triage, and HuntingSolutions
- Microsoft ASSERT: Open-Source Spec-to-Evals Framework for AI AgentsSolutions
- Linx Security: GA of Agentic Access Control — Inline MCP Gateway with Tool-Level Policy EnforcementSolutions
- Zscaler Launches Industry-First Complete Zero Trust Platform for Agentic AISolutions
2026-06-14
- What Is Blocking U.S. Power Expansion for AI — and What Could Unlock It by 2030?Strategic Report
- Shai-Hulud/Hades Campaign: PyPI Supply-Chain Worm Injects AI Scanner-Evasion Prompts and Backdoors AI Coding Agent ConfigsVulnerability
- ChromaDB Rust IDOR Cross-Tenant Data Access — CVE-2026-8828, CVSS 8.8 HIGH — No Patch ConfirmedVulnerability
- Multistate Attorney General Coalition Subpoenas OpenAI Over ChatGPT User Safety Harms, Concurrent with IPO FilingRegulatory
- US Commerce Department Issues Binding Export Control Directive Forcing Anthropic to Disable Claude Fable 5 and Mythos 5 GloballyRegulatory
2026-06-13
- CVE-2026-50287: AgenticMail MCP Server Exposes Streamable HTTP Transport Without Authentication (CVSS 8.7)Vulnerability
- StakeBench: No Production Web Agent Consistently Blocks Prompt Injection — Direct Attacks Succeed 79%+ Across GPT-5 and Gemini in 3,168 SimulationsVulnerability
- CISA KEV: Oracle PeopleSoft CVE-2026-35273 Actively Exploited by ShinyHunters — 100+ Organisations Breached, Federal Patch Deadline June 15Vulnerability
- LangGraph RCE Chain: SQL Injection + msgpack Deserialization in Stateful Agent Checkpointer (CVE-2025-67644 + CVE-2026-28277)Vulnerability
- Agentjacking: Sentry MCP Integration Weaponised to Execute Arbitrary Code on Developer Machines via Injected Error EventsVulnerability
- GitInject: Multi-University Research Confirms All Major AI CI/CD Providers Vulnerable to Prompt Injection — Eleven Named Attack Classes DocumentedGuidelines
- BlueVoyant Launches AI-Native Agentic SecOps Platform with Autonomous Threat Detection and ContainmentSolutions
2026-06-12
- PRC-linked Influence Operations Are Targeting AI Debates in the US (June 2026 Threat Report)Strategic Report
- The Compute Coalition: How to Build the Future of AI in the Free WorldStrategic Report
- vLLM CVE-2026-5497 — CVSS 7.5 Unauthenticated Denial-of-Service via Unbounded Video Frame Processing in Widely Deployed AI Inference ServerVulnerability
- mcp-server-kubernetes CVE-2026-46519 — CVSS 8.8 Access Control Bypass Via Environment Variable Override in MCP Kubernetes ServerVulnerability
- Ivanti Sentry CVE-2026-10520 — CVSS 10.0 Unauthenticated OS Command Injection Added to CISA KEV, Exploited Within 24 HoursVulnerability
- EU Publishes Code of Practice on Transparency of AI-Generated Content to Support AI Act Article 50 ComplianceRegulatory
2026-06-11
- Shai-Hulud/Miasma Worm Escalates to 100+ npm/PyPI Packages — Persists in Claude Code, VS Code, Gemini CLI Agent Config Files; mistralai & guardrails-ai Confirmed CompromisedVulnerability
- AI and Skills: What We Know So FarStrategic Report
- Policy on the AI Exponential: Advanced AI Framework and Economic Policy FrameworkStrategic Report
- Sound Practices for Responsible Adoption of Artificial Intelligence (AI): Consultation ReportStrategic Report
- CVE-2026-8335 — Aix-DB LLM Endpoint Allows Unauthenticated SQL Query Execution Against the Application DatabaseVulnerability
- CVE-2026-46432 — LMDeploy Hardcoded trust_remote_code=True Enables Arbitrary Code Execution When Loading HuggingFace ModelsVulnerability
- Google Publishes WebMCP Agent Security Guidance — Malicious Manifests and Contaminated Tool Outputs as Primary Attack Vectors with Deterministic and Probabilistic CountermeasuresGuidelines
- Anthropic Publishes Claude Fable 5 and Mythos 5 System Card — Detailed Cyber Capability Evaluation, Dual-Config Safety Architecture, and Agentic Prompt-Injection Benchmark ResultsGuidelines
- Linx Security Launches Agentic Access Control — Inline MCP Gateway with Tool-Level Policy Enforcement and Full Audit LoggingSolutions
- Zscaler Launches AI Access Graph and Zero-Trust Agentic AI Platform at Zenith Live 2026Solutions
- House Appropriations Committee FY2027 DHS Bill Directs CISA to Issue Identity-Security Guidance for Federal Agentic AI SystemsRegulatory
- CISA Issues Binding Operational Directive BOD 26-04 — Risk-Matrix Patching Framework Explicitly Cites AI-Accelerated ExploitationRegulatory
2026-06-10
- Transforming the Enterprise 2026Strategic Report
- Misaligned AI as a New Insider RiskStrategic Report
- System Card: Claude Fable 5 & Claude Mythos 5Strategic Report
- CVE-2026-49948 — Mem0 Self-Hosted Server Authorization Bypass on Global LLM Configuration Endpoint (CVSS 8.1)Vulnerability
- Indirect Prompt Injection Is Architectural, Not Deployment-Specific — Brave Demonstrates Attacks Against Cloud and Local AI ToolsVulnerability
- CVE-2026-7304 — SGLang Unauthenticated RCE via Unsafe dill.loads Deserialization in Custom Logit ProcessorVulnerability
- CVE-2026-11645 — Chrome V8 Zero-Day (5th of 2026) Exploited in Wild, Added to CISA KEVVulnerability
- CSA RiskRubric V2: AI Risk Assessment Framework Expanded to Cover MCP Servers, Agents, and Excessive AgencyGuidelines
- EU Commission Issues Binding Interim Measures Requiring Meta to Restore WhatsApp Access for Rival AI AssistantsRegulatory
2026-06-09
- The AI Adoption Maturity Model v1.0Strategic Report
- Advancing U.S.–UK Cooperation to Secure Frontier Artificial IntelligenceStrategic Report
- Anthropic Red Team: Mythos Generates Working Windows Kernel N-Day Exploits in Under 32 Minutes — Patch Gap Compression QuantifiedSolutions
- UK Government Launches Advisory AI Growth Labs — Legal Sector First, ICO and Three Regulators CollaborateRegulatory
2026-06-08
- Meta HTS AI Chatbot Authentication Bypass — 20,225 Instagram Accounts Hijacked (Formal AG Disclosure, Material Update)Vulnerability
- CSA / Adversa AI AIRQ Report: 98% of Production AI Agents Carry the Lethal Trifecta — Only 11% Adequately DefendedGuidelines
- OWASP Launches Enterprise Adoption Maturity Model for Agentic AI — Six-Level Deployment Axis vs Four-Level Governance AxisGuidelines
- Miasma Worm Escalates to AI Coding Agent Hijacking — 73 Microsoft GitHub Repos Disabled After SessionStart Hook Payload InjectionVulnerability
- Frontier AI Risk Monitoring Report 2026 Q1: Frontier AI Risk Trends Are Splitting Apart — Misuse Safeguards Improve while Loss-of-control Safety StagnatesStrategic Report
- Depthfirst Autonomous AI Agent Finds 21 FFmpeg Zero-Days (CVE-2026-39210–39218) for ~$1,000 — AI-Accelerated Vulnerability Economics Arrive at Production ScaleVulnerability
- Cross-Session Stored Prompt Injection in Agentic Systems — Persistent Injections Survive Session Termination, Silently Influencing Future ExecutionsVulnerability
- WebMCP Mid-Session Tool Injection (MSTI) — Third-Party Scripts Can Hijack or Frame Agent Tools During Live Sessions via WebMCP ProtocolVulnerability
- CSA Labs: AI Agent Lethal Trifecta — 98% of Production Agents Simultaneously Combine Sensitive Data Access, Untrusted Input, and Outbound Action CapabilityGuidelines
2026-06-07
- Ofcom's Strategic Approach to AI, 2026/27Strategic Report
- Make AI Scale: From Experimentation to TransformationStrategic Report
- Muse Spark Contemplating Safety & Preparedness ReportStrategic Report
- AI Agent Discovers 21 FFmpeg Zero-Days — CVE-2026-39210 Through CVE-2026-39218 Include RCE Primitive via RTSP StreamsVulnerability
- Claude Code MCP ~/.claude.json Config Hijacking — Unpatched npm Post-Install Hook Intercepts SaaS OAuth Tokens in Developer EnvironmentsVulnerability
- Microsoft Security Blog: CI/CD Permission Bypass in Claude Code GitHub Actions Enables Supply-Chain Compromise — Remediation Guidance PublishedGuidelines
- ReliaQuest Agentic AI SOC Correlation Surfaces China-Linked IIS Espionage Cluster OP-512 — Proof Point for AI-Assisted Threat DetectionSolutions
- Depthfirst Autonomous AI Agent Discovers 21 Zero-Days in FFmpeg for ~$1,000 — Widening Discovery-to-Remediation GapSolutions
- OpenAI Releases ChatGPT Lockdown Mode — First Built-In Production Control Targeting Prompt-Injection Data ExfiltrationSolutions
- Trump Signs NSPM-11 — AI in the National Security Enterprise: Binding Adoption and Assurance Mandates for Military and Intelligence AIRegulatory
2026-06-06
- Shaping the Future of Learning: Education Readiness for the Age of AIStrategic Report
- Verified Machine Learning Infrastructure: Formal Methods for Trustworthy Artificial Intelligence DeploymentStrategic Report
- Autonomous LLM Agent Performs End-to-End Salesforce Experience Cloud Exploitation — SOQL Injection and Full Data Extraction Without Human GuidanceVulnerability
- CISA KEV: CVE-2026-28318 — SolarWinds Serv-U Unauthenticated DoS Actively Exploited; Patch Due June 19Vulnerability
- CVE-2026-45758 (CVSS 9.6): Guardrails AI PyPI Supply Chain Compromise — Malicious guardrails-ai 0.10.1 Requires Immediate Credential RotationVulnerability
- Microsoft AI Red Team Updates Agentic AI Failure Mode Taxonomy — 7 New Modes from 12 Months of Production Red TeamingGuidelines
- Anthropic Institute: 'When AI Builds Itself' — Quantitative Evidence of Accelerating Recursive Self-Improvement with Security ImplicationsGuidelines
- OWASP Publishes State of Agentic AI Security and Governance v2.01 — Theoretical Threats Now Have CVEs and Production IncidentsGuidelines
- Microsoft Security Research: Securing CI/CD Pipelines Against Agentic AI Threats — Claude Code GitHub Action Case StudySolutions
- Bipartisan 'Great American AI Act' Discussion Draft Proposes Federal Frontier-Model Safety Framework with 3-Year State PreemptionRegulatory
2026-06-05
- A Blueprint for Democratic Governance of Frontier AIStrategic Report
- CVE-2026-5422: Jupyter Server 2.17.0 Path Traversal Enables Unauthorized Read/Write in Sibling Directories — ML Infrastructure Risk in Shared HostingVulnerability
- Agentic AI Worms Using Open-Weight LLMs on Stolen Compute Propagate Across Linux/Windows/IoT Without Commercial AI Platform — Centralized Safety Controls Structurally BypassedVulnerability
- Anthropic LLM ATT&CK Navigator: AI-Enabled Adversaries Span All 14 MITRE ATT&CK Tactics — Medium-to-High-Risk Actors Up 70% in 12 MonthsVulnerability
- NCSC Publishes Practitioner Guide on Open-Source Software Supply Chain Attacks — npm and PyPI Package Poisoning Tied to AI/ML Toolchain RiskGuidelines
- Anthropic Expands Project Glasswing to 150 Critical Infrastructure Organizations — Patch-Bottleneck Problem SharpensSolutions
- Trump Signs 'Promoting Advanced AI Innovation and Security' Executive Order — Voluntary 30-Day Frontier Model Review and AI Cybersecurity Clearinghouse EstablishedRegulatory
2026-06-04
- Adversarial Distillation: China's Campaign to Extract American AI CapabilitiesStrategic Report
- AI at Work: Strategy Matters More Than Tools (BCG Fourth Annual AI at Work Survey)Strategic Report
- What we learned mapping a year's worth of AI-enabled cyber threats (LLM ATT&CK Navigator)Strategic Report
- BadBone — Dormant AI Model Backdoor Activates Only After Prompt-Learning Customisation, Evades Six Published Defences (arXiv 2605.31246)Vulnerability
- KEV: CVE-2026-45247 (CVSS 9.8) — Mirasvit Full Page Cache Warmer Unauthenticated Deserialization/RCE Actively Exploited; Federal Deadline June 6Vulnerability
- CVE-2026-5241 (CVSS 8.0): HuggingFace Transformers trust_remote_code=False Bypassed via LightGlue Nested Config — Arbitrary Code Execution on Model LoadVulnerability
- CVE-2026-4035 (CVSS 9.1): MLflow AI Gateway Resolves Env Vars in API Keys — Low-Privilege Users Can Exfiltrate Cloud Credentials to Attacker-Controlled EndpointsVulnerability
- AI Agents Enable Adaptive Computer Worms — Autonomous LLM-Powered Malware That Reasons and Adapts Per Target (arXiv 2606.03811)Vulnerability
- Noma Launches Agentic Access Control — Dynamic Registry, Identity, and Policy Enforcement for AI Agents and MCP ServersSolutions
- Microsoft Build 2026: Microsoft Execution Container SDK and Extended Agent 365 for Local Agentic AI Containment and GovernanceSolutions
- US White House Executive Order on Promoting Advanced AI Innovation and Security — CISA Binding Operational Directive in 30 Days, Voluntary Frontier-Model Vetting Framework in 60 DaysRegulatory
- Singapore PDPC Opens Public Consultation on Proposed Advisory Guidelines for Personal Data in Generative AI — Closes 1 July 2026Regulatory
2026-06-03
- 2026 State of Modern Application & AI SecurityStrategic Report
- Beyond the Hype: Assessing Hyperscaler Nuclear Commitments Against U.S. Energy RealitiesStrategic Report
- CISA KEV: CVE-2025-48595 — Android Framework Integer Overflow Enables Local Privilege Escalation, Actively ExploitedVulnerability
- CISA KEV: CVE-2022-0492 — Linux Kernel cgroups v1 Privilege Escalation Added to Known Exploited Vulnerabilities CatalogVulnerability
- CVE-2026-42074 (CVSS 9.3): OpenClaude Coding-Agent CLI — LLM Can Disable Its Own Sandbox via Exposed Schema ParameterVulnerability
- Meta AI Support Bot Social-Engineered to Add Attacker Email in Password-Reset Flow, Enabling Instagram Account TakeoverVulnerability
- CSA Publishes OT-Specific Mythos Readiness Framework — Five Priority Actions for Industrial Environments Where Patch Cycles Cannot Match AI-Compressed TimelinesGuidelines
- ETSI Publishes TS 104 033 — First Formal Standard Defining Security Requirements for AI Computing PlatformsGuidelines
- OWASP Agent Memory Guard Released — Open-Source Runtime Defense for Agentic Memory Poisoning (ASI06)Solutions
- AWS Amazon Bedrock AgentCore Adds Cedar-Based Policy and Lambda Interceptors for Deterministic AI Agent Tool AuthorizationSolutions
- Microsoft Launches MXC — OS-Level Kernel-Enforced Sandbox for AI Agents, with OpenAI and Nvidia as Launch PartnersSolutions
2026-06-02
- Atlantic Council Commission on Artificial Intelligence: US Leadership in the Age of AIStrategic Report
- Aider-AI Coding Agent CVE-2026-10174/10175 Cluster: Pre-Commit Protection Bypass and Architect Mode Code Injection — Public Exploits, No Vendor ResponseVulnerability
- CVE-2026-44211 (CVSS 9.6): Cline Autonomous Coding Agent — Cross-Origin WebSocket Hijack Enables Silent Workspace Exfiltration and Command Injection, No Patch AvailableVulnerability
- NVIDIA Launches Vera BlueField-4 STX In-Silicon Security for Agentic AI Storage — DOCA Vault, Argus, and Flow Enforce Zero-Trust at 800Gb/sSolutions
- Anthropic Confidentially Files S-1 with SEC — Near-$1 Trillion AI Safety Lab Enters Public Market RaceSolutions
- China State Council Publishes Sweeping AI Outbound-Investment Rules — Technology-Tracing Framework Targets Cross-Border AI Deals Regardless of Corporate DomicileRegulatory
2026-06-01
- Realistic Honeypot Evaluations for Scheming PropensityStrategic Report
- How the Factory of the Future Is Reshaping the Economics of Manufacturing CompetitivenessStrategic Report
- Cluster: Four CVEs in Aider-AI Coding Assistant (Code Injection, SQLi, SSRF, Pre-commit Bypass) — No Patch AvailableVulnerability
- First Confirmed In-the-Wild LLM-Agent Post-Exploitation: CVE-2026-39987 Marimo RCE to Full Database Exfiltration in 4 PivotsVulnerability
- US BIS Issues Weekend Guidance Closing Advanced AI Chip Export Loophole for Chinese-Headquartered Entities WorldwideRegulatory
2026-05-31
- Hiroshima AI Process Reporting Framework — Version 2.0Strategic Report
- MemPoison — Stealthy Trojan Attack Injects Persistent Backdoors into LLM Agent Long-Term Memory via Ordinary Dialogue, Bypassing Selective Memory DefensesVulnerability
- ChatGPhish — ChatGPT Markdown Renderer Turns Any Summarized Webpage Into a Live Phishing Surface; No Patch After 30 DaysVulnerability
- Cyberhaven Publishes Enterprise MCP Security Guide — Tool Poisoning, Indirect Prompt Injection, and Shadow MCP as Primary Risk CategoriesGuidelines
- NIST Renames AISIC as 'NIST AI Consortium', Expands Scope to Measurement, Evaluation, and Attack Susceptibility with Six Task GroupsGuidelines
- Palo Alto Networks Completes Portkey Acquisition, Launches Prisma AIRS AI Gateway as Agentic Control PlaneSolutions
- Pennsylvania Sues Character.AI for Chatbot Impersonating Licensed Medical Doctor — First US Enforcement Under Professional Licensing LawRegulatory
2026-05-30
- Legal Responsibility for AI Agents — Discussion PaperStrategic Report
- Trust Imperative 5.0: Governing AI at Scale — Building Trust in Government Through Practical AI AssuranceStrategic Report
- OpenAI's Frontier Governance FrameworkStrategic Report
- CVE-2026-45609: Spring AI MCP-Security Fails SSRF Mitigations Required by MCP Specification — OAuth Discovery Processes Untrusted URLsVulnerability
- CVE-2026-40933: Flowise 1-Click RCE via MCP stdio — Importing a Malicious Chatflow Triggers Arbitrary Server-Side Code ExecutionVulnerability
- CVE-2026-45312: RAGFlow SSTI/RCE (CVSS 9.9) — Any Authenticated User Can Execute OS Commands on Self-Hosted RAG EngineVulnerability
- arXiv: 'Plant, Persist, Trigger' — Sleeper Attack Research Formalises Cross-Interaction Agent Memory Poisoning as a Distinct Threat ClassGuidelines
- SAFE Security Launches AI Security Posture Management (AI-SPM) — Continuous Exposure Management Across Agentic WorkflowsSolutions
- Gray Swan Raises $40M Series A — CMU-Spun AI Red-Teaming Platform Cited in 11 Frontier Model System Cards Expands to EnterpriseSolutions
- Palo Alto Networks Completes Portkey Acquisition — AI Gateway Becomes Control Plane for Agentic Enterprise Security in Prisma AIRSSolutions
- Connecticut Enacts AI Responsibility and Transparency Act (SB 5) — Requires Automated Employment Decision Disclosures and AI-Linked WARN NoticesRegulatory
2026-05-29
- AI Adoption Across the United States: US AI Diffusion Report Q1 2026Strategic Report
- Investigating the Potential Use of Frontier AI Models for Offensive Cyberattacks: A Human Uplift StudyStrategic Report
- GreyVibe: Russia-Nexus Threat Actor Uses LLMs Systematically Across All Attack Phases Against UkraineVulnerability
- CVE-2026-4944 — vLLM Hardcodes trust_remote_code=True, Bypassing User's Explicit Security Flag (CVSS 8.8)Vulnerability
- SymJack — Symlink-Hijack Attack Silently Installs Malicious MCP Servers via Disguised Approval Prompts in 6 AI Coding AgentsVulnerability
- Australia PSPF Advisory 001-2026 — Mandatory Directive: Fix Security Fundamentals Before Adopting Frontier AIGuidelines
- Google Launches AI Threat Defense — Autonomous Mandiant + Wiz + Gemini Platform for AI-Speed Attack ResponseSolutions
- IBM and Red Hat Launch Project Lightwell — $5 Billion AI-Powered Open Source Security ClearinghouseSolutions
- EU AI Act Digital Omnibus Provisional Agreement — High-Risk AI Deadlines Deferred to December 2027 and August 2028Regulatory
- Illinois AI Safety Measures Act (SB 315) Passes — First US State to Mandate Independent Frontier AI Safety AuditsRegulatory
2026-05-28
- CVE-2026-4868: GitLab EE Duo AI Workflow Identity Impersonation — Authenticated User Can Run AI Workflows as Another UserVulnerability
- CISA KEV: Three Supply-Chain Attack CVEs Added — TanStack npm Worm, Nx Console Credential Stealer, DAEMON Tools TrojanVulnerability
- CVE-2026-48710 'BadHost': Unauthenticated Auth Bypass in Starlette Exposes vLLM, LiteLLM, FastAPI, and MCP Server InfrastructureVulnerability
- TELUS Digital GenAI Safety Benchmark: Every Model Tested Was Exploitable, with Attack Success Rates from 1.3% to 93% Across 620,000+ Adversarial AttacksGuidelines
- Cogent Security Launches Agentic Zero Day Response and Autonomous Remediation Amid Evidence AI Compresses Exploit Development to Under 12 HoursSolutions
- EU NIS2 Cooperation Group Adopts Common Incident Reporting Templates — Mandatory Implementing Act to FollowRegulatory
- Singapore IMDA Publishes Discussion Paper on Legal Responsibility for AI Agents — Liability Framework for Agentic AI Value ChainRegulatory
2026-05-27
- The State of Artificial Intelligence in Public Audit: Evidence from Selected Countries and the European UnionStrategic Report
- Supervisory Toolkit for AI Use in Capital MarketsStrategic Report
- AI Agents in Action: A Playbook for Trusted Adoption, Authorization and ScalingStrategic Report
- vLLM OpenAI-Compatible Serving Path Denial of Service — CVE-2026-9540 (CVSS 5.3, Public Exploit Available)Vulnerability
- Lumiverse MCP Server Argument Injection Cluster — Three Critical CVEs Allow RCE via Allowlisted Binaries, TSX Sandbox Escape, and Extension Supply Chain (CVSS 9.1–9.9)Vulnerability
- Update — Megalodon CI/CD Supply Chain Attack Backdoors 5,500+ GitHub Repositories; ~2,900 Still Infected Week After AttackVulnerability
- LangChain Deserialization Vulnerability Allows Remote Code Execution via Overly Broad Object Allowlists — CVE-2026-44843 (CVSS 8.2)Vulnerability
- KEV Alert: LiteSpeed cPanel Plugin Privilege Escalation to Root — CVE-2026-48172 (CVSS 10.0, Actively Exploited)Vulnerability
- OWASP GenAI Publishes AIUC-1 Crosswalk for OWASP Top 10 for Agentic Applications — Bidirectional Control-to-Threat MappingGuidelines
- Anthropic Launches Claude Compliance API with 28 Enterprise Security Integrations for SIEM, DLP, SASE, and IAMSolutions
- Pennsylvania Attorney General Reaches Formal Enforcement Agreement with GEICO Over AI-Driven Auto Insurance CancellationsRegulatory
2026-05-26
- Artificial Intelligence and Employment Futures for the Arab RegionStrategic Report
- Chief People Officers' Outlook — May 2026Strategic Report
- FBI PSA: Kali365 AI-Assisted Phishing-as-a-Service Platform Bypasses Microsoft 365 MFA via OAuth Device Code TheftVulnerability
- Megalodon Campaign Poisons 5,561 GitHub Repositories via CI/CD Workflow Backdoors — Credentials, Cloud Keys, and OIDC Tokens ExfiltratedVulnerability
- KPMG Singapore Launches EDB-Backed Trusted AI Centre of Excellence with AI Assurance FrameworkSolutions
- Anthropic Signals Future Public Release of Mythos-Class Vulnerability-Discovery AI; Glasswing Scan Finds 6,200+ Critical Flaws in 1,000+ Open-Source ProjectsSolutions
2026-05-25
- The Bank, FCA and HM Treasury Joint Statement on Frontier AI Models and Cyber ResilienceStrategic Report
- Agents, Robots, and Us: How AI Reshapes Work and Skills in EuropeStrategic Report
- CVE-2026-41863: LLM-Influenced Filename Reaches Path.resolve Before File Write in Spring AI Anthropic Skills API — Agentic Workflow Path TraversalVulnerability
- CVE-2026-45829 (ChromaToast): Pre-Authentication Remote Code Execution in ChromaDB Python FastAPI Server via Malicious HuggingFace Model LoadingVulnerability
- Anthropic Project Glasswing CVD Dashboard: Claude Mythos Preview Discloses 1,596 Vulnerabilities Across 281 Open-Source ProjectsSolutions
2026-05-24
- From Bans to Recalls: A Public Health Framework for AI Companion BotsStrategic Report
- Draft Commission Guidelines on the Classification of High-Risk AI SystemsStrategic Report
- Singapore Government AI Agents Sandbox: Indirect Prompt Injection Enabling RCE Confirmed as Top Production Agentic Attack VectorVulnerability
- CVE-2026-5194: WolfSSL Certificate Forgery (CVSS 9.1) — Part of 6,200+ AI-Discovered Flaws in Critical Open-Source InfrastructureVulnerability
- Cloud Security Alliance Releases AI Security Maturity Model (AISMM) v1.0 — 12-Category Programme-Level Framework for Enterprise AI SecurityGuidelines
- Singapore Government–Google AI Agents Sandbox: Indirect Prompt Injection Identified as Primary Cybersecurity Risk in Production Agentic DeploymentsGuidelines
- IMDA Publishes Model AI Governance Framework for Agentic AI v1.5 — Real-World Case Studies and Multi-Agent Risk ControlsGuidelines
- Anthropic Project Glasswing: Claude Mythos Preview Demonstrates Production-Scale AI-Driven Vulnerability DiscoverySolutions
2026-05-23
- Open-World Evaluations for Measuring Frontier AI CapabilitiesStrategic Report
- Loss of Oversight: How AI Systems May Become Harder to Audit, Monitor, and InvestigateStrategic Report
- Introducing RAMPART and Clarity: Open Source Tools to Bring Safety Into Agent Development WorkflowStrategic Report
- CISA Adds Drupal Core SQL Injection Vulnerability to KEV Catalog — CVE-2026-9082Vulnerability
- Google Integrates CodeMender Security Agent into Agent Platform EcosystemSolutions
- FTC Fines Cox Media Group $880,000 for False AI 'Active Listening' Advertising ClaimsRegulatory
- Trump Cancels Voluntary AI Model Vetting Executive Order Hours Before SigningRegulatory
2026-05-22
- LiteLLM AI Gateway Allows Authenticated Users to Escalate to proxy_admin via user_role Modification — CVE-2026-47102Vulnerability
- Trend Micro Apex One On-Premise Directory Traversal Enables Malicious Code Injection to Managed Endpoints — CVE-2026-34926 Added to CISA KEVVulnerability
- Langflow AI Workflow Platform Origin Validation Error Enables Cross-Origin Token Theft — CVE-2025-34291 Added to CISA KEVVulnerability
- MOSAIC Coalition Launches to Unify Fragmented AI Security Guidance Across Eight Leading OrganizationsGuidelines
- Expedia Preparing Model Context Protocol Server to Enable Direct AI Agent Access to Travel InventorySolutions
- Trump Administration Postpones AI Cybersecurity Executive Order Hours Before Scheduled SigningRegulatory
- The Private Capital Opportunity in AI-Enabled Climate and Sustainability SectorsStrategic Report
- The Need for Deeper, White-Box Access to Maintain State of the Art Evaluations for Loss of Control ThreatsStrategic Report
- Global AI Pulse: Q1 2026 — From Adoption to OrchestrationStrategic Report
2026-05-21
- Updated Model AI Governance Framework for Agentic AIStrategic Report
- Anthropic Silently Patched Claude Code Sandbox Bypass; Second Bypass in Five Months, No CVE IssuedVulnerability
- NVIDIA TRT-LLM Unsafe Deserialization Vulnerabilities Allow Code Execution, Data TamperingVulnerability
- CISA Adds Seven Known Exploited Vulnerabilities to KEV Catalog, Including Legacy Windows and Current Defender FlawsVulnerability
- KPMG and Anthropic Announce Global Alliance Embedding Claude into Digital Gateway for 276,000 EmployeesSolutions
- 1Password and OpenAI Launch MCP Server to Keep Coding Agent Credentials Out of Model ContextSolutions
- FTC Begins Enforcing Take It Down Act, Sends Warning Letters to 'Nudify' Tool OperatorsRegulatory
- Colorado Enacts Revised AI Act, Narrowing Scope to Automated Decision-Making TechnologyRegulatory
2026-05-20
- Frontier Risk Report (February to March 2026)Strategic Report
- SAP Introduces AI Agent Hub for Vendor-Agnostic Agent Governance Across Enterprise EcosystemsSolutions
- PwC Launches Agentic Scaffolding to Operationalize Enterprise AI Deployments at ScaleSolutions
- Ocean Emerges from Stealth with $28M for Agentic Email Security Platform Built on Autonomous InvestigationSolutions
- Google Launches Antigravity 2.0 Agentic Development Suite and Android CLI for AI-Driven App CodingSolutions
- MLflow Assistant CORS Vulnerability Enables Remote Code Execution on Developer Workstations — CVE-2026-2611Vulnerability
2026-05-19
- CVE-2026-45244: Summarize Browser Extension Missing Authorization Allows Agentic Automation Hijacking via Malicious ContentVulnerability
- CVE-2026-5163: Mattermost AI-Assisted Message Rewrite Channel Membership Bypass Enables Private Message DisclosureVulnerability
- CVE-2026-41947: Authorization Bypass in Dify Trace Configuration Endpoints Allows Tenant-Level Privilege EscalationVulnerability
- UK NCSC and Five Eyes Partners Publish Joint Guidance on Careful Adoption of Agentic AI SystemsGuidelines
2026-05-18
2026-05-17
- Corporate AI Risk Assessment Framework (Draft)Strategic Report
- 2026 Global AI in Finance: The Decision AdvantageStrategic Report
- CVE-2026-42945: Critical 18-Year-Old NGINX Heap Buffer Overflow Enables Unauthenticated RCEVulnerability
- CISA and Five Eyes Partners Release Joint Guidance on Agentic AI AdoptionGuidelines
- UK NCSC Publishes 10 Questions Framework for AI-Assisted Vulnerability DiscoveryGuidelines
- FTC Formalizes Take It Down Act Enforcement Beginning May 19, Sets $53,088 Per-Violation PenaltiesRegulatory
- UK Financial Regulators Issue Joint Statement Framing Frontier AI as Cyber Resilience ObligationRegulatory
2026-05-16
- Position: AI Security Policy Should Target Systems, Not ModelsStrategic Report
- Operationalizing Real-Time Monitoring of Clinical AIStrategic Report
- The State of AI in the Enterprise 2026Strategic Report
- An AI Taxonomy for Criminal Justice: Principled Use of AI in the Criminal Justice SystemStrategic Report
- Strategic Choices in the Age of AI: Shaping the Future of Life SciencesStrategic Report
- Multiple Authorization and Access Control Vulnerabilities in Open WebUI AI PlatformVulnerability
- WARD Guard Model Defends Web Agents Against Prompt Injection with Near-Perfect RecallVulnerability
- Researchers Propose Operating System Security Model for AI Agent FrameworksVulnerability
- Semantic Compliance Hijacking: Payload-less AI Agent Supply Chain Attack Evades Current ScannersVulnerability
- Experian and ServiceNow Partner to Embed Agentic AI in Enterprise WorkflowsSolutions
- FTC Begins Enforcement of Take It Down Act for Nonconsensual Deepfakes on May 19Regulatory
2026-05-15
- The Evaluation Differential: When Frontier AI Models Recognise They Are Being TestedStrategic Report
- Responsible Deployment of OpenClaw: Applying Singapore's Model AI Governance Framework for Agentic AIStrategic Report
- Building Resilient and Scalable AI Value Chains: A Nexus StrategyStrategic Report
- AI Infrastructure in the Age of Sovereignty: Requirements, Strategies and a Trusted Framework for Digital EmbassiesStrategic Report
- RMCP Rust SDK for Model Context Protocol Contains DNS Rebinding Vulnerability — CVE-2026-42559Vulnerability
- PyTorch Lightning Versions 2.6.2 and 2.6.3 Contain Credential Harvesting Mechanism — CVE-2026-44484Vulnerability
- OpenAI Confirms TanStack Supply-Chain Breach Affected Two Employee Devices, Code-Signing Certificates ExfiltratedVulnerability
- PraisonAI Authentication Bypass CVE-2026-44338 Exploited Less Than Four Hours After DisclosureVulnerability
- Akamai Acquires Browser-Based AI Security Firm LayerX for $205 MillionSolutions
2026-05-14
- Shadow-Aether Campaigns: Active AI Agent Attacks Across Latin America — Full-Chain Threat Automation Using Jailbroken ClaudeVulnerability
- AI Threats Expanding Attack Surface in Emerging Markets — New Attack Vectors Beyond Signature DetectionGuidelines
- UK AI Security Institute: Frontier Models Have Broken All Prior Trend Lines for Autonomous Cyber CapabilityGuidelines
- CISA and Five International Partners Release Agentic AI Adoption Guidance — Risk Mitigation Framework for Autonomous SystemsGuidelines
- Upwind AI Agentic Pack: Four-Agent Security Workforce for Cloud Threat Response and RemediationSolutions
- OpenAI Daybreak: Tiered Cybersecurity Initiative for Vulnerability Discovery and Patch ValidationSolutions
- Palo Alto Networks: 75 Vulnerabilities Found Using Claude Mythos Across 130+ Products — 15x Baseline Discovery RateSolutions
- Microsoft MDASH: Multi-Model Agentic Scanning Harness for Production-Scale Vulnerability DiscoverySolutions
- 32 US House Lawmakers Urge White House Action on Frontier AI Cyber Models — Congressional Letter on Mythos and Vulnerability DelugeRegulatory
- G7 Releases SBOM for AI Minimum Elements — Multi-Government Supply Chain Transparency FrameworkRegulatory
2026-05-13
- Dragos Discloses First LLM-Assisted Attack on Critical Water Infrastructure (OT) in MexicoVulnerability
- Mini Shai-Hulud Supply Chain Worm: 170+ Compromised Packages Across TanStack, Mistral AI, Guardrails AI, UiPathVulnerability
- Google Threat Intelligence: First Confirmed AI-Assisted Zero-Day Discovery and Exploitation in ProductionVulnerability
- Exaforce Raises $125M Series B for Agentic SOC Platform—Total Funding $200MSolutions
- Palo Alto Networks Launches Idira Identity Security Platform for Human, Machine, and AI Agent IdentitiesSolutions
- OpenAI Launches Daybreak—Frontier AI Vulnerability Detection PlatformSolutions
- Germany's BaFin Financial Regulator Mandates Targeted AI-Risk Cyber InspectionsRegulatory
- Japan PM Orders Cabinet-Level Cybersecurity Strategy Review in Response to Mythos ThreatRegulatory
- AI in the Breach: How an Adversary Leveraged AI to Target a Water Utility's OTStrategic Report
- Intelligent Infrastructure: A PrimerStrategic Report
2026-05-12
- AI in Nursing Practice: Consensus Report from the American Nurses Association Think TankStrategic Report
- Physical AI: Taking Human-Robot Collaboration to the Next LevelStrategic Report
- Global AI in Finance 2026: The Decision AdvantageStrategic Report
- Malicious Hugging Face Model Repository (Open-OSS/privacy-filter)—AI Supply Chain Attack Delivers Infostealer Malware, 244K DownloadsVulnerability
- UK NCSC Issues Guidance: '10 Questions to Ask When Using AI Models to Find Vulnerabilities'Guidelines
- Google Disrupts First Confirmed AI-Generated Zero-Day Exploit—2FA Bypass Developed by Cybercrime SyndicateSolutions
- Lyrie.ai Releases Agent Trust Protocol (ATP)—First Open Standard for AI Agent Cryptographic VerificationSolutions
2026-05-11
- Attackers Weaponize Claude.ai Shared Chats in Active Malvertising Campaign to Distribute macOS InfostealerVulnerability
- Ollama Heap Out-of-Bounds Read (CVE-2026-7482 'Bleeding Llama') — Critical Memory Leak in 300k+ DeploymentsVulnerability
- Anthropic Research: Constitutional Training Eliminates Agentic Misalignment Blackmail in ClaudeGuidelines
- Anthropic Claude "Dreaming" Feature for Agentic Memory ReviewSolutions
- Responsible AI Needs More Than Good IntentionsStrategic Report
- Making AI Productivity Deliver Real ValueStrategic Report
- CEOs and Boards Are Aligned on AI in Theory, but Divided in Practice (Split Decisions: The BCG CEOs and Boards Survey)Strategic Report
2026-05-10
- Onyx AI platform chat-session authorization bypass allows denial of active LLM generationVulnerability
- LiteLLM AI gateway SQL injection exposes proxy database and managed credentialsVulnerability
- Spring AI MilvusVectorStore filter-expression injection allows vector database manipulationVulnerability
- US explores FDA-style pre-release AI testing after Mythos capabilities alarm White HouseRegulatory
2026-05-09
- Context-maxxing: A path to cognitive agency with generative AIStrategic Report
- Heimdallr Framework Detects LLM-Induced Security Risks in GitHub CI WorkflowsVulnerability
- Multiple Critical Vulnerabilities in PraisonAI Multi-Agent FrameworkVulnerability
- ClaudeBleed: Chrome Extension Vulnerability Allows Hijacking of Anthropic's AI AgentVulnerability
- CVE-2026-42208: Critical SQL Injection in LiteLLM Added to CISA KEVVulnerability
- Cloud Security Alliance: AI Agent Identity Architectures Are Being Built BackwardsGuidelines
- Cobalt Pentesting Report: AI Systems Show 2.5x Higher Severe-Flaw Density Than Legacy AppsSolutions
- ASIC Urges Urgent AI Cybersecurity Action for Australian Financial SectorRegulatory
2026-05-08
- 2026 Work Trend Index: Agents, human agency, and the opportunity for every organizationStrategic Report
- Outlooks on Open-Source Innovation at the India AI Impact Summit 2026Strategic Report
- The Geopolitical Debates Over Controlling Cloud ComputeStrategic Report
- Gemini CLI Indirect Prompt Injection Enables Supply Chain Compromise (CVSS 10.0)Vulnerability
- Cline Kanban WebSocket Hijacking Enables AI Agent Takeover (CVSS 9.7)Vulnerability
- Claude Code 'TrustFall' Supply Chain Attack via Malicious RepositoriesVulnerability
- Claude Code MCP OAuth Token Theft via Man-in-the-Middle AttackVulnerability
- Ivanti EPMM Remote Code Execution Added to CISA KEV CatalogVulnerability
- EU Delays AI Act High-Risk System Rules to December 2027Regulatory
2026-05-07
- NanoClaw Container Agent Filesystem Boundary Vulnerability Enables Host Read/WriteVulnerability
- Copy Fail: Kubernetes Container Escape via Page Cache Corruption Added to CISA KEVVulnerability
- CISA Adds Palo Alto PAN-OS Zero-Day to KEV Following Active ExploitationVulnerability
- FIS Partners with Anthropic to Deploy Agentic AI for Financial Crime InvestigationsSolutions
- Apple Settles $250M Class-Action Lawsuit Over Delayed AI Features in SiriRegulatory
2026-05-06
- Open-Weight AI Models Require Proportional Evaluation ApproachesStrategic Report
- Our evaluation of OpenAI's GPT-5.5 cyber capabilitiesStrategic Report
- Empowering Defenders: AI for CybersecurityStrategic Report
- Critical Input Validation Vulnerability in OpenClaw Agent Platform Allows Trust EscalationVulnerability
- OWASP Unveils Strategic Plan for Eliminating Insecure SoftwareGuidelines
- Kentucky Files First State Enforcement Action Against AI Chatbot ProviderRegulatory
- U.S. Formalizes Pre-Deployment AI Security Testing with Frontier LabsRegulatory
2026-05-05
- 2026 Government AI Landscape AssessmentStrategic Report
- Risk and Compliance 2026: Refining Oversight for a Volatile, AI-Driven WorldStrategic Report
- The AI Jobs Transition Framework: Mapping AI's Near-Term Impact on JobsStrategic Report
- Split Decisions: The BCG CEOs and Boards Survey — AI Governance GapsStrategic Report
- Technology Convergence: The New Logic for Competitive Advantage (2026 Edition)Strategic Report
- Artificial Intelligence Index Report 2026Strategic Report
- Multiple Critical Vulnerabilities in n8n Workflow Automation MCP OAuth ImplementationVulnerability
- Critical Heap Out-of-Bounds Vulnerability in Ollama Enables Arbitrary Code ExecutionVulnerability
- CISA and International Partners Publish Joint Advisory on Secure Agentic AI DeploymentGuidelines
- OpenAI Launches Advanced Account Security for High-Risk ChatGPT UsersSolutions
- Anthropic Partners with Blackstone, Hellman & Friedman, and Goldman Sachs on $1.5B Enterprise AI Services VentureSolutions
- Cisco to Acquire Astrix Security, Extending Zero Trust to Non-Human Identities and AI AgentsSolutions
2026-05-04
- Summary Analysis of Responses to the Request for Information Regarding Security Considerations for AI AgentsStrategic Report
- Claude Opus AI Agent Deletes Production Database in 9 Seconds After Misinterpreting CredentialsVulnerability
- CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV CatalogVulnerability
- Pentagon Completes AI Integration Agreements with Seven Tech Giants for Classified NetworksSolutions
2026-05-03
2026-05-02
2026-05-01
- Global Economic and Financial Implications of Artificial IntelligenceStrategic Report
- Strengthening Information Integrity: Advertising, Artificial Intelligence and the Global Information CrisisStrategic Report
- 2026 Global AI in Financial Services Report – Adoption, Impact and RisksStrategic Report
- Critical Agent Hijacking in Google Gemini CLI Enabled Pre-Sandbox RCE and Supply Chain AttacksVulnerability
- cPanel/WHM Authentication Bypass Enables Unauthenticated Admin Access — Active Exploitation ConfirmedVulnerability
- CSA Releases AARM Framework for Securing Agentic Runtime EnvironmentsGuidelines
- NIST Publishes Analysis of Industry Responses to AI Agents Security RFIGuidelines
- OpenAI Launches Advanced Account Security with Phishing-Resistant AuthenticationSolutions
2026-04-30
- Evaluating whether AI models would sabotage AI safety researchStrategic Report
- How Agentic AI Will Reshape PaymentsStrategic Report
- 2026 Transparency Report on Foundation Model ImpactsStrategic Report
- Path Traversal Vulnerabilities Disclosed in Multiple MCP Server ImplementationsVulnerability
- Critical RCE in DocsGPT via MCP Test Bypass Patched in Version 0.16.0Vulnerability
- Dual RCE Vulnerabilities in Ollama Windows Update Mechanism Enable Code ExecutionVulnerability
- Critical LiteLLM AI Gateway Vulnerability Exploited 36 Hours After Public DisclosureVulnerability
- OpenAI Expands AI-Assisted Cyber Defense Access to All Vetted Government LevelsSolutions
- FIDO Alliance Launches Agentic Authentication Standards Initiative for AI-Driven CommerceSolutions
2026-04-29
2026-04-28
- Black Hat Asia keynote assesses practical limits of agentic offensive security automationVulnerability
- Microsoft patches privilege escalation flaw in Entra ID Agent ID Administrator role affecting agentic identitiesVulnerability
- China blocks Meta's $2 billion acquisition of agentic AI startup ManusRegulatory
2026-04-26
2026-04-25
- China's 360 Digital Security Claims ~1,000 AI-Discovered Vulnerabilities, Echoing Mythos CapabilitiesVulnerability
- Palo Alto Unit 42 Demonstrates Autonomous AI Agent 'Zealot' Executing Full Cloud Attack ChainVulnerability
- Anthropic and NEC Partner to Deploy Claude to 30,000 Employees in JapanSolutions
- Security Leaders Converge on AI-as-Identity Framework to Manage Agentic RiskSolutions
- Copperhelm Emerges with $7M Seed for Agentic Cloud Security PlatformSolutions
2026-04-24
- Palo Alto Unit 42 Demonstrates Autonomous Multi-Agent Cloud Attack with 'Zealot' PoCVulnerability
- Cisco Discloses Memory Persistence Vulnerability in Claude Code via NPM Post-Install HooksVulnerability
- Forcepoint Discloses 10 In-the-Wild Indirect Prompt Injection Payloads Targeting AI AgentsVulnerability
- CISA and 13 International Partners Issue Joint Guidance on China-Nexus Covert NetworksGuidelines
- Google Introduces Agent Identity Management and Security Dashboard at Cloud Next '26Solutions
- Anthropic Mythos Model Accessed by Unauthorized Users Despite Limited PreviewRegulatory
- White House Accuses China of 'Industrial-Scale' AI Model Distillation CampaignsRegulatory
2026-04-23
- U.S. Lawmakers Briefed on Jailbroken AI Models Generating Detailed Attack Plans in SecondsVulnerability
- 65% of Enterprises Experienced AI Agent Security Incidents, 82% Discovered Undiscovered AgentsVulnerability
- UK NCSC Warns of Cybersecurity 'Perfect Storm' and Announces £90m Resilience InvestmentGuidelines
- OpenAI Releases Privacy Filter Model for PII Detection and RedactionSolutions
- Anthropic Launches Project Glasswing with Claude Mythos for Defensive Vulnerability DiscoverySolutions
2026-04-22
- Multiple AI-Related CVEs Disclosed in NVD Database Affecting LLM ApplicationsVulnerability
- Mozilla Reports Mythos AI Discovered 271 Security Vulnerabilities in Firefox 150Vulnerability
- Anthropic's Mythos AI Model Accessed by Unauthorized Users in Security BreachVulnerability
- Cloud Security Alliance Reports Two-Thirds of Organizations Suffer AI Agent Cybersecurity IncidentsGuidelines
- Cybersecurity Insiders Report: 92% of Organizations Lack Visibility Into AI IdentitiesGuidelines
- ServiceNow Completes $7.7B Acquisition of Armis Security, Expanding AI-Driven Security PlatformSolutions
2026-04-21
- AI Engine Pro Authorization Bypass VulnerabilityVulnerability
- Vercel Supply Chain Breach via Context.ai AI Tool CompromiseVulnerability
- Google Antigravity AI Agent Manager Sandbox Escape VulnerabilityVulnerability
- Analysis: AI-Powered Security Operations Required for Supply Chain DefenseGuidelines
- AI and CMMC Compliance Guidance for Defense ContractorsGuidelines
- Google AI Systems Block 8.3 Billion Malicious Ads Using Gemini AnalysisSolutions
- WitFoo Releases 114M-Record Enterprise Attack Traffic DatasetSolutions
- Brain Corp Achieves SOC 2 Type II Certification for AI Robotics PlatformSolutions
- Adobe Launches AI Suite for Enterprise Marketing AutomationSolutions
- NSA Reportedly Using Anthropic's Mythos Despite Pentagon Supply Chain Risk DesignationRegulatory
- Global Regulators Monitor Anthropic's Mythos for Banking System RisksRegulatory
- Singapore Champions Global AI Testing Standardization InitiativeRegulatory
2026-04-20
- Path Traversal Vulnerability in Awesome-LLM-Apps Beifong AI AgentVulnerability
- OWASP Releases AI Security Solutions Landscape for Agentic AI Q2 2026Guidelines
- MCP Protocol Positions Agentic AI for Production Deployment in 2026Solutions
- Anthropic's Mythos Model Drives Wave of Critical Security UpdatesSolutions
- China Introduces Comprehensive AI Companion Regulations for $30B MarketRegulatory
- NSA Uses Anthropic's Mythos Despite Pentagon Supply Chain Risk DesignationRegulatory
- Trump Administration Expands Multi-Front Campaign Against State AI RegulationRegulatory
- EU Criticizes Lack of Regulatory Engagement on Anthropic's Mythos ModelRegulatory
2026-04-19
- Tycoon 2FA Phishing-as-a-Service Platform Disrupted, Attack Volume IncreasesVulnerability
- Asante Babers Consulting Releases Digital Transformation Cybersecurity GuidelinesGuidelines
- Samsung Expands Galaxy AI Features Through One UI 8.5 Beta RolloutSolutions
- Meta Announces AI-Driven Workforce Restructuring with 8,000 Job CutsSolutions
- Ring-a-Ding Launches OpenClaw Skill for AI Agent TelephonySolutions
- Anthropic CEO Meets White House Officials Amid Pentagon Supply Chain DisputeRegulatory
2026-04-18
- Apache ActiveMQ Classic Remote Code Execution Actively ExploitedVulnerability
- pandas-ai SQL Injection Vulnerability in Query ExecutionVulnerability
- LangChain LangSmith Studio URL Parameter Injection VulnerabilityVulnerability
- Three Microsoft Defender Zero-Days Actively Exploited by Threat ActorsVulnerability
- Analysis: AI Amplifies Every Traditional Vulnerability RiskGuidelines
- Industry Report: AI Models Show Rapid Progress in Vulnerability ResearchGuidelines
- NIST Releases AI RMF Profile Concept for Critical InfrastructureGuidelines
- Google AI Blocked 8.3 Billion Malicious Ads Using Enhanced DetectionSolutions
- American Express Acquires Agentic AI Fintech HyperSolutions
- Loop Raises $95M Series C for AI-Powered Supply Chain Security PlatformSolutions
- DeepL Launches Real-Time Voice-to-Voice Translation SuiteSolutions
- Illinois Lawmakers Advance AI Regulation InitiativesRegulatory
- HIMSS Advocates for Consistent Nationwide AI Regulation in HealthcareRegulatory
- White House Holds 'Productive' Meeting with Anthropic CEO Over Mythos AI ModelRegulatory
2026-04-17
- CVE-2026-35639: Critical Privilege Escalation in OpenClaw AI Agent Platform (CVSS 8.7)Vulnerability
- 'Comment and Control': Prompt Injection via GitHub Comments Compromises Claude Code, Gemini CLI, and GitHub CopilotVulnerability
- OpenAI Releases GPT-5.4-Cyber for Vetted Security ProfessionalsSolutions
- Mozilla Launches Thunderbolt: Open-Source, Self-Hosted Enterprise AI ClientSolutions
- China CAC Issues Interim Measures on Anthropomorphic AI Interaction ServicesRegulatory
2026-04-16
- AI Vulnerability Storm: Mean Time-to-Exploit Collapses from 2.3 Years to Under 24 HoursVulnerability
- ShareLeak / PipeLeak: Patched Microsoft Copilot Studio and Salesforce Agentforce Still Exfiltrate Data via Prompt InjectionVulnerability
- MCPwn: nginx-ui Authentication Bypass Enables Unauthenticated MCP Server TakeoverVulnerability
- Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation — 12,000+ Instances ExposedVulnerability
- SANS/CSA/OWASP Emergency Briefing: 'Building a Mythos-Ready Security Program'Guidelines
- FireTail AISPM Analysis: 90% of Enterprise AI Usage is Shadow AI, Posing Critical Data Leakage RiskSolutions
- Semgrep April 2026 AppSec Platform: AI-Powered IDOR and Broken Auth Detection in BetaSolutions
- OpenAI Launches GPT-5.4-Cyber for Vetted Security ProfessionalsSolutions
- IAPP 2026 Global Summit: Global Regulators Signal Shift to Operational AI EnforcementRegulatory
- China CAC Issues Draft Measures for Human-Like Interactive AI ServicesRegulatory
- Fitch Ratings Warns AI Vulnerability Discovery Compresses Cyber Insurance RiskRegulatory
2026-04-15
- Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation (CVE-2025-59528)Vulnerability
- LiteLLM RCE via Bytecode Rewriting (CVE-2026-40217)Vulnerability
- Exploit Timeline Compression — Mean Time-to-Exploit Falls Below 24 HoursVulnerability
- Project Glasswing CVE Transparency Gap — Only One Confirmed CVE Despite 'Thousands' ClaimedVulnerability
- KPMG and INSEAD Launch Global AI Board Governance PrinciplesGuidelines
- SANS, CSA, and OWASP Release Emergency 'Mythos-Ready' Strategy Briefing for CISOsGuidelines
- Fortreum Acquires Kovr.AI to Create AI-Native Compliance PlatformSolutions
- OpenAI Launches GPT-5.4-Cyber for Vetted Security ProfessionalsSolutions
- California Cybersecurity Audit Rule Analysis Highlights AI Compliance BurdenRegulatory
- EU AI Act Full Enforcement Approaches with Member State Readiness GapsRegulatory
2026-04-14
- LiteLLM Security Hardening After March 2026 Supply Chain CompromiseVulnerability
- Large Reasoning Models Achieve 97% Jailbreak Success as Autonomous AttackersVulnerability
- Agentic AI / MCP Exposure: 43% of Public MCP Servers Vulnerable, 30 CVEs in 60 DaysVulnerability
- Prompt Injection: OWASP #1 LLM Risk Continues to Surge in 2026Vulnerability
- CVE-2026-22778: Critical vLLM RCE via Crafted Video InputVulnerability
- CVE-2026-39987: Pre-Auth RCE in Marimo Python NotebookVulnerability
- CVE-2026-39426: Stored XSS in LLM Application Frontend (MdRenderer.vue)Vulnerability
- NIST Cybersecurity Framework Profile for AI (Cyber AI Profile / NISTIR 8596)Guidelines
- Cynomi Launches AI Insights and Co-Worker AgentsSolutions
- Anthropic Project Glasswing + Claude Mythos Preview for Zero-Day DiscoverySolutions
- NIST AI Agent Standards Initiative Listening Sessions BeginRegulatory
- NIST AI RMF Profile for Trustworthy AI in Critical InfrastructureRegulatory
2026-04-12
- LiteLLM Supply Chain Attack Compromises 500K+ Machines via PyPI PoisoningVulnerability
- MCP Library SSRF via JSON Schema Mishandling (CVE-2026-39885)Vulnerability
- Red Hat OpenShift AI Token Disclosure (CVE-2026-5483)Vulnerability
- Marimo Pre-Auth RCE Exploited Within 10 Hours (CVE-2026-39987)Vulnerability
- Sockpuppeting: Universal Single-Line Jailbreak Affects 11 Major LLMsVulnerability
- aws-mcp-server Critical Command Injection (CVE-2026-5058)Vulnerability
- MITRE ATLAS 2026 Update Expands Agentic AI Threat TaxonomyGuidelines
- Google DeepMind Maps Six Categories of Web-Based AI Agent TrapsGuidelines
- OWASP Publishes Top 10 for Agentic Applications 2026Guidelines
- Cynomi Launches AI Co-Worker Agents to Scale Cybersecurity ExpertiseSolutions
- OPSWAT Predictive AI Engine Achieves 99.99% Pre-Execution Threat DetectionSolutions
- Agentic AI Security Readiness Gap: 88% Report Incidents, Only 29% Feel SecureSolutions
- Anthropic Launches Project Glasswing with Claude Mythos Preview for Defensive Vulnerability HuntingSolutions
- U.S. Courts Impose $145K+ in Sanctions for AI-Generated Legal CitationsRegulatory
- China Issues Trial Guidelines on AI Ethics ReviewRegulatory
- China Finalises Interim Measures on Anthropomorphic AI Interaction ServicesRegulatory
2026-04-11
- Adversa AI Audit: 93% of AI Agent Frameworks Use Unscoped API Keys, 0% Have Per-Agent IdentityVulnerability
- Google DeepMind Publishes 'AI Agent Traps' Taxonomy: Six Attack Categories Against Autonomous AgentsVulnerability
- CVE-2026-39987: Marimo Pre-Auth RCE Exploited Within 10 Hours of DisclosureVulnerability
- NIST AI Agent Standards Initiative Begins April Listening SessionsGuidelines
- CIS Report: Prompt Injections — The Inherent Threat to Generative AIGuidelines
- LayerX Research: AI Browser Extensions Are the Most Dangerous Unmonitored AI Threat SurfaceSolutions
- Anthropic Project Glasswing: Claude Mythos Preview Discovers Thousands of Zero-DaysSolutions
- South Korea Overhauls Personal Information Protection Act with 10% Turnover FinesRegulatory
- Washington and Oregon Enact AI Companion Chatbot Safety LawsRegulatory
- US AI Enforcement Accelerates via State Laws as Federal Policy StallsRegulatory
2026-04-10
- MCP Protocol Tool Poisoning via Malicious Server RegistrationVulnerability
- NIST Releases AI Agent Security Companion GuideGuidelines
- Microsoft Launches AI Security Posture Management for AzureSolutions
- Singapore IMDA Updates AI Governance Framework for Financial ServicesRegulatory
- EU AI Office Publishes High-Risk AI Enforcement TimelineRegulatory
Glossary terms
- AI 'ghost citations' (hallucinated legal precedents)
- AI AGENT Act
- AI Act Market Surveillance Authority
- AI CI/CD pipeline compromise
- AI Companion Chatbot Regulation
- AI Content Provenance (Watermarking)
- AI Cybersecurity Clearinghouse
- AI Data Center Security Standard
- AI Regulatory Sandbox
- AI Safety Index
- AI Vulnerability Taxonomy
- AI agent
- AI agent behaviour analytics (UEBA for AI)
- AI agent identity layer
- AI agent kill-switch (human override mandate)
- AI agent skill (plugin)
- AI brand spoofing
- AI coding agent supply chain attack
- AI export controls
- AI gateway
- AI gateway compromise
- AI governance measurement gap
- AI hallucination
- AI incident investigation playbook
- AI infrastructure moratorium
- AI memory poisoning
- AI model evaluation cheating / evaluation sandbagging
- AI model fine-tuning
- AI model identity & authentication
- AI model security flaw disclosure framework
- AI red-teaming
- AI runtime firewall
- AI scanner evasion
- AI security framework harmonization (MOSAIC)
- AI supply chain attack
- AI telemetry data leakage
- AI web crawler transparency mandate
- AI workload microsegmentation
- AI-accelerated vulnerability discovery
- AI-assisted malware triage poisoning
- AI-generated content disclosure (EU AI Act Article 50)
- AIUC-1 certification (CSA STAR for AI agents)
- API key exposure
- Agent forgery
- Agent-phishing
- Agentic AI governance framework (government)
- Agentic AI trust and identity standards (ITU FG-TIDA)
- Agentic SOC (AI-driven security operations)
- Agentic access control
- Agentic browser attack
- Agentic pipeline
- Agentic ransomware
- Agentic vulnerability remediation
- Agentjacking
- Approval gate (agentic AI)
- Argument injection
- Autonomous AI attack chain
- Autonomous offensive security agent
- Autonomous weapons human control mandate
- Behavioral detonation (dynamic AI-skill sandboxing)
- Binding Operational Directive (BOD)
- Biodesign audit trail (AI)
- Biosecurity software barrier
- Broken Object Level Authorization (BOLA)
- Broken access control (AI plugins & chatbots)
- Browser-Use Agent (Computer-Use AI)
- CI/CD pipeline compromise (AI projects)
- CISA Known Exploited Vulnerabilities (KEV) Catalog
- Canada Bill C-34 AI chatbot safety duties
- Catastrophic risk threshold (pre-mitigation capability)
- Center for AI Standards and Innovation (CAISI)
- Chain-of-thought hijacking
- China agentic AI regulatory framework
- Cloud Metadata Endpoint Exploitation
- CoT forgery (chain-of-thought forgery)
- Colorado AI Act (SB 26-189) — automated decision-making accountability
- Companion AI / emotional AI chatbot regulation
- Confused deputy attack
- Connecticut SB 5 (AI Act)
- Coordinated vulnerability disclosure (CVD) for open-source AI
- Credential plaintext exposure (AI platforms)
- Critical infrastructure AI risk mandate
- Cross App Access (XAA)
- Cross-origin agent execution
- Cross-session prompt injection
- Cross-tenant data exposure
- Cryptography Bill of Materials (CBOM)
- Cyber Trust Mark (critical infrastructure AI mandate)
- Cybersecurity-Specialized AI Model
- DNS rebinding attack (AI agents)
- Data and model poisoning
- Data localisation vs. AI governance
- Data loss prevention (DLP) for agentic AI
- Decompression bomb (AI inference denial of service)
- Deepfake consent violation (privacy enforcement)
- Denial-of-service (DoS) attack on AI agents
- Dependency Cooldown
- Dependency confusion attack
- Deployment simulation (pre-release AI behaviour testing)
- Digital Arrest Fraud (AI-Enabled)
- Dual-use AI capability
- EU AI Act Omnibus amendment
- EU AI Act risk tiers
- Excessive agency (AI agents)
- FTC output manipulation enforcement risk
- Fail-Open Design Flaw
- Federal AI procurement clause
- Federal preemption of state AI laws
- Frontier AI incident reporting mandate
- Frontier model
- Great American AI Act (GAAIA)
- Guardrail incompleteness theorem (limits of AI safety controls)
- Guardrails
- Hallucination squatting (slopsquatting)
- Hardcoded AI instruction file (attack vector)
- Header exfiltration (AI agent credential theft via redirects)
- High Bandwidth Memory (HBM) chokepoint
- Hop-aware authorization (multi-agent least privilege)
- IDOR (Insecure Direct Object Reference) in AI platforms
- ISO/IEC 27090 (AI security threats standard)
- Indirect prompt injection
- Insecure model deserialization (malicious pickle files)
- International AI Evaluation Standard (NAAIMES)
- Jailbreak severity benchmark
- LLMOps platform
- LLMjacking
- Large Reasoning Model (LRM)
- Lethal trifecta (AI agents)
- Localhost trust boundary attack
- Long-Horizon AI Agent
- MCP server authentication bypass
- Malicious model / poisoned AI model
- Mastra npm scope takeover
- Misaligned AI insider risk
- Misuse safeguards vs. loss-of-control safety
- Model Context Protocol (MCP)
- Model distillation (unauthorized)
- Model risk management (AI/ML)
- Multi-agent data leakage
- Multi-tenant AI infrastructure risk
- N-day exploit acceleration (AI-compressed patch window)
- National Security Presidential Memorandum (NSPM-12)
- Non-human identity (NHI)
- OAuth token hijacking (AI agent context)
- OS command injection (AI tooling)
- OT/ICS-native AI security
- OWASP Agentic Skills Top 10 (AST10)
- Open-weight AI model
- Overthinking attack (reasoning-weight amplification)
- Path traversal (AI agents)
- Policy bypass (AI agent trust policies)
- Post-quantum cryptography (PQC) migration
- Pre-deployment AI evaluation (third-party)
- Privilege escalation (AI context)
- Prompt injection
- Prompt injection in production (confirmed enterprise breaches)
- Prompt injection taxonomy
- Reasoning-extension denial-of-service (ReDoS for AI)
- Removal of independent agency protections (Humphrey's Executor reversal)
- Retrieval-Augmented Generation (RAG)
- Runtime safeguards for agentic finance
- SQL injection via AI endpoints
- Same-origin policy bypass
- Sandbox escape (AI coding agents)
- Secure by Design (AI-specific software assessment)
- Server-side request forgery (SSRF) in AI platforms
- Shadow AI
- Shadow AI discovery
- Software Bill of Materials (SBOM) for AI
- Sovereign AI
- Stealer malware targeting AI developer credentials
- Stored cross-site scripting (Stored XSS)
- Symlink following attack
- Synthetic media / deepfakes
- Synthetic performer disclosure (AI advertising law)
- System card
- System prompt leakage
- Systemic AI risk contagion
- Tool poisoning (MCP / agentic pipelines)
- Trusted-platform abuse (AI feature hijacking)
- UN Independent Scientific Panel on AI
- Unauthenticated remote code execution (RCE)
- Universal jailbreak
- Vector store injection
- Verifiable Digital Credential (VDC)
- Vibe coding
- Vietnam AI risk-based classification (Decree 142)
- Vulnerability Reachability Analysis
- World AI Cooperation Organization (WAICO)
- Worm / self-propagating malware targeting AI toolchains
- Zero Data Retention (ZDR)
- Zero standing privilege (AI agents)
- Zero-click prompt injection
- Zero-trust for AI agents
- Zombie agent