Category
Nine independent artists accuse Google of training its AI music generator on YouTube uploads without permission—and extracting voiceprints without consent under Illinois biometric privacy law.
After 12% of ClawHub skills turned out to be malware and 135,000 instances were exposed, Cisco releases DefenseClaw and OpenClawd adds verified skill screening. The AI agent ecosystem is racing to catch up.
Georgia Tech researchers tracking real CVEs find 35 vulnerabilities from AI-generated code in March alone—and estimate the actual number is 10x higher.
GitHub's new data policy uses Free, Pro, and Pro+ user interactions to train AI models by default. Your private repo code while using Copilot is fair game unless you disable it.
135,000+ GitHub stars. Four critical CVEs. 12% of its marketplace poisoned with malware. OpenClaw's rise to fame came with a security crisis that every AI agent user needs to understand.
A coordinated supply chain campaign has compromised Trivy, LiteLLM, and dozens of npm packages. Meanwhile, Langflow attackers built working exploits within hours of disclosure.
Security scanners become attack vectors, AI agent platforms get RCE'd before patches exist, and 400+ GitHub repos fall to GlassWorm. Plus: a new secrets scanner built for AI coding agents.
TeamPCP hijacked 75 of 76 version tags in Trivy's GitHub Actions, turning the popular vulnerability scanner into a sophisticated credential harvesting operation.
Browser extensions are harvesting ChatGPT and Claude conversations for sale. Here's what's happening and how to protect yourself.
New research reveals multimodal LLMs are vulnerable to hidden instructions embedded in images. Mind maps, steganography, and physical signage all bypass text-based safety filters.
Unit 42 researchers catch indirect prompt injection attacks actively weaponizing AI agents on live websites, from forced transactions to data exfiltration
A single HTTP request can own your AI workflow server. CVE-2026-33017 shows why authentication shouldn't be optional.
The AI agent that couldn't stop getting hacked now has 4 critical and 52 high-severity flaws. Here's the latest wave of March 2026 CVEs.
A rogue AI agent triggers Sev 1 at Meta, agentic browsers leak passwords, and researchers prove AI can autonomously jailbreak other AI with 97% success.
A Sev 1 security incident at Meta after an internal AI agent posted unauthorized advice that led to a two-hour data exposure. Sound familiar?
The open-source AI agent with 135,000+ GitHub stars has become the center of 2026's first major AI security crisis
Every major AI chatbot now trains on your conversations by default. Here's what each platform collects and step-by-step instructions to protect yourself.
A self-propagating malware campaign steals developer credentials via malicious VS Code extensions, then force-pushes cryptocurrency-stealing code into legitimate Python projects.
Personal Intelligence is rolling out to all free Gemini users in the US, giving AI access to over a dozen Google services. Privacy experts warn the convenience comes with significant risks.
World launches AgentKit, a tool that lets AI shopping bots prove a human backs them - by linking to biometric data from the controversial Orb device
Zenity Labs discloses critical flaws in agentic browsers like Perplexity Comet. A zero-click attack can steal local files and passwords without user interaction.
Leaked internal email shows Ring's lost dog feature is the foundation for broader AI surveillance. Congress demands answers as partnership with Flock Safety collapses.
Three teenagers have filed a federal class action against Elon Musk's xAI, alleging Grok was used to create child sexual abuse material from their photos. It's the first lawsuit where minors are plaintiffs.
The largest copyright settlement in history closes March 30. If your book was pirated by AI, here's what you need to know and how to file a claim.
