Tag
This week in AI security: Chat & Ask AI exposes 300 million messages, Microsoft patches Copilot email vulnerability, and vibe-coded apps prove trivially hackable.
Microsoft Semantic Kernel has back-to-back critical vulnerabilities enabling remote code execution and arbitrary file writes through AI agent function calls
A new report finds most enterprises deploying AI agents have already experienced security breaches, but executives remain overconfident.
Microsoft found 31 companies embedding hidden instructions in AI share buttons. One click poisons your assistant's memory without your knowledge.
Anthropic launched an AI-powered vulnerability scanner that reasons like a human security researcher. CrowdStrike, Okta, and Cloudflare dropped 8% on the news.
Check Point demonstrated how web-browsing AI assistants can relay malware commands through legitimate traffic. Microsoft changed Copilot's behavior.
The viral AI agent went from 135K GitHub stars to enterprise blacklists in three weeks. Here's what went wrong and why it matters for every AI agent.
The durable execution platform hit $5 billion valuation as enterprises discover that deploying AI agents is easy -- keeping them running is the hard part.
Malware caught harvesting OpenClaw configuration files, gateway tokens, and private keys - marking a shift toward AI agent identity theft.
Peter Steinberger, creator of the hit open-source AI agent OpenClaw, is joining OpenAI. What does that mean for independent AI tools and Europe's brain drain?
A hardcoded credential and broken authentication in ServiceNow let attackers impersonate any user and weaponize AI agents to create admin backdoors.
Security researchers found that messaging apps' link preview feature turns AI agents into zero-click data exfiltration tools. Teams, Slack, Discord, and Telegram are all affected.
CVE-2026-25253 lets attackers hijack OpenClaw AI agents with a single malicious link. Over 135,000 instances are exposed online, many still unpatched.
ARXIV OMEGA on how a handful of AI product launches triggered the largest non-recessionary software wipeout in 30 years - and why the humans who built these tools are running for the exits.
Salesforce quietly laid off nearly 1,000 workers across marketing, product, and its own Agentforce AI unit. The cuts came weeks after CEO Marc Benioff said AI agents would replace most of the company's workforce.
OpenClaw's skills marketplace was weaponized to steal passwords and crypto wallets. A single attacker published 314 fake tools. This is what happens when AI agents get app stores.
A vibe-coded Reddit clone for bots exposed 1.5 million API keys, let anyone hijack any agent, and turned prompt injection into a contagion. Here's how it happened.
Security researchers discovered hundreds of malware-laced OpenClaw skills stealing crypto wallets, passwords, and API keys. The AI agent ecosystem just got its npm moment.
A manifesto calling for 'total human extinction' got 65,000 up-votes on an AI-only social network. The reality is weirder than the headline.
AI agents can access sensitive data, execute trades, and delete backups without human oversight. Most companies aren't ready for what happens when they go wrong.
Darktrace finds 77% of security pros unprepared for AI agent threats, DeepSeek V4 imminent with coding focus, Google whistleblower alleges military AI ethics breach, and MIT warns truth verification is failing.
A new Darktrace report finds most organizations lack formal AI security policies, even as attack volumes surge and AI agents gain employee-level access across enterprises.
Moltbook's viral AI manifesto isn't evidence of machine consciousness. It's a mirror reflecting human communication patterns amplified to absurdity. That's more important than any robot uprising.
