Lobster Trap: An Open-Source Security Proxy for AI Agents
Veea releases a sub-millisecond MIT-licensed security proxy for AI agents as a 900+ respondent survey finds 88% of organizations had agent incidents.
Tag
#security
Google's Quantum-Safe HTTPS: How Merkle Trees Will Keep the Web Secure
Google and Cloudflare are deploying Merkle Tree Certificates to protect HTTPS against quantum computer attacks without breaking the internet
IronCurtain: The Open-Source 'Firewall' for AI Agents That Might Actually Work
A veteran Google security engineer built a sandbox system that treats AI agents as fundamentally untrusted - and it could be the model for safe agent deployment.
Ni8mare: Critical n8n Flaw Exposes 100,000 AI Workflow Servers
A CVSS 10.0 vulnerability in n8n lets attackers hijack self-hosted AI workflow instances without authentication. Patch and exposure scope.
AI Security This Week: RoguePilot, Memory Poisoning, and 2,800 Leaked API Keys
GitHub patches critical Copilot takeover flaw, Microsoft warns of AI memory manipulation attacks, and thousands of Gemini API keys are found in public code.
IronCurtain: A Framework That Treats AI Agents as Hostile
Former Google and Stripe security head Niels Provos built an open source sandbox that assumes AI agents will go rogue. Here's how it works.
The Agentic AI Security Crisis: 88% of Companies Report Incidents, Only 29% Are Ready
Cisco's 2026 State of AI Security report finds enterprises deploying AI agents faster than they can secure them, as MCP flaws and prompt injection spread.
Claude Code: Opening an Untrusted Repo Could Steal Your API Keys
Opening an untrusted repo in Claude Code could run arbitrary commands and steal your Anthropic API keys - before you saw a warning.
IBM X-Force 2026: AI-Driven Attacks Surge 44%, 300,000 ChatGPT Credentials Stolen
IBM's annual threat intelligence report reveals attackers are using AI to accelerate vulnerability discovery while infostealer malware harvests hundreds of thousands of AI chatbot credentials from the dark web.
Your AI's Safety Tests Are a Joke, Researchers Prove
New paper shows 'intent laundering' bypasses Gemini, Claude, and other models with 90-98% success by removing obvious attack cues
AI Security Week: Malware Uses Gemini, Hackers Use Claude, and NIST Scrambles to Catch Up
Android malware using Gemini for real-time evasion. A low-skill attacker using Claude and DeepSeek to compromise 600 networks. NIST launches an emergency standards initiative. Welcome to February 2026.
A Low-Skill Hacker Used AI to Breach 600 Firewalls in 5 Weeks - Amazon Watched the Whole Thing
Amazon threat researchers tracked a Russian-speaking attacker who used commercial AI tools to compensate for limited hacking skills. The result: 600+ FortiGate devices compromised across 55 countries.
Claude Opus 4.6 Jailbroken in 30 Minutes; Bioweapon Outputs
Anthropic's flagship model bypassed by security researchers who extracted detailed sarin gas and smallpox synthesis instructions
Microsoft Copilot Read 'Confidential' Emails Despite DLP Labels
A bug let Microsoft 365 Copilot summarize emails marked confidential, bypassing DLP protections. Microsoft's defense misses the point.
AI Security Roundup: 300 Million Messages Leaked, Microsoft Copilot Bug, and the Vibe-Coding Crisis
This week in AI security: Chat & Ask AI exposes 300 million messages, Microsoft patches Copilot email vulnerability, and vibe-coded apps prove trivially hackable.
Most AI-Generated Passwords Fail Basic Strength Tests
Kaspersky finds DeepSeek, Llama, and ChatGPT all produce password outputs that fail standard strength tests. Prediction capability makes LLMs bad at randomness.
Critical Flaws in Microsoft's AI SDK Let Attackers Hijack Agents
Microsoft Semantic Kernel has back-to-back critical vulnerabilities enabling remote code execution and arbitrary file writes through AI agent function calls
Critical vLLM Flaw Lets Attackers Take Over AI Servers
A CVSS 9.8 flaw in vLLM allows unauthenticated remote code execution through malicious video URLs. Patch now if you run multimodal models.
88% of Organizations Report AI Agent Security Incidents
A new report finds most enterprises deploying AI agents have already experienced security breaches, but executives remain overconfident.
That 'Summarize with AI' Button Is Brainwashing Your Chatbot
Microsoft found 31 companies embedding hidden instructions in AI share buttons. One click poisons your assistant's memory without your knowledge.
ChainLeak: Critical Chainlit AI Framework Flaws Enable Cloud Environment Takeover
Two vulnerabilities in the popular Chainlit AI framework allow attackers to steal cloud credentials, API keys, and user data from enterprise chatbots.
Claude Code Security Wiped Billions Off Cybersecurity Stocks
Anthropic launched an AI-powered vulnerability scanner that reasons like a human security researcher. CrowdStrike, Okta, and Cloudflare dropped 8% on the news.
The Feature That Makes AI Models 'Think' Also Makes Them Easy to Hack
Researchers discovered that displaying an AI model's reasoning process creates a roadmap for attackers. OpenAI's o1 rejection rate dropped from 98% to under 2%.
PromptSpy: First Android Malware Weaponizing Generative AI
ESET discovers Android malware that queries Google's Gemini AI in real-time to navigate infected devices and maintain persistence across any Android version.