Link Previews Are Leaking Your Data to AI Agents Without a Click
Security researchers found that messaging apps' link preview feature turns AI agents into zero-click data exfiltration tools. Teams, Slack, Discord, and Telegram are all affected.
Tag
#security
OpenAI Built a Bunker for ChatGPT Because It Can't Fix the Walls
ChatGPT's new Lockdown Mode protects against prompt injection data theft - but OpenAI admits the underlying vulnerability may never be solved. Here's what that means for agentic AI.
Anthropic's Claude Opus 4.6 Found 500+ Zero-Day Vulnerabilities in Open-Source Software. Now What?
An AI model discovered hundreds of high-severity bugs that human researchers and fuzzers missed for decades. The security implications cut both ways.
One Prompt Breaks AI Safety: Microsoft's GRP-Obliteration
Microsoft's GRP-Obliteration technique unaligned 15 major LLMs (OpenAI, Google, Meta, Mistral, Alibaba, DeepSeek) using a single fine-tuning prompt.
An AI Dinosaur Toy Exposed 50,000 Children's Private Conversations to Anyone With a Gmail Account
Security researchers found that Bondu's AI plush toy left its entire admin console open, exposing kids' names, birthdays, and intimate conversations. A senator wants answers.
Chat & Ask AI Leaked 300 Million Messages
A Firebase misconfiguration exposed 300 million messages from 25 million users. A wider scan found data leaks across 196 of 198 AI apps.
Anthropic's Claude Cowork Triggered a $1 Trillion Selloff. The Privacy Risks Are Worse Than the Stock Losses
Claude Cowork's industry plugins crashed software stocks by 25% in a week. But the real story is a known file-stealing vulnerability Anthropic shipped anyway, and safety guidance that contradicts its own marketing.
341 Malicious AI Agent Plugins Were Hiding in Plain Sight on ClawHub
OpenClaw's skills marketplace was weaponized to steal passwords and crypto wallets. A single attacker published 314 fake tools. This is what happens when AI agents get app stores.
Moltbook: The 'Social Network for AI Agents' Is a Security Catastrophe
A vibe-coded Reddit clone for bots exposed 1.5 million API keys, let anyone hijack any agent, and turned prompt injection into a contagion. Here's how it happened.
341 Malicious Skills Found on ClawHub: The First Major AI Agent Supply Chain Attack
Security researchers discovered hundreds of malware-laced OpenClaw skills stealing crypto wallets, passwords, and API keys. The AI agent ecosystem just got its npm moment.
Your AI Agent Is the New Insider Threat
AI agents can access sensitive data, execute trades, and delete backups without human oversight. Most companies aren't ready for what happens when they go wrong.
AI News Roundup: February 3, 2026
Darktrace finds 77% of security pros unprepared for AI agent threats, DeepSeek V4 imminent with coding focus, Google whistleblower alleges military AI ethics breach, and MIT warns truth verification is failing.
Moltbook Security Breach: 1.5 Million API Keys Exposed in Vibe Coding Disaster
The AI-only social network launched with an unsecured database. Anyone could hijack any agent. This is what happens when you vibe code your way to production.