Back to Blog
16 posts with this tag
#AI Security
16 posts
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure CVE-2026-24301 is a newly published Microsoft Copilot vulnerability that turns a familiar enterprise ri...
Last updated on 19/08/2026 at 2:05 PM
4 min read
Lucas Oliveira
Research
Hugging Face Diffusers flaws turn model loading into a code execution risk
Hugging Face Diffusers flaws turn model loading into a code execution risk Security researchers have disclosed a set of Hugging Face Diffusers vulnerabilities t...
Last updated on 03/08/2026 at 8:05 AM
6 min read
Lucas Oliveira
Research
AWS Kiro flaw shows why AI coding agents need platform-level guardrails
AWS Kiro flaw shows why AI coding agents need platform-level guardrails AWS has patched a Kiro IDE security issue that captures one of the sharpest risks in age...
Last updated on 17/08/2026 at 12:56 PM
7 min read
Lucas Oliveira
Research
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access STAR Labs has published technical details for CVE-2026-53264, a Linux kernel race...
Last updated on 17/08/2026 at 12:56 PM
9 min read
Lucas Oliveira
Research
ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets
ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets ServiceNow's July security advisory for CVE-2026-6875 has moved quickly from "cri...
Last updated on 17/08/2026 at 12:56 PM
8 min read
Lucas Oliveira
Research
JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware
JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware Sysdig has documented what it assesses as one of the first clear examples of agentic r...
Last updated on 04/07/2026 at 7:47 PM
6 min read
Lucas Oliveira
Research
Mastra npm compromise turns AI agent builds into credential-theft risk
Mastra npm compromise turns AI agent builds into credential-theft risk The Mastra npm incident is a sharp warning for teams building AI agents: dependency compr...
Last updated on 17/08/2026 at 12:56 PM
8 min read
Lucas Oliveira
Research
CVE-2026-45829: ChromaDB Pre-Auth RCE Risk in AI Stacks
CVE-2026-45829: ChromaDB Pre-Auth RCE Risk in AI Stacks | 2026 Executive Summary CVE-2026-45829 is a critical ChromaDB flaw that can let unauthenticated attacke...
Last updated on 17/08/2026 at 12:56 PM
7 min read
Lucas Oliveira
Research
LiteLLM SQL injection flaw puts AI gateways on the front line
LiteLLM SQL injection flaw puts AI gateways on the front line CVE-2026-42208 matters because it turns an AI gateway into a high-value choke point for attackers....
Last updated on 17/08/2026 at 12:56 PM
5 min read
Lucas Oliveira
Research
PyTorch Lightning supply-chain compromise puts AI developer credentials at risk
PyTorch Lightning supply-chain compromise puts AI developer credentials at risk The most dangerous supply-chain incidents are not always the ones that hit opera...
Last updated on 17/08/2026 at 12:56 PM
5 min read
Lucas Oliveira
Research
CVE-2026-42208 turns exposed LiteLLM gateways into a secrets exposure risk
CVE-2026-42208 turns exposed LiteLLM gateways into a secrets exposure risk CVE-2026-42208 is a critical SQL injection flaw in LiteLLM's proxy API key verificati...
Last updated on 17/08/2026 at 12:56 PM
5 min read
Lucas Oliveira
Research
Lovable Incident Raises Cross-Tenant Data Exposure Concerns for AI Development Platforms
Lovable Incident Raises Cross-Tenant Data Exposure Concerns for AI Development Platforms Lovable, an AI platform used to build and iterate software projects, is...
Last updated on 23/04/2026 at 9:12 AM
2 min read
Lucas Oliveira
Research
Tags
7-Zip
1
aaylex
0
Access Control
6
Account Takeover
8
active-directory
1
Active Exploitation
5
ActiveMQ
1
Adobe
2
Adobe Campaign Classic
1
Adobe Commerce
1
AI Security
16
ALPHV
0
Apache
1
API Security
3
Apple
1
Application Security
3
APT28
1
Archive Security
1
Arista
1
Artificial Intelligence
2
Authentication
1
Authentication Bypass
18
Authentication Tokens
3
Authorization Bypass
1
Automotive Security
0