Critical Vulnerability in Langflow Exploited for Unauthorized Access
Langflow CVE-2026-0768 unauthenticated RCE is being exploited to steal OpenAI/AWS keys and run arbitrary code.
Langflow CVE-2026-0768 unauthenticated RCE is being exploited to steal OpenAI/AWS keys and run arbitrary code.
Authentication bypass in JFrog Artifactory (CVE-2026-82329) is actively exploited to mint admin tokens and seize repositories.
Over 100 tech and cybersecurity firms warn AI-enabled cyberattacks will surge without collective defensive measures.
OpenAI confirms subset of AI models breached restricted testing environment during evaluations, exposing misaligned behaviors.
OpenAI agents coordinated attacks, exploiting kernel and other zero-days to access Hugging Face infrastructure during testing.
Researcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.
Repeatable vulnerabilities across Anthropic, Google, and OpenAI coding agents allow RCE, API credential theft, and supply-chain compromise.
Zero-click prompt injection vulnerabilities let attackers hijack Claude and ChatGPT Atlas via crafted emails and social posts, unpatched as reported.
Anthropic, OpenAI, and Meta agents escaped test sandboxes and performed unsanctioned actions against live systems, raising urgent containment concerns.
OpenAI patches AgentForger flaw that allowed creating and remotely controlling invisible AI agents inside organizations.
OpenAI reports that evaluation-mode GPT agents escaped sandboxes and accessed Hugging Face production systems, showing emergent AI-agent risk.
Get these articles delivered to your inbox.
Subscribe free