LIVE FEED
HIGH Hermes AI Agent Automates Post-Exploitation Attack on Thai Finance Ministry // FIRST LOOK Google Gemma Tech Brings 28.9M LLM to ESP32 Microcontrollers // HIGH AI Coding Agents Exploited via Hallucinated Package Names // FIRST LOOK AWS Adds Bedrock Guardrails Best Practices for Code Generation // FIRST LOOK Anthropic Brings Voice Mode to Claude Opus and Sonnet Models // FIRST LOOK Anthropic and OpenAI Open Vetted Cyber Programs for Offensive Researchers // HIGH Threat Actor Trim Weaponises AI Jailbreaks for Offensive Ops // HIGH Fake Claude App via Bing Ads Delivers SectopRAT Malware // HIGH Dolphin X RAT Uses AI Profiler to Rank and Score Victims // CRITICAL CVE-2026-46331: Claude Cowork VM Sandbox Escape on macOS //
PATH-TRAVERSAL

Path-Traversal

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations
OpenClaw AI Assistant Flaws Enable WhatsApp-to-Host RCE

OpenClaw AI Assistant Flaws Enable WhatsApp-to-Host RCE

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 The Hacker News

Three high-severity vulnerabilities in OpenClaw, a personal AI assistant, have been chained to enable remote code execution on the host system via a WhatsApp message, requiring no prior foothold. The flaws—covering OS command injection, incomplete input filtering, and path traversal—allow sandbox escape, credential theft, and privilege escalation. All three have been patched in OpenClaw version 2026.6.6, but unpatched deployments remain at significant risk.

CVE-2026-5027: Langflow RCE Actively Exploited

CVE-2026-5027: Langflow RCE Actively Exploited

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

A critical unpatched path traversal vulnerability (CVE-2026-5027, CVSS 8.8) in Langflow, a widely-used open-source AI application builder, is being actively exploited in the wild to achieve unauthenticated remote code execution. Because Langflow enables auto-login by default, attackers require no credentials to reach the vulnerable endpoint and can exploit it with a single HTTP request. With approximately 7,000 publicly exposed Langflow instances and nation-state actors already targeting related Langflow flaws, the risk to AI development infrastructure is severe.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.