LIVE FEED
FIRST LOOK OpenAI Expands ChatGPT Into Family and Caregiver Households // FIRST LOOK Iroh Launches Mesh LLM for Distributed AI Across Peer Nodes // HIGH HalluSquatting Exploits AI Hallucinations for Botnet RCE // CRITICAL OpenClaw AI Assistant Flaws Enable WhatsApp-to-Host RCE // FIRST LOOK Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap // FIRST LOOK Ghostcommit PoC Embeds Prompt Injection in PNG to Steal Repo Secrets // FIRST LOOK Microsoft MDASH Brings AI-Powered Windows Vulnerability Discovery // FIRST LOOK FableCut Ships AI-Drivable Browser Video Editor via MCP and REST // FIRST LOOK AI Agents Emerge as a New Identity Class Orgs Must Secure // HIGH CVE-2026-12958: GhostApproval Symlink Attack on Coding Agents //
UNAUTHENTICATED-ACCESS

Unauthenticated-Access

3 reports
All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Jailbreaks Adversarial ML Model Theft Data Poisoning AI Security Tools Security Operations
CVE-2026-5027: Langflow RCE Actively Exploited

CVE-2026-5027: Langflow RCE Actively Exploited

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

A critical unpatched path traversal vulnerability (CVE-2026-5027, CVSS 8.8) in Langflow, a widely-used open-source AI application builder, is being actively exploited in the wild to achieve unauthenticated remote code execution. Because Langflow enables auto-login by default, attackers require no credentials to reach the vulnerable endpoint and can exploit it with a single HTTP request. With approximately 7,000 publicly exposed Langflow instances and nation-state actors already targeting related Langflow flaws, the risk to AI development infrastructure is severe.

CVE-2026-33579: OpenClaw Privilege Escalation to Admin

CVE-2026-33579: OpenClaw Privilege Escalation to Admin

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Ars Technica Security

A critical privilege escalation vulnerability (CVE-2026-33579) in OpenClaw, a viral agentic AI tool, allowed attackers with the lowest-level pairing permissions to silently gain full administrative access to any OpenClaw instance. Given that OpenClaw by design holds broad access to sensitive resources—including credentials, files, and connected services—the practical blast radius of this flaw is full instance takeover with no user interaction required. Thousands of deployments may already be silently compromised.

ComfyUI RCE Exploited in Cryptomining Botnet Campaign

ComfyUI RCE Exploited in Cryptomining Botnet Campaign

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 The Hacker News

Threat actors are actively exploiting internet-exposed ComfyUI instances — a popular AI image generation platform — by abusing its custom node execution feature to achieve unauthenticated remote code execution. Over 1,000 publicly accessible instances have been identified as targets, with compromised hosts enrolled in Monero and Conflux cryptomining operations and a Hysteria V2 proxy botnet. The attack highlights critical supply chain and insecure plugin design risks inherent in AI/ML tooling ecosystems.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.