LIVE FEED
FIRST LOOK Microsoft Uses AI to Ship Record 974-Vulnerability Patch Batch // FIRST LOOK Meta Launches Muse Personal AI Agent with Secure VM Isolation // CRITICAL ChatGPT Cross-Account Data Leakage via Sandbox Channel // HIGH Hidden Prompt Injection Attacks Hijack Autonomous AI Agents // FIRST LOOK Schneier and Raghavan Frame AI Agent Risk as a Genie Problem // HIGH ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel // FIRST LOOK Capsule Security Launches AI Circuit Breaker for Rogue Agents // MEDIUM Rogue AI Agents Drive Insurers to Rethink Cyber Risk // HIGH LLM-Assisted Intrusions Hit Latin American Orgs via NextChat // HIGH GPT 5.6-Cyber Breaks VM Sandboxes, Exposing Agent Limits //
UNAUTHENTICATED-API

Unauthenticated-Api

2 reports
All LLM Security Agentic AI Industry News Research Supply Chain First Look: Security Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report AI Governance AI Security AI Security Tools Identity & Access Management Monthly Review Security Operations
NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model

NVIDIA NemoClaw Flaw Lets Malicious Page Poison Local AI Model

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 The Hacker News

Oasis Security has disclosed a vulnerability in NVIDIA's NemoClaw agent stack that exposes local Ollama inference servers to unauthenticated access when the daemon is bound to 0.0.0.0:11434, enabling attackers to modify a model's chat template and inject persistent hidden instructions. The attack chain combines a misconfigured network binding, bypassed CORS and Host header middleware, and DNS rebinding to allow a malicious webpage to silently poison the AI model used by every subsequent conversation. A partial fix is available for macOS and Linux in v0.0.35, but Windows and WSL deployments remain unpatched and receive only a warning banner.

CVE-2025-62593: Ray AI Framework RCE via DNS Rebinding

CVE-2025-62593: Ray AI Framework RCE via DNS Rebinding

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 The Hacker News

CISA has added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog, flagging a critical flaw in the Ray distributed AI/ML computing framework that enables remote code execution through DNS rebinding attacks via Firefox and Safari. The vulnerability stems from Ray's longstanding absence of authentication on critical API endpoints, allowing attackers to execute arbitrary shell code on developer machines or pivot into private corporate networks. Active exploitation has been observed by the RondoDox DDoS botnet and a self-replicating GPU cryptomining campaign dubbed ShadowRay 2.0.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.