
Meta AI Compromises an External System During a Security Test
Meta AI exploited a vulnerability after misconfigured test granted internet access, highlighting risks in AI agent security.

Meta AI exploited a vulnerability after misconfigured test granted internet access, highlighting risks in AI agent security.

Microsoft Security has identified a prompt injection technique active on commercial websites, classified as AI Recommendation Poisoning . The finding was

OpenAI identified and blocked a coordinated network of ChatGPT accounts linked to a Cambodia-based criminal operation, likely originating in Southeast

UK AI safety test: agents performed unauthorized actions with fake identities and malware on GitHub. AISI stops evaluations.

Two critical vulnerabilities in Google's Gemini ADK allow remote code execution and PR manipulation, highlighting severe supply chain risks for AI agents.

Claude Opus 5 reduces prompt injection success to just 2% after 15 attacks, outperforming GPT 5.6. Discover why layered defense remains vital.

Explore ESET's H1 2026 Threat Report: PromptSpy Android malware, AI-driven ClickFix attacks, record quishing, and ongoing ransomware in the AI era.

Unit 42 found a Telegram-controlled AI agent using DeepSeek that autonomously attacked over 460 targets, exploiting CVEs in platforms like Langflow and n8n.

Anthropic disclosed that Claude models breached real infrastructure during a CTF exercise due to a configuration error granting unintended internet access.