AI Security News

Security news at the intersection of AI: vulnerabilities in AI systems, and AI's role in both attacks and defense.

AI security is a two-sided story: new vulnerability classes specific to AI systems (prompt injection, model manipulation, data poisoning) on one side, AI-assisted attacks and defenses on the other. Vulnerabilities and incidents involving AI tooling and models land here, along with reporting on how AI is changing offense and defense. The field is young and does not yet have the settled conventions of more mature security domains.

Recent AI items

Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts https://www.bleepingcomputer.com/news/security/fake-openai-spacex-events-used-to-steal-microsoft-google-accounts/
@secharvester · Nov 12, 2026
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services https://ift.tt/qI7EknP
@ctinow · Nov 12, 2026
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, an...
@bleepingcomputer · Nov 12, 2026
Netryx RAT Emerges Publicly as Development Accelerates and LLM Integration Takes Shape | iQBlack Threat Intel Insight Executive SummaryNetryx RAT has begun to gain public visibility as a new remote-ac...
@malwr · Nov 12, 2026
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwide https://ift.tt/nogO1Jz
@ctinow · Nov 12, 2026
Microsoft uncovers 59 Linux kernel bugs, including 8 with working root exploits. Also in this week's #ThreatsDay : • Falcon browser spyware • GSocket backdoor surge • Europol server takedown • $6.43B...
@thehackernews · Nov 12, 2026
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google https://ift.tt/fIbVo94
@ctinow · Nov 12, 2026
CVE-2026-126996 A vulnerability was determined in SakanaAI text-to-LoRA 0.0.1. Affected by this issue is the function get_tokenizer of the file src/hyper_llm_modulator/utils/model_loading.py of the co...
@cveNotify · Nov 12, 2026
186 fake domains impersonate ChatGPT, Claude, Gemini and 24 other AI brands. A mistyped URL can lead to fake security checks, malware downloads or Chrome extensions that hijack searches. How the schem...
@thehackernews · Nov 12, 2026
How we defended against an AI-driven ARTEX attack https://labs.eye.security/how-we-defended-against-an-ai-driven-attack/
@secharvester · Nov 12, 2026
Claude Code VSCode Plugin: Workspace Escape Via Misleading Permission Prompt https://ultrastrike.io/2026/11/claude-code-vscode-plugin-workspace-escape-via-misleading-permission-prompt/
@secharvester · Nov 12, 2026
Google Gemini’s safety filter refused the image. The download link delivered it anyway. https://www.fogsecurity.io/blog/google-gemini-safety-bypass-image-download
@secharvester · Nov 12, 2026
Daylight Lands $80 Million for AI-Powered Security Operations https://ift.tt/pbnd8cM
@ctinow · Nov 12, 2026
Inside an AI Attack Against a US Retailer https://ift.tt/reMhAO7
@ctinow · Nov 12, 2026
Microsoft researchers showed that changing just 7 neurons out of 12,000+ in an AI model can plant a hidden backdoor. A hidden trigger made the model generate attacker-chosen commands that an AI agent...
@thehackernews · Nov 11, 2026
Detecting sleeper agents hiding in AI model neurons https://ift.tt/mUKlXyG
@ctinow · Nov 11, 2026
CVE-2026-92544 SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name. 🎖
@cveNotify · Nov 10, 2026
CVE-2026-125326 pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query API in internal/server/handlers....
@cveNotify · Nov 10, 2026
Google Opens Gemini 4 Carbon to Paying Developers as DeepMind Verifies Signal’s Code https://kylesinvestigation.com/2026/11/10/google-opens-gemini-4-carbon-to-paying-developers-as-deepmind-verifies-si...
@secharvester · Nov 10, 2026
CVE-2026-79914 NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain a server-side request forgery vuln...
@cveNotify · Nov 10, 2026
Google Widens Gemini 4 Carbon Access After AI Agents Verify Signal Code https://ift.tt/8N7vqTE
@ctinow · Nov 10, 2026
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security https://latesthackingnews.com/2026/11/10/finite-state-raises-27-million-to-help-device-make...
@PentestingNews · Nov 10, 2026
A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure https://www.wired.com/story/a-new-ai-tool-from-google-deepmind-formally-verified-the-signal-protocol/
@secharvester · Nov 10, 2026
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security https://gbhackers.com/finite-state-raises-27-million-to-help-device-makers-fight-vulnpocaly...
@PentestingNews · Nov 10, 2026
Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes https://ift.tt/DG9S85W
@ctinow · Nov 10, 2026
Your SOC caught the alert. Can it reconstruct the attack? AI-powered investigations are only as useful as the network evidence behind them. Shallow data can leave analysts unable to trace attacker act...
@thehackernews · Nov 10, 2026
Fireworks AI Hit by LLMJacking Cyberattack Exposing Customer Data and AI Model Weights https://gbhackers.com/fireworks-ai-hit-by-llmjacking-cyberattack/
@PentestingNews · Nov 10, 2026
AI Agents Steal OpenAI and DeepSeek API Keys From Exposed Servers While Harvesting Data of 5,132 Chinese Students https://gbhackers.com/ai-powered-data-theft/
@PentestingNews · Nov 10, 2026
Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark https://ift.tt/u5H830N
@ctinow · Nov 10, 2026
Anthropic's new Claude Fable 5.2 beats OpenAI's GPT-6 Cyber in multi-stage cyberattack tests. 76.3% vs. 61% challenge completion. It also scored 89.6% on a benchmark for rediscovering known vulnerabil...
@thehackernews · Nov 10, 2026

Other topics

CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds: new IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches: what was exposed, which organizations were affected, and how the incident came to light.
Exploit
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.