A multi-tenant authentication gap in Microsoft’s AI operations agent exposed live command streams, internal reasoning, and ...
Breach tied to compromised AI tool may have exposed credentials used by app frontends, the user-facing layer that connects ...
Model context protocol server lets AI assistant tools like ChatGPT and Claude pull current API data to generate accurate code ...
Compromised Context.ai integration let attackers inherit Vercel employee access and reach internal systems, exposing a ...
Researchers hijacked Claude, Gemini, and Copilot AI agents via prompt injection to steal API keys and tokens. All three ...
CVE-2026-34040 lets attackers bypass some Docker authentication plugins by allowing an empty request body. Present since 2024, this bug was caused by a previous fix to the auth workflow. In the ...
Anthropic has released Claude Opus 4.7 with a 1M-token context window, 128k output, and API changes that force migration work ...