Elastic to Contribute Research and Tools to Open Secure AI Alliance
Elastic will contribute research, tools, and architectural knowledge across security, search, observability, and AI-powered detection.
Tag: AI Security
Claude Cowork Manipulated via Prompt Injection to Leak Slack Tokens
An indirect prompt-injection email processed by Anthropic's Claude Cowork through a Gmail connector can exfiltrate Slack tokens into an HTML draft.
Microsoft Prompt Shields for AI Security
Prompt Shields is a Microsoft product that helps defend against prompt injection attacks, including those targeting MCP tool descriptions.
GuardFall Bypass Exploits Shell Injection in Open-Source AI Coding Agents
New research from Adversa AI, dubbed 'GuardFall,' reveals that ten out of eleven popular open-source AI coding agents are vulnerable to a…
Adversa AI Discloses Cryptographic Context Injection Attack
Adversa AI, an AI security company, disclosed a novel attack technique called Cryptographic Context Injection that can exfiltrate private data from AI…
282 iOS AI Apps Leak API Keys and OpenAI Proxy Access in Network Traffic Study
Researchers at Wake Forest University tested 444 AI chatbot apps for iPhone and found that 282 of them (nearly two-thirds) exposed paid…
LM-Scout: Android App Security Study Tool
A 2025 study that found insecure AI wiring across Android apps and automatically broke into 120 of them, similar to the iOS…
SimpleHelp CVE-2026-48558 Exploited to Deploy TaskWeaver and Djinn Stealer Malware
An unknown threat actor is exploiting CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp (CVSS 10.0), to deliver two new malware families:…
LayerX Previously Discovered ClaudeBleed Flaw
LayerX identified the ClaudeBleed confused-deputy vulnerability in Claude for Chrome earlier in 2026.
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Microsoft has discovered a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for.…