Rogue Agent Flaw in Google Dialogflow CX Could Let Attackers Hijack AI Chatbots
A critical vulnerability in Google's Dialogflow CX, dubbed 'Rogue Agent' by security firm Varonis, could have allowed an attacker with edit permissions…
Tag: Google Cloud
Dialogflow CX: Google’s AI Chatbot Platform
Dialogflow CX is a Google Cloud product for building conversational AI chatbots. A critical vulnerability named Rogue Agent affected its Code Blocks…
Google Cloud Run: Shared Environment for Dialogflow CX Code Blocks
Cloud Run is a Google-managed compute platform. In Dialogflow CX, it hosts a shared environment for Code Blocks, which lacked isolation and…
VPC Service Controls Bypassed in Rogue Agent Flaw
VPC Service Controls, a Google Cloud security perimeter, was bypassed by the unrestricted outbound internet access from the Dialogflow CX Code Block…
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
Google Cloud: Cloud Computing Services
Google Cloud is a suite of cloud computing services. Google Cloud credentials were harvested by the JADEPUFFER AI agent during the attack.