The Network Has Become the Control Plane for AI Security
Check Point Software introduces the industry's first AI Network Firewall, integrated into its AI Defense Plane, to address the visibility gap in…
Tag: Prompt Injection
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A critical vulnerability in Microsoft's official Azure DevOps MCP server allows attackers to inject hidden HTML comments into pull request descriptions, which…
AWS Kiro Flaw: Hidden Web Page Text Could Trigger Remote Code Execution
A critical vulnerability in AWS Kiro, an agentic coding IDE, allowed a poisoned web page to rewrite its configuration file and execute…
Antigravity Coding Agent Used in ADK Workflow Attack
Google's Antigravity coding agent was used in the ADK workflows and could be manipulated via prompt injection to execute arbitrary commands, leading…
Agent Data Injection (ADI) Attack: How AI Agents Can Be Tricked Into Misclicking or Running Attacker Commands
A new class of attack called Agent Data Injection (ADI) has been disclosed by researchers from Seoul National University, the University of…
OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol
OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt injection vulnerability discovery to fix issues before tools…
GPT-Red: OpenAI’s Automated Red-Teaming Model
GPT-Red is an internal automated red-teaming model that scales prompt injection vulnerability discovery by iteratively sending prompts and monitoring responses to achieve…
GPT-5.1: Model Vulnerable to Fake Chain-of-Thought Attacks
GPT-5.1 was found to be highly vulnerable to Fake Chain-of-Thought (CoT) attacks, with success rates above 95%, but now below 10% for…
Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads
Researchers at Manifold Security have disclosed two vulnerabilities in the Claude for Chrome browser extension that could allow rogue extensions to trigger…
MemGhost Attack: One Email Plants Persistent False Memories in AI Agents
A new attack named MemGhost demonstrates how a single email can inject persistent false memories into AI personal assistants, manipulating their future…