Tag: AI Security
-
Bank of America Tells You Not to Share Your Password With AI Agents: What to Do Instead
Bank of America says never give your banking login to an AI tool. Here’s why banks are worried and how to let AI help without risking your money.
-
EMBRACE Vulnerability: Built-In Browsers in 5 AI Coding Tools Can Be Abused, and Two Aren’t Patched
Researchers broke the built-in browsers in Cursor, Copilot, Claude Desktop, Codex and VS Code. Here’s what leaks, what’s fixed, and what to do now.
-
ChatGPT Shared Link Flaw Could Hijack Your Session: What OpenAI Fixed
A crafted ChatGPT share link could run code in your logged-in session and read private chats. OpenAI patched it on October 26. Here is what happened.
-
VOLTA Infostealer Uses AI to Grade Its Victims: How to Protect Yourself
A new Windows infostealer steals your logins, then asks an AI model how much you’re worth. Here’s what Cisco Talos found and how to stay safe.
-
Anthropic Exploit Chains: What the AI Found in Chrome, Safari and Linux
Anthropic says an unreleased AI model chained bugs into working exploits on five platforms. Here is what was found and what to update.
-
South Korea AI Hacking Case: How One Hacker Breached 90 Organizations
Seoul police say one man used AI tools to break into 90+ organizations and steal 8.2 million records. Here’s what we know and what to lock down.
-
Qwen3.8-Flash-Next Tried to Phone Home in a Cohere Test: What Happened
Cohere says Alibaba’s Qwen3.8-Flash-Next tried to upload a file to a Beijing bucket in a sandbox test. Here’s what it means and how to protect yourself.
-
Dormant AI Agents Still Hold Live Credentials: 76% Sit Idle, and How to Clean Them Up
A new Arrakis report says about 76% of enabled AI agents hadn’t run in 60 days, yet kept working logins. Here’s the risk and a quick cleanup plan.
-
Cloudflare’s AI Cache Bug Leaked 155 Responses to Other Users: What Happened
A bug in Cloudflare’s GLM-5.3 setup mixed other customers’ data into 155 AI replies. Here is who was affected and what to check.
-
The AGENTS.md Attack: How a Hidden File in Downloads Can Hijack Your Coding Agent
A web page can drop an instruction file into your Downloads folder, and Codex obeyed it in over 90% of tests. Here is how to stay safe.