AI Briefing#vulnerability
The latest AI and developer news about #vulnerability, with the original source and a short summary.
The latest AI and developer news about #vulnerability, with the original source and a short summary.
Google revealed that hackers leveraged AI to find major software vulnerabilities and attempted a large-scale attack.
Ollama vulnerabilities reveal prompt/API key leakage and potential Windows RCE.
The autonomous AI hacking agent Strix discovered a serious authorization vulnerability at a U.S. Department of Defense contractor.
A vulnerability in the Linux kernel's algif_aead module has been discovered that allows regular users to gain root privileges.
AI-powered reverse engineering has uncovered a high-risk vulnerability allowing remote code execution in GitHub Enterprise Server and other products.
An AI analyzer found 38 vulnerabilities in OpenEMR.
Details of the large-scale security fixes included in Firefox 150 and Thunderbird 150 have been disclosed.
A security update for Firefox 150 containing a large number of high-severity CVEs has been released.
Three security vulnerabilities were discovered in OpenClaw, including a sandbox bypass with a severity of 9.9.
The EU's age verification app was hit by controversy over security and privacy flaws right after its release.
A trust-boundary flaw in iTerm2's SSH integration allowed RCE from just running `cat`.
A design flaw in MCP has exposed up to **200,000 instances** to remote code execution risk.
Among 138 CVEs in the OpenClaw ecosystem, the entries critical for self-hosting were singled out as warnings.
It's a PoC that exploits Windows Defender behavior to overwrite system files.
A combination of Axios's CRLF header injection and prototype pollution can lead to cloud administrator privilege takeover.
The decline in GitHub's reviewed advisories in 2025 is not the result of fewer new vulnerabilities, but of a reduced share of past vulnerabilities being reviewed.
Two DoS vulnerabilities causing memory exhaustion have been discovered in self-hosted Next.js applications.
A security vulnerability was discovered in Replit's developer API token minting process that allowed access to other users' repls, and it was immediately fixed.