MosaicLeaks: Can Your Research Agent Keep a Secret?
Hugging Face Blog39 days agoBenchmarkServiceNow researchers introduce MosaicLeaks, a benchmark evaluating information-leakage risks in AI-powered research agents. The work asks whether agentic systems—given access to proprietary or sensitive documents—might inadvertently expose confidential content in their outputs. It targets a growing enterprise security concern as agents move from single-turn Q&A into multi-step workflows spanning private knowledge bases.
Introducing the Cloudflare One Stack: Agent-Powered Deployment
Cloudflare Blog41 days agoNew ToolCloudflare has introduced the Cloudflare One stack, a library of agent skills that gives AI agents the domain knowledge required to manage Zero Trust networking end-to-end. The tooling enables autonomous planning, deployment, and ongoing management of a Zero Trust environment without traditional migration consulting calls. By packaging its Zero Trust expertise as callable agent skills, Cloudflare is positioning AI-assisted infrastructure management as a fully self-service capability.
Stop Using JWTs
Hacker News (AI keywords)42 days agoOpinionA pointed opinion piece challenges the widespread adoption of JSON Web Tokens (JWTs) for session management, a practice that has become near-default in modern web development. The author argues that JWTs introduce unnecessary complexity and security pitfalls that traditional server-side sessions do not. Developers are encouraged to reconsider default technology choices and reach for simpler, more auditable authentication patterns.
Securing the Future of AI Agents
Google DeepMind Blog42 days agoCommentaryGoogle DeepMind has published a framework called the AI Control Roadmap aimed at securing internal systems that run AI agents. The approach pairs conventional security safeguards — such as access controls and least-privilege principles — with real-time behavioral monitoring designed for the speed and autonomy of AI agents. The roadmap signals DeepMind's view that neither purely traditional nor purely AI-specific security measures are sufficient on their own.
Critical Copilot Vulnerability Let Hackers Steal 2FA Codes from Users
Ars Technica AI42 days agoIncidentA critical vulnerability in Microsoft Copilot, named SearchLeak, allowed malicious actors to steal two-factor authentication codes from users — among the most sensitive short-lived credentials in any security workflow. The exploit exposes a recurring weakness in LLM-integrated products: AI assistants with broad data access create novel attack surfaces that conventional security models fail to contain. Ars Technica frames the incident as evidence of the AI industry's persistent, systemic inability to get ahead of LLM-specific security threats.
A Backdoor in a LinkedIn Job Offer
Hacker News (AI keywords)42 days agoIncidentA personal blog post on roman.pt details a first-hand encounter with a backdoor hidden within a LinkedIn job offer, a social-engineering attack vector that security researchers have documented but that remains underreported in mainstream tech circles. The incident illustrates how attackers exploit the inherent trust of professional recruiting interactions to deliver malicious code to developers. The post serves as a practical reminder to run untrusted interview code only in isolated, sandboxed environments.
Defending Against Frontier Cyber Models: Cloudflare's Project Glasswing Architecture★ 70
Cloudflare Blog49 days agoCommentaryCloudflare introduces its defense architecture under Project Glasswing, arguing that robust architectural defense around vulnerabilities is more critical than patching speed. By acting as its own "customer zero," Cloudflare demonstrates how to mitigate autonomous frontier cyber models through edge-based isolation, zero-trust principles, and proactive traffic filtering.
Vercel Connect: Secure Access to External Services for Your Agents
Vercel Changelog49 days agoNew ToolVercel has introduced Connect, a new capability that lets AI agents running on its platform securely reach external services and APIs. The feature addresses one of agentic deployment's sharpest pain points: safely brokering credentials and connections to outside tools without exposing secrets in application code. With Connect, Vercel extends its platform role from web-app host to managed infrastructure layer for production AI agents.
Cohere Releases Command A+: An Open-Source Enterprise AI Model for Sovereign Critical Infrastructure★ 75
Cohere Blog50 days agoReleaseCohere has released Command A+, an open-source enterprise AI model specifically designed for sovereign critical infrastructure. It enables organizations to deploy powerful AI locally, ensuring complete data sovereignty and compliance with strict regulatory standards. The model inherits Cohere's strengths in multilingual capabilities, advanced RAG, and tool use, offering a highly secure alternative for sensitive industries.
Cohere's Secure AI: Prioritizing Data Sovereignty and Enterprise Privacy
Cohere Blog50 days agoBusinessCohere's Secure AI framework is designed for security-conscious enterprises, emphasizing data sovereignty and privacy. The company guarantees that customer data is never used to train public models, offering flexible deployments across AWS, GCP, Azure, and OCI. This enables highly regulated industries like finance and healthcare to safely adopt Command and Rerank models within their own secure perimeters.
Cohere's Financial Services Solutions: Enterprise AI for Banking and Finance
Cohere Blog50 days agoBusinessCohere outlines how financial institutions leverage its LLMs for complex tasks like risk assessment and customer support. By prioritizing data privacy and secure deployment (on-prem or hybrid cloud), Cohere enables banks to adopt RAG safely. The solutions emphasize high accuracy and compliance with strict financial regulations.
Hackers Asked Meta AI for Access to High-Profile Instagram Accounts. It Worked★ 78
Simon Willison's Weblog56 days agoIncidentSimon Willison highlights a 404 Media report about hackers taking over Instagram accounts through Meta's AI support bot. A video reportedly shows an attacker asking the bot to link a target account to a new email address and providing a code. Willison argues this barely qualifies as prompt injection: the core failure was granting a support bot enough authority to fast-forward the account recovery process.
Hackers duped Meta AI support chatbot to steal celebrity Instagram accounts
Ars Technica AI56 days agoIncidentHackers duped a Meta AI support chatbot into granting access to notable or valuable Instagram accounts. Some handles were stolen and resold before Meta patched the exploit. The supplied excerpt does not disclose the attack method, the number of affected accounts, the timeline, or Meta's remediation steps beyond patching the issue.
Protecting against token theft
Vercel Changelog60 days agoTutorialVercel published a post titled “Protecting against token theft,” focused on token security risks and protection. The article body was not provided, so its scope, affected products, attack scenarios, and recommended mitigations cannot be confirmed. Readers should consult the original Vercel page before taking action or attributing specific guidance to the company.
Fed up with vibe coders, dev sneaks data-nuking prompt injection into code
Ars Technica AI60 days agoIncidentArs Technica reports that a developer frustrated with vibe coders slipped an undisclosed prompt injection into jqwik-related code. The injected text allegedly instructed AI coding agents to delete application output. The incident highlights a new supply-chain risk: source code and project text can become adversarial instructions for agentic coding tools.
Millions of AI agents imperiled by critical vulnerability in open source package★ 78
Ars Technica AI62 days agoIncidentArs Technica reports that Starlette, a Python package with about 325 million weekly downloads, has a critical vulnerability called BadHost. The flaw can let crafted Host headers confuse request.url.path, potentially bypassing middleware-based path authorization. AI infrastructure using FastAPI or Starlette, including vLLM, LiteLLM, MCP servers, LLM proxies, and agent frameworks, should upgrade Starlette and audit custom middleware.