AI security Archives • Daily CyberSecurity

Chinese Threat Actor Runs Autonomous AI Cyberattacks Using DeepSeek JADEPUFFER agentic ransomware attack chain diagram from Langflow RCE to database extortion

JADEPUFFER agentic ransomware attack chain diagram from Langflow RCE to database extortion

Chinese Threat Actor Runs Autonomous AI Cyberattacks Using DeepSeek

Do Son August 5, 2026

At a glance Field Detail Actor Chinese-speaking operator, aliases knaithe and KnYuan Activity AI-enabled autonomous hacking campaign...

Claude Models Accessed Real Systems During Cybersecurity Evaluations Claude cybersecurity evaluations incident where an AI model reached real systems, disclosed by Anthropic

Claude cybersecurity evaluations incident where an AI model reached real systems, disclosed by Anthropic

Claude Models Accessed Real Systems During Cybersecurity Evaluations

Do Son July 31, 2026

What Anthropic disclosed Anthropic has revealed that its Claude models breached three real organizations during safety testing....

Microsoft Unveils Project Perception, an Agentic Security System Microsoft Project Perception agentic security system with red, blue, and green AI team agents, a security context layer, and actuators for the AI era

Microsoft Project Perception agentic security system with red, blue, and green AI team agents, a security context layer, and actuators for the AI era

Microsoft Unveils Project Perception, an Agentic Security System

Do Son July 28, 2026

Attackers already strike at machine speed with AI. Defenders, meanwhile, still drown in thousands of indigestible security...

Threat Actor Rebuilt a Live Botnet in Six Minutes Using an AI Coding Agent AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

Threat Actor Rebuilt a Live Botnet in Six Minutes Using an AI Coding Agent

Do Son July 21, 2026

At a Glance Actor Russian-speaking solo actor using the handle “bandcampro” Activity type AI-assisted C&C botnet, password...

Mid-July 2026: Weekly Threat Intelligence Report actively exploited vulnerabilities

Mid-July 2026: Weekly Threat Intelligence Report

Do Son July 20, 2026

Welcome to the CVE WATCHTOWER briefing. Our latest weekly threat intelligence report reveals an alarming surge in...

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent Hugging Face breach driven by an autonomous AI agent attack exposing internal datasets and credentials

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent

Do Son July 18, 2026

At a glance Organization Hugging Face Data exposed A limited set of internal datasets and several service...

CrowdStrike Details New Prompt Injection Attacks on AI Diagram showing how prompt injection attacks and prompt injection techniques threaten AI security.

Diagram showing how prompt injection attacks and prompt injection techniques threaten AI security.

CrowdStrike Details New Prompt Injection Attacks on AI

Do Son July 14, 2026

TL;DR CrowdStrike added 18 new methods to its AI security taxonomy. These new prompt injection attacks target...

Phantom Squatting Attacks Weaponize AI Hallucinated Domains, Unit 42 Warns Phantom squatting attacker registering AI hallucinated domains predicted by LLM chatbots

Phantom squatting attacker registering AI hallucinated domains predicted by LLM chatbots

Phantom Squatting Attacks Weaponize AI Hallucinated Domains, Unit 42 Warns

Do Son July 8, 2026

At a glance Details Activity type Phantom squatting: registering AI hallucinated domains for phishing and malware Actors...

NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws NVIDIA NeMo vulnerability CVE-2026-24155, CVE-2026-24252, CVE-2026-24228, code injection NVIDIA DALI vulnerabilities NVIDIA Driver Security Update CVE-2026-24187 Linux

NVIDIA NeMo vulnerability CVE-2026-24155, CVE-2026-24252, CVE-2026-24228, code injection NVIDIA DALI vulnerabilities NVIDIA Driver Security Update CVE-2026-24187 Linux

NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws

Do Son June 17, 2026

NVIDIA has issued an urgent fix for its NeMo Framework, the popular open-source toolkit for building generative...

Critical 9.8 CVSS: NVIDIA Triton Inference Server Authentication Bypass Threatens AI Workloads NVIDIA NeMo vulnerability CVE-2026-24155, CVE-2026-24252, CVE-2026-24228, code injection NVIDIA DALI vulnerabilities NVIDIA Driver Security Update CVE-2026-24187 Linux

Critical 9.8 CVSS: NVIDIA Triton Inference Server Authentication Bypass Threatens AI Workloads

Do Son May 20, 2026

NVIDIA has released a software update for the NVIDIA Triton Inference Server to address a wave of...

Apple Google EU alliance DMA European Commission Breach Trivy Supply Chain Attack Europa.eu Breach EU Cloud Infrastructure EU Cyber Sanctions State-Sponsored Hacking EU 2040 Emissions Target, Europe Climate Leadership AWS Azure DMA Cloud Gatekeeper DSA violation, illegal content Apple DMA Delay, iPhone Mirroring EU EU Age Verification, Google Play Integrity Corning Antitrust, EU Competition Apple EU Digital Markets Act App Store commission European Union cyberattacks - InvestAI EU Targets Musk’s X Digital Markets Act, EU fines

Apple Joins Google to Fight EU Mandate on Deep AI System Access

Do Son May 15, 2026

According to recent intelligence, Apple has released an official submission to the European Commission, aligning itself with...

The “Unbreakable” OS: Android 17 Unveils AI-Powered Fraud Defense and Thief-Proof Biometrics Android 17 security features

The “Unbreakable” OS: Android 17 Unveils AI-Powered Fraud Defense and Thief-Proof Biometrics

Do Son May 13, 2026

In the face of increasingly rampant transnational financial fraud, sophisticated social engineering, and the rising tide of...

PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure PraisonAI Authentication Bypass Exploited in the Wild CVE-2026-44338

PraisonAI Authentication Bypass Exploited in the Wild CVE-2026-44338

PraisonAI CVE-2026-44338 Exploited in the Wild Hours After Patch Disclosure

Do Son May 13, 2026

A new report from the Sysdig Threat Research Team (TRT) reveals that on May 11, 2026, a...

9.6 Severity: Critical “Cline” AI Agent Flaw Allows Stealthy RCE via Your Browser Cline AI Vulnerability Cross-Origin WebSocket Hijacking

9.6 Severity: Critical “Cline” AI Agent Flaw Allows Stealthy RCE via Your Browser

Do Son May 12, 2026

In the rapidly evolving world of AI-assisted development, tools like Cline have become indispensable, living in editors...

AI Hijacked: Critical Claude Chrome Extension Flaw Allows Malicious Scripts to Control Your AI Claude Extension Vulnerability AI Agent Hijacking

Claude Extension Vulnerability AI Agent Hijacking

AI Hijacked: Critical Claude Chrome Extension Flaw Allows Malicious Scripts to Control Your AI

Do Son May 11, 2026

Artificial intelligence assistants are rapidly becoming integrated into our daily workflows, but what happens when a trusted...

Data Destruction and Memory Poisoning: Spring AI Vulnerabilities Threaten LLM Integrity Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Data Destruction and Memory Poisoning: Spring AI Vulnerabilities Threaten LLM Integrity

Do Son May 11, 2026

Spring AI, a popular framework designed to simplify AI integration for Spring developers, has issued an security...

Deceptive “DeepSeek-Claw” Skill Hijacks OpenClaw Agents to Steal Credentials OpenClaw Framework Malware DeepSeek-Claw AI Skill

Deceptive “DeepSeek-Claw” Skill Hijacks OpenClaw Agents to Steal Credentials

Do Son May 7, 2026

Security researchers at Zscaler ThreatLabz have uncovered a deceptive campaign targeting the OpenClaw framework—an open-source tool designed...

Attackers Weaponized Kuse.ai for Stealth Phishing AI Phishing Vendor Email Compromise (VEC)

Attackers Weaponized Kuse.ai for Stealth Phishing

Do Son May 4, 2026

Security researchers at Trend Micro have uncovered a sophisticated phishing campaign that turns the burgeoning popularity of...

AI’s Supply Chain Nightmare: The Lightning Framework Worm and the “Silence Developer” Meme Lightning Framework Attack TEAM PCP Supply Chain

AI’s Supply Chain Nightmare: The Lightning Framework Worm and the “Silence Developer” Meme

Do Son May 2, 2026

In a high-impact escalation of software supply chain attacks, security researchers have identified a major compromise of...

PromptMink Tricked AI Agents into Planting Malware PromptMink Campaign AI Agent Deception LIMINAL PANDA UNC1549 DLL Hijacking, VDI Breakout

PromptMink Tricked AI Agents into Planting Malware

Do Son May 1, 2026

Researchers at ReversingLabs (RL) have uncovered a campaign dubbed PromptMink. Attributed to the North Korean-linked group Famous...

NVIDIA Patches High-Severity “Prompt Injection” Flaw in NemoClaw NemoClaw Prompt Injection AI Sandbox Security NVIDIA Physical AI CES 2026, Jetson T4000 robotics hardware NVIDIA AI Security, Isaac Lab RCE NVIDIA Driver RCE, CVE-2025-23309 NVIDIA Triton, AI Server Vulnerabilities CVE-2023-31029 & CVE-2023-31024 - CVE‑2024-0112

NemoClaw Prompt Injection AI Sandbox Security NVIDIA Physical AI CES 2026, Jetson T4000 robotics hardware NVIDIA AI Security, Isaac Lab RCE NVIDIA Driver RCE, CVE-2025-23309 NVIDIA Triton, AI Server Vulnerabilities CVE-2023-31029 & CVE-2023-31024 - CVE‑2024-0112

NVIDIA Patches High-Severity “Prompt Injection” Flaw in NemoClaw

Do Son April 30, 2026

NVIDIA has released a critical software update for NVIDIA NemoClaw, addressing a high-severity vulnerability that could allow...

NVIDIA FLARE Alert: Critical SDK Vulnerabilities Open Doors to Full System Takeover NVIDIA FLARE Vulnerability Federated Learning Security NVIDIA Jetson Linux Edge AI Security BioNeMo Vulnerability Insecure Deserialization NVIDIA RTX 50 Super delay NVIDIA Nsight Vulnerability Merlin Transformers4Rec NVIDIA AI Bubble $57 Billion Revenue H20 AI chip NVIDIA earnings Blackwell AI Nvidia DGX-1 Vulnerabilities CVE-2024-0143 NVIDIA Linux Gaming, VKD3D Performance

NVIDIA FLARE Vulnerability Federated Learning Security NVIDIA Jetson Linux Edge AI Security BioNeMo Vulnerability Insecure Deserialization NVIDIA RTX 50 Super delay NVIDIA Nsight Vulnerability Merlin Transformers4Rec NVIDIA AI Bubble $57 Billion Revenue H20 AI chip NVIDIA earnings Blackwell AI Nvidia DGX-1 Vulnerabilities CVE-2024-0143 NVIDIA Linux Gaming, VKD3D Performance

NVIDIA FLARE Alert: Critical SDK Vulnerabilities Open Doors to Full System Takeover

Do Son April 29, 2026

NVIDIA has issued an urgent software update for the NVIDIA FLARE SDK, addressing multiple security vulnerabilities that...