Do Son Spring AI discloses two critical injection flaws (CVE-2026-40967 & 40978) in Vector Store implementations. Upgrade to v1.0.6 or v1.1.5 now to prevent data leaks.
RAG
Stop flattening CSVs! The OpenAI Responses API now natively supports Word, Excel, and PowerPoint files for seamless, structure-aware AI analysis.
CVE-2025-67732 unmasks a high-severity flaw in Dify that exposes plaintext API keys to frontend users. Upgrade to v1.11.0 to secure your AI quotas.
Meta struck paid, multi-year licensing deals with CNN, Le Monde, and others to feed licensed news to Meta AI, improving RAG and requiring the chatbot to link sources.
At re:Invent 2025, AWS announced a sweeping set of enhancements to its flagship storage service, Amazon S3,...
"EchoLeak," a new AI zero-click vulnerability, allowed data exfiltration from Microsoft 365 Copilot via sophisticated prompt injection. Microsoft has patched the flaw.
RAGFlow is vulnerable to account takeover. This article details the brute-force exploit and the urgent security risk (CVE-2025-48187, No Patch)