RAG

Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores

• Vulnerability Report

Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores

Do Son April 28, 2026 0

Two significant vulnerabilities have been disclosed in Spring AI that could allow attackers to manipulate database queries...

Read More Read more about Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores

OpenAI Responses API Now Ingests Excel, Word, and PowerPoint Directly

• Technology

OpenAI Responses API Now Ingests Excel, Word, and PowerPoint Directly

Do Son February 25, 2026 0

Following the global debut of the GPT-5.3-Codex programming model, OpenAI has concurrently expanded the repertoire of supported...

Read More Read more about OpenAI Responses API Now Ingests Excel, Word, and PowerPoint Directly

CVE-2025-67732: Dify Patch Fixes High-Severity Plaintext API Key Exposure

• Vulnerability Report

CVE-2025-67732: Dify Patch Fixes High-Severity Plaintext API Key Exposure

Do Son January 7, 2026 0

Dify, the popular open-source platform used by developers to build Large Language Model (LLM) applications and RAG...

Read More Read more about CVE-2025-67732: Dify Patch Fixes High-Severity Plaintext API Key Exposure

Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI

• Technology

Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI

Do Son December 8, 2025 0

To keep its AI chatbot from remaining “out of the loop” on current affairs, Meta appears to...

Read More Read more about Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI

AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data

• Technology

AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data

Do Son December 4, 2025 0

At re:Invent 2025, AWS announced a sweeping set of enhancements to its flagship storage service, Amazon S3,...

Read More Read more about AWS S3 Unleashed: Native Vector Storage & 50 TB Max Object Size for AI/Big Data

EchoLeak: First AI Zero-Click Vulnerability Leaks Data from Microsoft 365 Copilot

• Vulnerability Report

EchoLeak: First AI Zero-Click Vulnerability Leaks Data from Microsoft 365 Copilot

Do Son June 13, 2025 0

In the age of artificial intelligence, a multitude of AI agents has emerged, yet their rapid proliferation...

Read More Read more about EchoLeak: First AI Zero-Click Vulnerability Leaks Data from Microsoft 365 Copilot

High-Risk RAGFlow Flaw: Account Takeover Possible (No Patch, PoC Available)

• Vulnerability

High-Risk RAGFlow Flaw: Account Takeover Possible (No Patch, PoC Available)

Do Son May 20, 2025 0

RAGFlow, the open-source Retrieval-Augmented Generation (RAG) platform developed by Infiniflow, has been found vulnerable to a serious...

Read More Read more about High-Risk RAGFlow Flaw: Account Takeover Possible (No Patch, PoC Available)