Latest

Windows malware lets four AI models vote on its next move

Cisco Talos says CLOSEDQUORUM delegates post-compromise decisions to a quorum of large language models, though it has not seen the malware deployed in the wild.

23 Sept 2026

A small green machine sits in a living room while shadowy hands manipulate its internal circuits through a hidden backdoor, forcing it to send secret messages to locked rooms behind its own walls.

Vulnerabilities

Home Assistant Green flaw lets local attackers force internal requests

A GitHub advisory published on 22 September 2026 says the smart-home hub's printer discovery feature can be abused to reach internal services.

22 Sept 2026

A transparent glass tower crumbles as invisible hands pull blueprints from its broken windows while poisoned scrolls unfurl, spreading corrupted symbols across the floor below.

Vulnerabilities

Two flaws disclosed in LightRAG's API server and web interface

Advisories published on 22 September 2026 say the retrieval tool leaks infrastructure details in error messages and runs attacker HTML from ingested documents.

22 Sept 2026

A vault door swings open as a frustrated mechanic, unable to restart a failing machine, watches blueprints with hidden codes scatter across the factory floor in the wind.

Vulnerabilities

OpenBao Agent leaked secrets to stdout in error conditions

An advisory published on 22 September 2026 says the secrets manager's exec mode printed templated credentials when retries ran out; a fix ships in v2.6.0.

22 Sept 2026

A factory worker passes unmarked packages directly from the loading dock through security gates into restricted rooms, bypassing inspection checkpoints.

Vulnerabilities

Atlassian MCP server still open to SSRF after partial fix

A GitHub advisory published on 22 September 2026 says mcp-atlassian passes URLs from HTTP headers straight to its API clients without checks.

22 Sept 2026

A fortress wall crumbles in three places simultaneously: a thief slips through a crack reading scrolls, another dumps contraband through an opening, a third sneaks past guards into the inner chamber.

Vulnerabilities

Three critical flaws disclosed in MCP Atlassian server

Advisories published on 22 September 2026 describe arbitrary file reads, unrestricted uploads and an SSRF bypass in the popular mcp-atlassian connector, with no patch at disclosure.

22 Sept 2026

A fortress with six cracked walls collapses as thieves slip through shadows, stealing glowing documents and keys while poison flows unchecked into the core.

Vulnerabilities

Six critical flaws disclosed in mcp-atlassian MCP server

Advisories published on 22 September 2026 describe file theft, credential exposure and a path traversal bypass that can lead to remote code execution.

22 Sept 2026

A puppet master's strings tangle through a wooden agent's joints, allowing hidden hands to puppet its limbs and operate machinery behind the developer's back.

Vulnerabilities

Command injection flaw fixed in Moonshot AI's Kimi Code agent

CVE-2026-95660 let a malicious project directory run commands on a developer's machine through the coding agent's MCP configuration loader.

22 Sept 2026

Incidents

ClosedQuorum malware asks AI models what to do next

A newly reported Windows malware family queries Gemini, DeepSeek, Qwen and Mistral to pick its own actions after breaking into a machine, researchers say.

22 Sept 2026

Incidents

Malicious npm package posed as a Twilio bug-bounty tool

Researchers say tw-pkgprobe-7731 sat on the npm registry from mid-August 2026 and tried to harvest sensitive data from developers who installed it.

22 Sept 2026

Vulnerabilities

Critical Bifrost AI gateway flaw allows commands without login

A single HTTP request can run arbitrary commands on servers running the open-source LLM router, according to a report published on 22 September 2026.

22 Sept 2026

A single forged badge labeled "127.0.0.1" grants strangers passage through a locked door that should require a unique key, leaving the vault unguarded.

Vulnerabilities

One spoofed header unlocks 9Router's LLM API to strangers

A GitHub advisory says 9Router treats any request carrying an X-9r-Real-Ip header of 127.0.0.1 as local, skipping the API-key check entirely.

22 Sept 2026

Incidents

Z.ai apologises after ZCode uploaded user workspaces to the cloud

The Chinese AI firm removed the feature, commissioned two external audits and open-sourced its coding tool after developers found it shipping entire projects to Alibaba Cloud.

22 Sept 2026

Incidents

Microsoft and Met Police shut down EvilTokens phishing service

The subscription kit used an AI chatbot to read stolen inboxes and pick fraud targets, and had compromised 12,000 accounts before last week's takedown.

22 Sept 2026

A fortress wall with three identical breach points stands exposed as guards repeatedly fail to verify the true identity of approaching messengers before granting passage to forbidden inner chambers.

Vulnerabilities

CKAN MCP server SSRF guard bypassed for the third time

An advisory published on 22 September 2026 says the CKAN MCP server's URL check never resolves DNS, letting callers reach loopback and cloud metadata endpoints.

22 Sept 2026

A mechanical hand reaches through a locked vault door, depositing papers into forbidden chambers throughout a sprawling archive while guards sleep.

Vulnerabilities

NotebookLM MCP server patched over arbitrary file write flaw

A path traversal bug in the vault batch tool let callers, or a prompt-injected model, write files anywhere the server process could reach.

22 Sept 2026

Explainers

AI agents shift the question security teams ask about access

An analysis published on 22 September 2026 argues that autonomous agents make discoverable paths, not excess permissions, the harder problem for defenders.

22 Sept 2026

Vulnerabilities

Few AI-found bugs from Anthropic's Glasswing get exploited

VulnCheck researcher says just one of 225 CVEs credited to Anthropic or its Project Glasswing partners has been attacked in the wild.

21 Sept 2026

A mechanical spider spins an endless web of golden thread across a factory floor, the pile growing faster than workers can contain it, threatening to collapse the warehouse.

Explainers

Runaway agent spending flagged as an enterprise risk

Dark Reading reports that unbounded consumption by AI agents can drive unexpectedly large bills, an issue OWASP ranks sixth in its LLM Top 10.

21 Sept 2026

Vulnerabilities

Researcher shows Meta Muse flaw can hijack dictation on macOS

A proof-of-concept published on 21 September 2026 shows local malware can point the AI assistant's dictation traffic at an attacker's server.

21 Sept 2026