Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...

A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...

Familiar bugs in a popular open source framework for AI chatbots could give attackers dangerous powers in the cloud.

Researchers with Cyata and BlueRock uncovered vulnerabilities in MCP servers from Anthropic and Microsoft, feeding ongoing security worries about MCP and other agentic AI tools and their dual natures ...

Update Chainlit to the latest version ASAP Two "easy-to-exploit" vulnerabilities in the popular open-source AI framework ...

A malicious extension impersonating an ad blocker forces repeated browser crashes before pushing victims to run ...

Vulnerabilities in Chainlit could be exploited without user interaction to exfiltrate environment variables, credentials, ...