Newsletter
Get the morning brief in your inbox: one short email a day on the AI attacks, flaws and research worth knowing about. I'll send a confirmation note first. Unsubscribe anytime.
Get the morning brief in your inbox: one short email a day on the AI attacks, flaws and research worth knowing about. Unsubscribe anytime.
Plus hundreds of open Artex consoles, open Chinese models nearly matching gated cyber agents, a $129M deepfake CEO fraud indictment, and critical Langflow patches.
Update: AgentScope through 2.0.11 lets anyone who can reach its API register a stdio MCP server whose command field is passed straight to subprocess.Popen, so API access means code execution on the host (CVE-2026-123022). A public proof of concept is out and there's no patch yet. What to do: bind AgentScope to localhost or block POST /workspace/mcp at your proxy until a fix ships, and check logs for MCP registrations you didn't make.
AI Security Guru