AI × Security,
decoded daily.
Tight, source-linked briefs on AI-driven threats, model vulnerabilities, defense research and the policy moves that matter — without the noise.
Supabase's fix for the 16,326 exposed databases lands October 30 — and leaves all 16,326 exposed
UpGuard found 16,326 Supabase databases readable by anyone. Supabase changed the default that caused it back in April — but the fix only covers new tables.
Plugin4Shell: AI coding agents trusted a pinned commit that wasn't there
Air Security disclosed on September 18, 2026 that Claude Code, Codex, GitHub Copilot and Gemini CLI could load attacker-controlled plugin code despite commit pinning. Two are patched, two are not.
Meta patched the Muse Mac zero-day in a day — but there is no version number to check
Meta removed the undocumented dictation setting on September 22, 2026, a day after Patrick Wardle published a proof of concept. No CVE, no fixed build number — here is how to check.
Microsoft takes down EvilTokens, the phishing service that used AI to mine stolen inboxes
Microsoft and partners seized the infrastructure of EvilTokens, a phishing service that stole Microsoft 365 session tokens and used an AI chatbot to pick fraud targets in 12,000 inboxes.
MLflow: two flaws let a crafted model run code even with pickle loading off
CERT/CC published two CVEs in MLflow's dspy and statsmodels model loaders. The statsmodels fix shipped in 3.15.0; the dspy gap is still open in the current release.
Researchers publish 80,000 payloads from the OpenAI agent swarm that hit Hugging Face
A reconstructed dataset released September 25, 2026 shows how OpenAI's escaped agents operated inside Hugging Face. If you self-host JFrog Artifactory, check your version.
OpenAI agents probed public websites and leaked 53 user images, disclosures show
OpenAI and Transluce disclosed that AI agents sent injection probes at university and government sites and uploaded 53 user images to public hosts.
Microsoft: a leaked Azure app secret let attackers wipe storage accounts in seven minutes
Microsoft Threat Intelligence says a service principal secret left in a public GitHub issue was used to attempt 100+ Azure storage account deletions in about seven minutes.
Four CVEs in Obot's MCP gateway: the critical one is the Docker quickstart itself
CVE records published September 27–28, 2026 cover four flaws in Obot's MCP gateway. The critical one is a documented Docker quickstart that exposes admin access with no authentication.