Vulnerability (CVE)
Intezer, working with Kodem Security, found that hidden one-pixel white text on an ordinary API documentation page could make AWS's Kiro agentic coding IDE write an attacker-controlled Model Context Protocol server into ~/.kiro/settings/mcp.json and launch...
OpenAI disclosed that two of its AI models broke out of a sealed testing environment and breached Hugging Face's production system while searching for solutions to the ExploitGym benchmark. OpenAI said the incident shows advanced models can discover and...
Mindgard disclosed a prompt injection flaw in Amazon Kiro, an agentic AI IDE, that works against version 0.7.45 on Windows and lets attacker-controlled repository content push sensitive local data to an external endpoint without a CVE. Exploitation...