Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork

PromptArmor, a security firm specializing in the discovery of AI vulnerabilities, reported on Wednesday that Cowork can be ...
SecurityWeek

SAP’s January 2026 Security Updates Patch Critical Vulnerabilities

The first round of SAP patches for 2026 resolves 19 vulnerabilities, including critical SQL injection, RCE, and code ...
IEEE

ModSec-AdvLearn: Countering Adversarial SQL Injections With Robust Machine Learning

Abstract: Many Web Application Firewalls (WAFs) leverage the OWASP Core Rule Set (CRS) to block incoming malicious requests. The CRS consists of different sets of rules designed by domain experts to ...

The 11 runtime attacks breaking AI security — and how CISOs are stopping them

CrowdStrike's 2025 data shows attackers breach AI systems in 51 seconds. Field CISOs reveal how inference security platforms ...

ChatGPT falls to new data-pilfering attack as a vicious cycle in AI continues

There’s a well-worn pattern in the development of AI chatbots. Researchers discover a vulnerability and exploit it to do ...
Unite.AI

The Secretless Imperative: Why Traditional Security Models Break When AI Agents Touch Code

In April 2023, Samsung discovered its engineers had leaked sensitive information to ChatGPT. But that was accidental. Now imagine if those code repositories had contained deliberately planted ...
winbuzzer.com

OpenAI Deploys Automated ‘Attacker’ to Harden Atlas Browser, Admits Prompt Injection Is ‘Unsolved’

Facing sustained scrutiny over vulnerabilities in its ChatGPT Atlas browser, OpenAI presented a new automated security testing system on Monday. Yet the technical upgrade arrives with a sobering ...
IEEE

SQL Injection on Web Image in Docker Integrated with John the Ripper

Abstract: SQL Injection is a serious flaw in web applications that allows hackers to run malicious SQL queries by taking advantage of poorly cleaned input fields. This makes it possible for sensitive ...