ChatGPT and Codex flaws patched Feb 2026 exposed DNS exfiltration and GitHub tokens, raising enterprise AI security risks.

A security vulnerability in ChatGPT executed with a single malicious prompt could be exploited to covertly exfiltrate ...

AI copilots are incredibly intelligent and useful — but they can also be naive, gullible, and even dumb at times. A new one-click attack flow discovered by Varonis Threat Labs researchers underscores ...

A legitimate Google ad could lead to data exfiltration through a chain of Claude flaws.

Command injection in Codex and a hidden outbound channel in ChatGPT exposed risks of credential theft and covert data ...

Antigravity IDE allows agents to execute commands automatically under default settings Prompt injection attacks can trigger unwanted code execution within the IDE Data exfiltration occurs through ...

The Check Point security bods explain that, while OpenAI prevents ChatGPT from communicating with the internet without ...

BeyondTrust shows how AWS Bedrock AgentCore’s ‘isolated’ environment can be tricked into data exfiltration and command execution via DNS. AWS’ promise of “complete isolation” for agentic AI workflows ...

Unlike traditional infostealers that run once and exit, Venom Stealer remains active and continuously monitors Chrome's login ...

HYCU, Inc., a leader for modern data protection for on-prem, cloud, and SaaS and one of the fastest growing companies in the industry, today announced a major expansion of its R-Shield cyber ...

The stakes have never been higher for accounting firms. As custodians of sensitive financial data, tax returns, payroll records and audit reports, these businesses are prime targets for a rapidly ...