Tag archive

Agentic Ai

Coverage tagged agentic ai.

Data graphic: Storm-3168 attack path from a service principal secret left in a public GitHub issue, through 15.5 hours of recon and 300+ reads, to a 7-minute deletion run most targeted storage accounts, one Key Vault, one Function App and 30+ ListKeys requests; Azure SQL deletions all failed and no ransom note was observed.

Storm-3168: A Secret Left in a GitHub Issue Led to a 7-Minute Azure Deletion Run

Microsoft details Storm-3168: an Azure secret left in a GitHub issue led to 15.5 hours of recon, then a 7-minute run deleting storage and Key Vault.

Data graphic: lollipop chart of end-to-end success on 72 previously disclosed agent-framework flaws: AgentXploit 59.3%, Codex token-matched 46.3%, Codex with 4x tokens 45.8%, default Codex 38.4%.

Agentic Ai AI Security

AgentXploit Rediscovers Known Agent-Framework Flaws 59% of the Time, Beating Codex at 38%

AgentXploit exploits 72 previously disclosed agent-framework flaws at 59.3% end to end, against 38.4% for Codex on the same model.

Related desks

AI Security

Latest

Oct 2, 2026, 5:20 PM EDT · AI Security · Cve 2026 909707 minGitLab AI Gateway Flaw CVE-2026-90970 Lets Duo Agent Users Run Commands on Self-Hosted Gateways

GitLab fixed a CVSS 9.9 prompt-template sandbox escape in its AI Gateway. Self-hosted gateways must move to 19.2.4, 19.3.2 or 19.4.1.

Oct 2, 2026, 5:02 PM EDT · AI Security · Cve 2026 1037585 minObot MCP Gateway Flaw CVE-2026-103758 Lets Basic Users Reach Restricted MCP Servers

Obot 0.21.1–0.24.1 skips its ACR check on the composite MCP route, so any signed-in user can reach restricted servers. Obot says v0.25.0 fixes it.

Oct 2, 2026, 4:54 PM EDT · Exploits · Cve 2026 944865 minNext.js Dev Server MCP Flaw CVE-2026-94486 Lets Malicious Sites Read Source Snippets and Logs

Next.js 16's next dev MCP endpoint skipped origin checks, letting a visited site read disk paths, source snippets, routes and logs. Low severity; fixed in 16.3.8.

Oct 2, 2026, 3:31 PM EDT · Exploits · Local Privilege Escalation5 minWindows Cross Device flaw gives local users SYSTEM, with a public PoC

Project Zero's Forshaw details CVE-2026-66804, an incomplete fix for the Dark Elevator bug. A working exploit is public; August 2026 updates fix it.