Tag
A user warns that on Runway, an unauthorized team invite can instantly charge a credit card without any security notifications, leading to financial loss and highlighting a lack of support response.
CZ Binance warns of phishing attempts and discloses that SafePal is a YZiLabs portfolio company, while SafePal has fixed a security flaw in their order-tracking plug-in that exposed some customer information.
A community member discovered that a web-session AI agent could read files outside its intended workspace, highlighting a common agentic security flaw to watch out for.
Amazon alerted the White House to a security flaw in Anthropic's Claude Fable 5 model, causing its export suspension. The flaw allows the model to identify exploitable security vulnerabilities, contradicting Anthropic's safety claims.
A critical privacy flaw in DeepSeek allows users to access each other's conversations by entering a specific character, breaking session isolation and exposing sensitive data.
LayerX researchers discovered a critical vulnerability in Anthropic's Claude Chrome extension, dubbed 'ClaudeBleed', which allows any other extension to hijack its functionality and perform unauthorized actions like accessing private data or sending emails.