security-flaw

A community member discovered that a web-session AI agent could read files outside its intended workspace, highlighting a common agentic security flaw to watch out for.

Amazon alerted the White House to a security flaw in Anthropic's Claude Fable 5 model, causing its export suspension. The flaw allows the model to identify exploitable security vulnerabilities, contradicting Anthropic's safety claims.

A critical privacy flaw in DeepSeek allows users to access each other's conversations by entering a specific character, breaking session isolation and exposing sensitive data.

LayerX researchers discovered a critical vulnerability in Anthropic's Claude Chrome extension, dubbed 'ClaudeBleed', which allows any other extension to hijack its functionality and perform unauthorized actions like accessing private data or sending emails.