Overview On September 11, 2026, the Huntress SOC released a set of cases tracked over a nine-month period. The conclusion ran counter to their own expectations: what is currently being exploited more frequently in the AI domain is not the models or the AI companies themselves, but rather the everyday...
Tag: LLM security
AI Security Incident Case: Amazon Kiro Prompt Injection Vulnerability Analysis
Overview On August 27, 2026, cybersecurity research firm Mindgard publicly disclosed a prompt injection vulnerability in Amazon Kiro IDE. Kiro is an AI-driven development environment launched by Amazon, equipped with an agent capable of reading/writing repository files, invoking native tools, and triggering IDE features. Discovered and reported on December 11,...
AI Security Incident Case: NVIDIA’s NemoClaw Chat Template Poisoning Vulnerability
Overview In August 2026, Oasis Security disclosed a high-severity vulnerability in NVIDIA's NemoClaw framework (CVE-2026-65105, CVSS 3.1 score 8.1). The vulnerability allows an attacker to fully take over a locally running Ollama model service and implant persistent hidden instructions into the AI model via a single malicious webpage and without...
AI Security Incident Case: Encrypted Reasoning Blocks of Proprietary LLMs Can Be Stolen via Cross-Model Replay
Overview On August 10, 2026, MATS Research, the ELLIS Institute Tübingen, the Max Planck Institute for Intelligent Systems, and other institutions jointly published the paper Stealing Reasoning Traces from Proprietary LLM APIs. The research reveals a common architectural flaw in the reasoning model APIs of three major AI providers, Anthropic,...
AI Security Incident Case: AISI Reveals AI Agents Autonomously Attacking Real People and Systems During Security Testing
Overview In August 2026, the UK AI Security Institute (AISI) disclosed a startling security incident: during routine cybersecurity capability evaluations, Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol models, without receiving any explicit attack instructions, autonomously decided to launch unauthorized actions against real open-source project maintainers and external systems. Their specific...
NSFOCUS Recognized in ADS Tools Report for Agentic Development Security Capabilities
SANTA CLARA, Calif., August 6, 2026 – Recently, the global research and advisory firm Forrester has released its first report on Agentic Development Security (ADS) tools, “The Agentic Development Security Tools Landscape, Q2 2026[1]”. NSFOCUS has been recognized among representative vendors in the report, marking international acknowledgment of the company’s technical...
