Compromised MCP-based agents, AI-generated bug reports, and pre-launch VM escapes are turning trust and verification into critical bottlenecks. Open-source security alliances are also being tested by AI-generated noise.
Nvidia defended the Open Secure AI Alliance, now run by the Linux Foundation and launched days after the Hugging Face incident. Mark Weatherford addressed doubts about member commitment and explained OpenAI's absence: hundreds of companies are still ...
Google and four other organizations have acknowledged vulnerabilities in which a compromised AI agent spreads malicious instructions to other internal agents by exploiting trust gaps in the Model Context Protocol. The technique is a form of prompt in...
In the weeks before Muse's launch, Meta found security flaws, including at least one that could let an external user access sensitive internal databases. The issue, linked to a KVM escape, reached Mark Zuckerberg and forced teams to rush hotfixes ove...
Google's decision to pause its open source bug bounty program highlights a structural problem: LLM-generated reports increase noise and verification costs, eroding trust in the process. Human researchers lose visibility, and maintainers receive fewer...
