/
initial_access_vector:prompt_injection × victim_sectors:technology × criticity:medium × limpar

Resultados

2 casos · pág. 1/1

f5.com · medium

F5 Labs November 2025 AI Security Insights: Fallacy Failure jailbreak added to CASI, agentic browser and Claude code interpreter risks

F5 Labs published its November 2025 AI Security Insights, drawn from the Comprehensive AI Security Index (CASI) and Agentic Resistance Scoring (ARS). Anthropic models took the whole top tier of the CASI leaderboard (Claude Haiku 4.5 at 95.89, Claude Sonnet 4.5 at 95.86, Claude Sonnet 4 at 95.33), while the GPT-5 family slipped, with GPT-5…

technology
hacktron.ai · medium

Cluely Electron app flaw: missing will-navigate guard and open IPC bridge enable silent screen and mic capture, with a path to RCE

Researchers at Hacktron disclosed a vulnerability chain in Cluely, an Electron-based AI assistant that reads the user's screen and microphone. They found it in July 2025 and published in February 2026. The main window had no will-navigate handler, so a link in the AI's markdown response could navigate the whole app to an attacker-controll…

technology