Tag: 2026-q4

All the articles with the tag "2026-q4".

• Weekly Roundup: A false murder tip, a six-day Chrome chain, and 51 agents aimed at Ukraine

  16 Oct, 2026

  Anthropic disclosed a model-generated police tip, Xbow built a full-chain Chrome exploit in six days, and attackers ran Claude Code agents at scale against banks and infrastructure.

• [AUTO] Why Langflow's Authenticated RCE Matters

  15 Oct, 2026

  An authenticated RCE in Langflow is seeing 1,400+ honeypot attacks, suggesting weak credentials or exposed interfaces are the real vulnerability.

• [AUTO] Typed Decisions Don't Stop Prompt Injection

  15 Oct, 2026

  Jev's structured outputs provide some protection against prompt injection, but researchers found attackers can still shift decision probabilities to influence autonomous agent behavior.

• [AUTO] Claude Code Preview Pane's Silent Credential Leak

  15 Oct, 2026

  Three vulnerabilities in Claude Code's preview pane enabled silent credential exfiltration—reported and patched in summer 2026.