ai-security

Google Swallowed Wiz for $32 Billion. OpenAI Bought an LLM Red-Team Firm. Same Day.

John Z Black Mar 12, 2026

Industry #google #wiz #openai #promptfoo #mergers-acquisitions #cloud-security #ai-security #cspm #enterprise

Google closed its $32B Wiz acquisition while OpenAI snapped up Promptfoo, an AI security startup. Two deals, one message: the biggest platforms are making security a built-in feature, not something they outsource.

Your AI Automation Platform Is a Backdoor: n8n RCE and a 4-Minute AI Browser Phishing Attack

John Z Black Mar 12, 2026

Vulnerabilities #n8n #ai-security #automation #prompt-injection #cve-2025-68613 #cisa #agentic-ai #perplexity

CISA flagged an actively-exploited RCE in n8n with 24,700 exposed instances. Researchers turned Perplexity's AI browser into a phishing tool in under four minutes. When software acts for you, it can be turned against you.

AI Agents Have an Infrastructure Problem — and Researchers Just Proved It

John Z Black Mar 11, 2026

AI Security #ai-security #mcp #red-team #llm #privacy #ai-agents

MCP protocol flaws, a 38-researcher red team exercise, and LLM-powered deanonymization all landed the same week. AI agent security isn't a future problem. It's a right now problem.

AI Found Thousands of Software Bugs This Month. Then It Wrote Exploits.

John Z Black Mar 10, 2026

AI & Security #ai-security #vulnerability-research #firefox #openssh #chromium #anthropic #openai #exploit

Anthropic's Claude found 22 Firefox zero-days in two weeks and wrote working exploits for two of them. OpenAI's Codex flagged over 10,000 high-severity bugs across major open-source projects. AI-powered vulnerability research isn't theoretical anymore.

Your AI Assistant Is an Attack Surface Now

John Z Black Mar 10, 2026

AI & Security #ai-security #openclaw #supply-chain #prompt-injection #nation-state #attack-surface

Exposed admin panels leaking API keys, prompt injection as a supply chain weapon, fake installer packages on npm, and nation-states using AI to hack at scale. AI agents just became everyone's security problem.