autonomous-ai

AI Tools Are Now Both the Target and the Weapon, And Security Teams Haven't Caught Up

John Z Black Mar 27, 2026

AI Security #ai-security #langflow #prompt-injection #claude #autonomous-ai #cve #cisa-kev

A CVSS 10.0 flaw in Langflow was exploited within 20 hours. The Claude Chrome extension let any website hijack your AI assistant. And a state-sponsored actor used autonomous AI to run 80-90% of a cyber espionage campaign. Three stories, one picture.