Tagged "security-vulnerabilities"
7 articles tagged security-vulnerabilities, 13 February 2026 to 28 May 2026. Newest first.
-
MCP Security Flaws Are Turning AI Infrastructure Into a Supply-Chain Risk
Critical security vulnerabilities in Model Context Protocol (MCP) implementations are creating supply-chain risks for AI infrastructure, raising concerns about the security posture of agent-based systems.
-
Auditing Apple's DifferentialPrivacy.framework: Bugs, Misconfig, Practical Risks
Security researchers audit Apple's DifferentialPrivacy framework and reveal implementation bugs and misconfigurations that impact privacy guarantees for on-device machine learning applications.
-
Ansede-static: Offline SAST Tool Demonstrates Value of Local AI Tools
New open-source static analysis tool achieving 98.8% CVE recall while running entirely offline. Exemplifies how local AI models can replace cloud-based security analysis with privacy-preserving alternatives.
-
Thinking Outside the Box: New Attack Surfaces in Sandboxed AI Agents
Security research identifies novel attack vectors in sandboxed AI agent deployments, highlighting critical considerations for self-hosted and edge inference systems. Understanding these vulnerabilities is essential for practitioners securing local LLM implementations.
-
Exposed LLM Infrastructure: How Attackers Find and Exploit Misconfigured AI Deployments
Security Boulevard reports on vulnerabilities in local and self-hosted LLM deployments, detailing how misconfigurations create attack surfaces. Essential reading for securing on-device AI infrastructure against common threats.
-
On-Device Apple Intelligence Vulnerable to Prompt Injection Attacks
Security researchers have discovered that Apple's on-device AI system is susceptible to prompt injection techniques, raising important questions about the security model of local LLM deployments.
-
175,000 Publicly Exposed Ollama AI Servers Discovered Across 130 Countries
Security researchers found over 175,000 Ollama installations with no authentication exposed to the internet, creating significant security risks for local LLM deployments worldwide.