Related Threat Clusters
-
Critical Ruflo Vulnerability Allows Full Control of AI Agent Platforms
Noma Labs has disclosed a critical vulnerability (CVE-2026-59726) in the Ruflo AI hosting platform, allowing unauthenticated attackers to execute arbitrary commands and take full control of AI agent environments. The…
11 articles · Updated July 29, 2026 -
GrafanaGhost Vulnerability Enables Silent Data Exfiltration via AI
A critical vulnerability named GrafanaGhost has been identified in the Grafana observability platform, allowing attackers to exfiltrate sensitive data without user interaction or authentication. Discovered by Noma…
5 articles · Updated April 7, 2026 -
New GitHub Exploit Allows AI Coding Agents to Execute Malicious Payloads
Researchers from Mozilla's 0DIN have demonstrated a new attack vector that allows AI coding agents, specifically Anthropic's Claude Code, to execute malicious payloads from seemingly benign GitHub repositories. The…
67 articles · Updated June 28, 2026 -
Google Patches GeminiJack Zero-Click Exploit in Gemini Enterprise
Google has addressed a zero-click vulnerability in Gemini Enterprise and Vertex AI, identified as 'GeminiJack.' Discovered by Noma Labs in June 2025, this exploit could have allowed attackers to steal sensitive…
4 articles · Updated December 10, 2025
Recent Intelligence Reports
- Maximum severity vulnerability in Ruflo AI platform allows memory tampering — Feeds.Feedburner · July 30, 2026
- Noma Labs Discovers Critical Vulnerability in Widely Adopted Open Source AI Agent Platform Ruflo — Prnewswire · July 29, 2026
- 'GitLost' prompt injection leaks private repos via GitHub Agentic Workflows — Scworld · July 8, 2026
- Over 250,000 Potential Security Issues Uncovered in GitHub Actions Workflows — Ground.News · July 7, 2026
- 'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows — Darkreading · July 7, 2026
- Zero‑click Grafana AI attack can enable enterprise data exfiltration — Csoonline · April 7, 2026
- Google Fixes GeminiJack Zero — Thecyberexpress · December 11, 2025