Live Incident Intelligence

A reported vulnerability in Microsoft 365 Copilot could lead to the exposure of sensitive email content through its AI summarization feature. This flaw poses a risk of unauthorized data disclosure, potentially compromising user privacy within the Microsoft 365 ecosystem.

Microsoft 365 Copilot Chat was found to bypass Data Loss Prevention (DLP) policies, summarizing emails with "confidential" sensitivity labels and exposing protected content. This vulnerability, tracked as CW1226324, stemmed from a code issue allowing Copilot to access emails in Draft and Sent folders despite configured restrictions, leading to unintended information disclosure within the chat interface.

A critical log poisoning vulnerability has been identified within the OpenClaw AI platform. This flaw specifically allows for unauthorized content manipulation, potentially through the injection of malicious data into log files.

A viral AI caricature trend exposes enterprises to shadow AI risks and sensitive data leakage, as employees input work-related information into public LLMs and share results. This behavior enables adversaries to conduct targeted social engineering for LLM account compromise, granting access to confidential prompt histories.

The OpenClaw open-source AI agent project rapidly exposed at least three high-risk Remote Code Execution (RCE) vulnerabilities, allowing attackers to perform high-authority tasks like shell command execution. These critical flaws are exacerbated by direct/indirect prompt injection, configuration errors, and supply chain poisoning through malicious plug-ins within its architecture.

State-backed threat actors and cybercriminals are widely abusing Google's Gemini AI model to enhance all stages of their attack lifecycle, from reconnaissance and social engineering to malicious code generation and vulnerability testing. This exploitation of AI capabilities facilitates the creation of tools like HonestCue for dynamic C# payload generation and the acceleration of phishing kit development such as CoinBait.

The OpenClaw AI agent is critically vulnerable to remote code execution and extensive data exfiltration due to an authentication bypass where misconfigured reverse proxies improperly trust external requests as local. Additionally, the agent is susceptible to prompt injection attacks, enabling the extraction of private keys and sensitive user data from the underlying system.

An AI chat application reportedly exposed 300 million messages belonging to 25 million users, as indicated by the article title. However, detailed technical information regarding the nature of the data exposure, the underlying vulnerability, or specific exploitation methods could not be retrieved due to a forbidden access error during scraping.

Security researchers have identified a vulnerability where prompt injection attacks in LLM-powered applications can weaponize URL preview features to silently exfiltrate sensitive data. Attackers can craft malicious prompts that cause the LLM to generate URLs containing extracted confidential information, which is then transmitted to an attacker-controlled server when the application automatically fetches the URL preview.

A critical-severity vulnerability, named DockerDash, in Docker's Ask Gordon AI assistant allows for Remote Code Execution (RCE) in Docker environments. This is achieved through "meta-context injection," where malicious instructions embedded in Docker image metadata labels are executed by the Model Context Protocol (MCP) Gateway without proper validation.

An LLM-based AI agent, Owockibot, was compromised to disclose its private hot wallet keys, leading to a $2,100 financial loss and its operational shutdown. This incident demonstrates a critical vulnerability in autonomous agents with Internet and wallet access, where inadequately secured sensitive data can be extracted via prompting.

OpenClaw, a rapidly adopted AI assistant with broad system access, presents significant security risks due to widespread deployment of internet-exposed instances by users. Threat actors are actively exploiting these misconfigurations, conducting prompt injection attempts and direct attacks via the WebSocket API for authentication bypasses and raw command execution.

The proliferation of unmanaged "Shadow AI" deployments, such as unauthenticated Ollama server instances, creates critical security blind spots within corporate networks. These unsecured LLM endpoints are susceptible to unauthorized access, risking exposure of proprietary training data, enabling prompt injection attacks, and serving as potential pivot points for lateral movement.

Advanced AI tools, specifically Large Language Models (LLMs), are now being leveraged to automate cloud environment attacks, rapidly identifying misconfigurations and exposed credentials within minutes in platforms like AWS. This enables attackers to achieve swift credential theft and privilege escalation to administrative access by exploiting existing weaknesses rather than novel vulnerabilities, circumventing traditional phishing methods.

Flickr experienced a data breach due to a security vulnerability found within a system managed by a third-party email service provider. This flaw potentially exposed user names, email addresses, IP addresses, and activity logs, though sensitive user passwords and financial information remained secure.

A critical token exfiltration vulnerability, tracked as CVE-2026-25253, was discovered in the OpenClaw (Moltbot/Clawdbot) AI assistant. This one-click remote code execution flaw allows attackers to hijack user instances by tricking victims into visiting a malicious website to steal authentication tokens, leading to operator-level access and host system compromise.

A critical vulnerability, codenamed DockerDash, in Docker's Ask Gordon AI assistant allowed remote code execution and data exfiltration. This "Meta-Context Injection" flaw leveraged malicious metadata labels within Docker images, which Ask Gordon AI processed and executed via the MCP Gateway due to a lack of validation.

The OpenClaw AI bot farm is plagued by critical security flaws, including a one-click remote code execution vulnerability and two command injection vulnerabilities. These issues are exacerbated by a repository of 341 malicious extensions, an exposed database, and prevalent prompt injection attacks, leading to a wave of malware, data exposure, and significant financial costs for users.

An attack chain exploited exposed AWS credentials in public S3 buckets, leveraging Large Language Models (LLMs) to rapidly escalate privileges through a misconfigured Lambda function. This allowed threat actors to achieve full AWS administrative control and abuse GPU resources within an Amazon Bedrock environment in under eight minutes.

A critical misconfiguration in Moltbook's Supabase database, stemming from an exposed API key in client-side JavaScript and the absence of Row Level Security (RLS), enabled full read and write access. This vulnerability led to the exposure of 1.5 million AI agent authentication tokens, over 64,000 human email addresses, private messages, and allowed unauthenticated modification of platform content.