Google Antigravity IDE RCE: Prompt Injection Exploit
Google’s Antigravity IDE, the company’s agentic development platform launched in November 2025, suffers from two critical vulnerabilities enabling remote code execution and persistent ...
Meta Employee Monitoring: AI Training via Keystroke Logging
Reuters exclusive April 21, 2026: Meta deploys surveillance software capturing employee keystrokes, mouse movements, and ...
Vercel Breach: OAuth Supply Chain Attack via AI Tool
On April 19, 2026, Vercel disclosed a security breach that started when a Context.ai employee ...
Atlassian AI Training Data Default: Opt-Out by Tier (2026)
Atlassian announced on April 18-19 that it will enable default AI training data collection across ...
Prompt Injection Flaw Exposes GitHub Credentials in AI Agents
Prompt injection flaw steals credentials from Claude, Gemini, and Copilot via malicious PRs. Vendors patched ...
Notion Email Leak: 4-Year Bug Exposes All Editors
Notion leaks all editor emails on public pages via unauthenticated API. Reported 2022, unfixed 2026. Four-year delay exposes Bug Bounty Program failures and ...
Vercel Security Breach April 2026: Environment Variables
Vercel disclosed a security breach on April 19, 2026. Sensitive env vars were protected, but ...
OpenClaw Hits 138 CVEs in 63 Days: Security Crisis Exposed
OpenClaw published 13 critical security fixes April 9-10. With 138 CVEs in 63 days, 135K ...
XChat Launches Today: Musk’s Privacy Promise Has a Backdoor Problem
Elon Musk launched XChat today with encryption promises, but security researchers warn X controls the ...
GitHub Copilot Trains on Your Data: Opt Out Before April 24
GitHub Copilot will start training AI models on your code interactions in 8 days unless ...