OpenAI has released Lockdown Mode which is a potent and latest security capability for AI models. The target is to ramp down the possibility of data exfiltration by malicious prompt injection attacks. The feature is currently on offer to personal accounts, self-serve ChatGPT Business clients as well as managed enterprise spaces. Prompt injection attacks involve […]
Last month, I discovered something that stopped me cold during a routine penetration test. A developer had spun up an Ollama server to experiment with local AI models. Nothing unusual about that, except the server was publicly accessible with no authentication. The models it hosted had been trained on internal company data. This scenario plays […]
AI agents are moving fast from experimentation to everyday use. Tools like Moltbot promise automation, local control, and flexibility. But recent security findings show how quickly that promise can turn into risk when guardrails are missing. Researchers have uncovered exposed Moltbot instances, leaked credentials, and a malicious VS Code extension masquerading as an official AI […]