Researchers hid a prompt injection inside a PNG, and AI fell for it

A seemingly harmless PNG image could fool AI coding assistants into exposing sensitive data, according to new security ...

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
note

A Must-Read for PHP Developers! 5 SQL Vulnerabilities You Absolutely Need to Know and How to Write Secure Code

In web application development, database integration is an unavoidable path. However, in your enthusiasm to implement features, are you putting security measures on the back burner? We frequently hear ...

Read this before you vibe-code another app

Your dream vibe-coded app might be a security nightmare.

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.
IEEE

DIAVA: A Traffic-Based Framework for Detection of SQL Injection Attacks and Vulnerability Analysis of Leaked Data

Abstract: SQL injection attack (SQLIA) is among the most common security threats to web-based services that are deployed on cloud. By exploiting web software vulnerabilities, SQL injection attackers ...
techtimes

AI Agent Security Hits Its Reckoning: Prompt Injection May Be a Permanent Flaw, Not a Patchable Bug

Prompt injection is the technique of smuggling instructions to an AI agent through content the agent reads — a document, a calendar invite, a web page, a code comment — so that hostile text carries ...