Claude Helped a Hacker Find a Massive Ticketing Flaw. Nearly Every Major U.S. Music Festival Was at Risk.

A cybersecurity researcher revealed this week that Anthropic's Claude artificial intelligence assisted him in discovering a ...
Hoodline

AI Chatbot Helped Hacker Find Backdoor To Free VIP Passes At Major Festivals

A security researcher armed with Anthropic's Claude says he found a bug in the ticketing system that sells passes to some of ...
Gadget Review on MSN

A researcher used Claude to unlock ticketing systems for nearly every major US music festival

AI-assisted SQL injection exposed Front Gate Tickets, putting Lollapalooza, Bonnaroo, and millions of customer records at ...
Cybernews

Hacker says Claude AI helped to get VIP tickets to America’s most wanted festivals for free

Claude AI helped a security researcher uncover a flaw in Front Gate Tickets that could have allowed unlimited VIP tickets for ...

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your security tools look.
CSOonline

Frontier AI models offer sneak peak of seismic cyber shifts ahead

CISOs need to prepare for a vulnerability discovery onslaught, even as attackers will still have work to do to operationalize flaws that abused and malicious AI models turn up. The advent of Claude ...
Hindustan Times

Coempt gave CBSE cyber certificates that were expired, tied to other client

The cybersecurity certificates the Central Board of Secondary Education accepted as proof that its controversial on-screen marking (OSM) platform was safe to process close to 10 million student answer ...
Security Boulevard

CVE-2026-9082: Critical Drupal SQL Injection Vulnerability Affects PostgreSQL Deployments

A highly critical SQL injection vulnerability in Drupal core has raised concerns across organizations running PostgreSQL-backed Drupal environments. Tracked as CVE-2026-9082, the vulnerability affects ...
techtimes

Ghost CMS SQL Injection Hits 700 Sites: Harvard, DuckDuckGo Serve Fake Cloudflare Malware

An unpatched SQL injection vulnerability in the Ghost content management system has been weaponized in an active, large-scale cyberattack that has compromised more than 700 websites worldwide — ...
SecurityWeek

Drupal Vulnerability in Hacker Crosshairs Shortly After Disclosure

Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites. Drupal is warning users that it’s already seeing ...
Dark Reading

AI Finds 38 Security Flaws in Electronic Health Record Platform

An AI-powered analysis of the OpenEMR codebase uncovered 38 previously undisclosed vulnerabilities in the open source electronic health record (EHR) platform used by more than 100,000 healthcare ...
Business Wire

Semgrep Launches Multimodal, Combining AI Reasoning With Rule-Based Analysis for Detection, Triage, and Remediation

SAN FRANCISCO--(BUSINESS WIRE)--Semgrep, a leading code security company, today announced Semgrep Multimodal, a system that combines AI reasoning with rule-based analysis for detection, triage, and ...