November 9, 2025
Side-Channel on Streaming AI: Whisper Leak and the Real Fixes
Encrypted doesn’t mean invisible. Microsoft’s “Whisper Leak” shows a passive observer can classify AI chat topics by watching packet sizes and timing…
November 2, 2025
ChatGPT Memory-Based Ads: Security Guidance for Teams
OpenAI’s exploration of memory-based ads raises new privacy and compliance risks. Consequently, security teams should treat memory as persistent data, enforce strict…
November 1, 2025
Agent Session Smuggling: Hijacking AI-to-AI Workflows
Agent session smuggling lets a hostile AI agent exploit a live multi-agent conversation, inherit tool authority, and trigger real actions. With scoped…
October 31, 2025
GPT-5-Powered Aardvark Automates Vulnerability Fixes
Aardvark is OpenAI’s GPT-5–powered security agent that reads repositories like a human, validates exploitability in a sandbox, and proposes precise patches. Consequently,…