Week of to
Bottom line
Also lock down the Model Context Protocol (MCP) product metatool-ai MetaMCP, which has code execution in its internal inspector proxy endpoint, though none of this week's new flaws is known to be exploited in the wild.
Secure It
- A guest script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping it, in a flaw rated 10.0 out of 10.
- China-nexus group TA419 targets United States artificial intelligence (AI) policy experts with Microsoft adversary-in-the-middle phishing that impersonates economists and policymakers.
- Hackers use custom ChatGPT models to impersonate legitimate products and trick users into executing PowerShell commands.
Build It
- NVIDIA Open Agent Safety Platform gives builders a reference for continuous in-silicon agent monitoring.
- Langflow adds server-side request forgery fixes that pin direct request helper connections and protect the Bing Search web address from run tweaks.
- PACE proposes mediating tool calls so poisoned metadata cannot steer agents.
Do this week
- Upgrade GitLab to 19.4.1.
- Restrict metatool-ai MetaMCP to trusted networks and keep its inspector proxy endpoint off the network.
- Upgrade Kobako to 0.9.1.