InfoSecBulletin Cybersecurity for mankind
Terra Security shared results from recent tests that showed flaws in AI apps, agents, and AI-made code workflaws. The company has launched a new module for its constant testing platform. This lets security experts keep simulating attacks on AI systems to find flaws.
Terra has tested different applications made with AI coding tools like Claude Code, fast app-making platforms like Loveable and Base44, and business software that uses AI chat features over the last few months. The company found common security issues that are different from usual software flaws, like CVE-2026-25724, found in Anthropic’s Claude Code by Terra Security researchers.
Bypassing firewalls, AI Agents Accessed Indian ‘ Data Without Permission: CERT-In
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
Critical Atlassian & IBM Flaws Expose Files and Enable Remote Code Execution
After bringing the finding to Anthropic, they quickly acknowledged the risk and resolved the symbolic link issue in Claude Code versions 2.1.7 and later.
The study found that in all applications with AI chats or Agents, there were AI security problems.
Real-World AI Vulnerabilities Observed in Large Enterprises’ Production Environments:
Prompt injection attacks against AI copilots
Indirect prompt injection through embedded or third-party content
Sensitive system prompt leakage
Cross-tenant data exposure in AI copilots
Privilege escalation via AI tool execution chains
Reverse shell execution through AI-enabled command workflows
Broken authorization logic in AI-generated business processes
Exposure of internal APIs introduced during AI-assisted feature expansion
Cross-site scripting via LLM Prompt Injection with authentication bypass
“Some of these issues did not stem from malicious intent or overt misconfiguration, but from complex interactions between AI agents, application logic, and operational tooling,” said Shahar Peled, CEO and Co-founder of Terra Security. “With AI systems committing code with vulnerabilities, modifying configurations, and interacting with pipelines, organizations need visibility into real-world exploitability in production environments, not just theoretical risk. We are proud to be able to provide the means for pentesters to monitor these actions continuously using the Terra platform.”
As AI agents get more access to databases, APIs, and tools, small mistakes can quickly spread across systems. Anthropic’s new security updates to Claude Code show that the industry is paying more attention to finding problems in the code.
“Traditional scanners look for known patterns,” said Gal Malachi, CTO and Co-Founder of Terra Security. “What we’re seeing with AI-powered systems is contextual vulnerabilities in cases where the model behaves as designed, but the surrounding application or permission model allows unintended outcomes. A prompt injection may not resemble a conventional code flaw, yet it can still expose sensitive data or trigger unsafe actions if safeguards are incomplete.”
How to Use Agentic Tools Safely: 5 Practical Dos and Don’ts
Agentic tools are very powerful, but using them safely needs careful handling. The guidelines below show simple steps for using them responsibly in today’s work.
Do not run unknown tools blindly
Do not run agents on your host environment
Do not rely on default permissions
Do not trust repository context
Do not grant full autonomy immediately
Microsoft patches SharePoint RCE flaw CVE-2026-45659 across servers
