The Harm Surface
Archives
Search...
Log in
Subscribe
Attackers are using a Langflow flaw to lift OpenAI and AWS keys
September 3, 2026
The Harm SurfaceAI, cyber, and autonomy Editor's note · James Webb. So a pattern here: Several weeks of attacks and confirmed exploitation of AI development...
MLflow entered the exploited catalog seven days after Ray
August 27, 2026
The Harm SurfaceAI, cyber, and autonomy Editor's note · James Webb. Last week I wrote that the entry I would not have predicted was Ray. This week it is...
Five flaws entered the exploited catalogue in two days
August 19, 2026
The Harm SurfaceAI, cyber, and autonomy Editor's note · James Webb. Five entries in the exploited catalogue in two days, and three of them are stories this...
A worm through hundreds of npm packages, backdoored TrueConf installers
August 13, 2026
The Harm SurfaceAI, cyber, and autonomy Editor's note · James Webb. Microsoft shipped fixes for four hundred flaws this week, and one of them was already in...
Consoles under attack: Cisco and N-able exploited, Arista reported, Check…
August 4, 2026
The Harm Surface Editor's note · James Webb. I built this free resource because issues like AI security, untrusted robotics, drones, and cybersecurity move...