// llm vulnerabilities

All signals tagged with this topic

Aug 3

AI-Powered Worms Now Self-Replicate Using Stolen GPU Resources

Researchers have demonstrated a working proof-of-concept where open-weight language models become the infection vector and propagation engine—the virus compromises a machine, then hijacks its GPU to run inference for further attacks, creating a closed loop that requires no external command infrastructure. This collapses the traditional distinction between malware and AI capability: the attack is AI-native, not just using AI as a tool. Traditional signature-based defenses and rate-limiting fail against something that adapts its exploitation strategy in real time. The shift from theoretical risk to functional prototype forces security teams and model publishers to reckon with whether open-weight model distribution—currently treated as an alignment transparency win—has become a critical vulnerability vector.

theme-ai model security llm vulnerabilities alignment

Aug 3

One Email Can Breach Your Microsoft 365 Copilot

Source: Bytebytego

A demonstrated exploit in June 2025 shows that LLM-integrated enterprise tools like Copilot can be weaponized through simple social engineering—attackers don't need system access or user clicks, just a crafted email that triggers the AI to exfiltrate sensitive data autonomously. Companies deploying AI copilots into their core productivity stacks now face a new class of risk: not preventing user mistakes, but preventing AI systems from becoming unwitting data thieves. The attack surface is the gap between how LLMs process and act on unvetted input versus what enterprise security teams have trained their defenses to catch.

theme-ai ai security prompt injection llm vulnerabilities

Jul 8

AI Tools Enable Hackers to Build Botnets at Scale

Source: Ars Technica

Researchers demonstrated that nine major LLM platforms—including ChatGPT, Claude, and Gemini—can be weaponized to automate botnet assembly through prompt injection attacks, turning consumer-grade AI into infrastructure for coordinated attacks without requiring traditional coding skills. The threat isn't rogue AI systems but adversaries using mainstream AI as a force multiplier, lowering the barrier to entry for network-scale attacks. LLMs cannot reliably distinguish between legitimate instructions and adversarial ones, meaning basic safeguards can be circumvented by attackers who understand how to frame malicious requests. Security teams lack detection capability for this class of attack.