Article

In August 2025, Lenovo quietly patched a critical vulnerability in its AI chatbot “Lena” that could have allowed attackers to steal session cookies and potentially compromise customer support systems through a single 400-character prompt—highlighting a new class of AI-driven security threats that most organizations are unprepared to defend against. The ...

The rapid deployment of generative AI systems across critical infrastructure has created an unprecedented security challenge: how do we effectively test and secure systems that can generate content, make decisions, and interact with users in ways we never fully anticipated — even with AI Red Teaming in place? A groundbreaking ...

On 30 June 2025, security researchers Ian Carroll and Sam Curry opened McDonald’s recruiting site, clicked a tiny “Paradox team members” link, typed the universal joke password 123456, and found themselves inside the admin console of McHire—the AI-driven chatbot platform that screens applicants for about 90% of McDonald’s 40,000+ restaurants ...