SURL AI News
繁中English日本語

Archive

代理工具

Agent、MCP、coding agent、工作流自動化與評測。

AI 安全

NanoClaw MCP Approval Cards Hid Execution Parameters, Allowing Agents to Turn One-Time Consent into Persistent Execution Settings

The newly registered CVE-2026-17434 identifies an authorization gap in NanoClaw versions before 2.0.64: the MCP server approval card shown to administrators did not fully display the parameters and environment variables that would actually be applied. The fix now presents the complete payload, masks secret values, and limits input sizes, but affected deployments must still verify their versions and existing configurations.
AI 安全

SiYuan MCP Endpoint Lacked Role Checks; Version 3.7.2 Fixes Flaw Allowing Low-Privilege Users to Invoke Core Tools

The newly disclosed CVE-2026-66012 shows that, before SiYuan 3.7.2, the `POST /mcp` endpoint checked only general authentication status, without enforcing an administrator role or read-only restrictions. Because MCP can expose core note-management capabilities to AI clients, accounts intended only to read content could potentially use it to perform state-changing operations.
最新模型

UK–US Joint Evaluation: Kimi K3 Completes a Simulated Enterprise Intrusion, but None of 41 Exploit Attempts Achieves Arbitrary Code Execution

Preliminary testing by the UK AISI and the US CAISI shows that Kimi K3 scored 32% on ExploitBench, outperforming GLM-5.2 but trailing the tested US frontier models by a wide margin. The model also completed a 32-step simulated enterprise attack once, but the limited evaluation conditions and sample size do not support direct conclusions about real-world attack success rates.
AI 安全

AgentForger Uses URL Parameters to Forge ChatGPT Workspace Agents and Inherit Users’ Existing Connector Permissions

Zenity has disclosed a patched CSRF-style attack chain: merely opening a crafted link while logged in could cause ChatGPT Agent Builder to automatically create, schedule, and run an attacker-controlled agent. The vulnerability did not bypass OAuth; instead, it inherited existing authorizations, highlighting a new trust gap among agent creation workflows, execution identities, and tool permissions.
代理工具

DNS-AID Builds an Agent Discovery Layer with SVCB and DNSSEC, Freeing MCP and A2A Endpoints from Centralized Directories

DNS-AID has launched a public website and an Apache 2.0-licensed reference implementation that let organizations publish agent endpoints, protocols, and capability documents as existing DNS records. The approach can use DNSSEC to authenticate the publisher’s domain, but it still cannot prove that an agent itself is secure, that its capability claims are accurate, or that it should be authorized.
AI evaluation

EvolvingIntent Turns Static Benchmarks Into Conversations With Changing Requirements, Exposing Gaps in Agents’ Ability to Track Revised Instructions

Microsoft Research introduced EvolvingIntent, which transforms existing math, SQL, search, and programming tasks into multi-turn conversations in which requirements are progressively disclosed, revised, or redirected. Experiments show that models’ performance on single-turn benchmarks does not transfer reliably to scenarios where requirements continually change. The data-construction and evaluation code has been released publicly.
Enterprise AI applications

Grok Comes to Google Docs, Sheets, and Slides, With Broad File Permissions a Key Deployment Review Concern

SpaceXAI has launched a unified Google Workspace add-on that lets Grok generate and modify content from a sidebar in documents, spreadsheets, and presentations. The OAuth scopes published on Marketplace cover all Docs and Slides files, as well as spreadsheets where the add-on is installed, so enterprises should clarify data-transfer practices and least-privilege controls before deployment.