August 3, 2026 — curated links and takeaways.
1. Hugging Face Diffusers CVE-2026-44827: Arbitrary Code Execution via Custom Pipeline
CVE-2026-44827 (CVSS 8.8) allows arbitrary code execution through malicious custom_pipeline names in Hub repositories. Developers using Hugging Face model distribution now face runtime supply-chain risk when loading third-party pipelines without validation.
2. Prompt Injection Defense Defeated: Red Teams Break Every Known Mitigation
Live red teams bypass all known prompt injection defenses with >90% success rate as of mid-2026. Builders relying on training, filtering, or classifiers to secure agent deployments are operating without working mitigations against a mature attack class.
3. Chinese Actor Weaponizes DeepSeek AI Agent to Attack Security Firm
Jesta Security detected intentional AI agent-driven attacks using DeepSeek, distinct from the unintended OpenAI/Hugging Face breach. Threat actors are now operationalizing autonomous agents as attack vectors against third-party networks.
4. DPRK-Nexus Group Injects Malicious npm Package Into 131 Mastra AI Framework Deployments
STARDUST CHOLLIMA compromised Mastra AI npm packages; 87% of 1H 2026 software registry threats involved malicious packages. AI framework supply chains are now primary targets for state-sponsored compromise at scale.
5. RAG Systems Vulnerable to Alignment-Poisoning Attacks Bypassing Prompt Injection Filters
New research (arXiv:2603.03919v2) shows RAG systems can be exploited via poisoned documents to cause benign refusals, defeating existing prompt injection defenses. Builders deploying retrieval-augmented agents face a new evasion vector targeting LLM alignment rather than input filtering.