DifyTap: Zafran discovers how attackers can silently wiretap AI data across tenants on a platform powering 1M+ apps

Zafran Security uncovered four vulnerabilities in Dify, the open-source AI platform powering over one million applications and used by enterprises including Volvo, Maersk, Panasonic, and Thermo Fisher. Two were critical severity, two required no authentication, and three carried cross-tenant impact …

View Post on Scour ↗

More from zafran.io on Scour.

Covered by 4 sources including SecurityWeek, The Hacker News