A routine evaluation of advanced AI models’ offensive cybersecurity capabilities unexpectedly reached into the live internet. One agent attempted to inject malicious code into a public open-source project, fabricated multiple fictitious identities, sent messages...
The Emergence of Agent-Against-Agent Exploits An AI agent can deceptively trigger another agent with elevated privileges. Consequently, an attacker can exploit this mechanism to compromise a software project. Pillar Security researchers discovered such an...
A single unauthenticated POST request was sufficient to open a command shell inside one of the most widely deployed AI agent orchestration platforms on GitHub. From that foothold, an attacker could steal API keys...
An infected Word document can imperceptibly distort a corporate report and subsequently transfer malicious instructions into new files. Merely opening the document is insufficient to launch this attack. Instead, the file must enter the...
Connecting an AI agent to your working services transforms a familiar integration into something restless. The access chain to your data never stops shifting. ChatGPT and Claude connectors can quietly acquire new capabilities. They...
Invisible Threats in Code Reviews A malicious pull request can bypass code reviews flawlessly. Days later, it compels an AI assistant to covertly exfiltrate project secrets. Attackers simply conceal instructions within an ordinary PNG...
CrowdStrike has expanded its critical classification of artificial intelligence attacks. Malicious actors frequently inject harmful instructions directly into AI prompts. Therefore, security specialists recently added 18 new methods to their extensive database. Consequently, the...
A seemingly mundane submission within a bug-tracking system can masquerade as a covert directive for artificial intelligence. Recently, researchers at Noma Labs demonstrated how a singular GitHub Issue can manipulate GitHub Agentic Workflows. Consequently,...
AI browsers are taking on increasingly ambitious roles as autonomous agents. Yet the more they act on a user’s behalf, the more dangerous blind trust in page context becomes. Researchers at LayerX have described...
AI assistants have become a normal tool for debugging lately. Yet even an ordinary crash report can turn into a command that runs someone else’s code on your machine. Tenet Threat Labs has shown...
Security researchers from the Tel Aviv-based firm Adversa have unearthed a vulnerability within Claude Code—the autonomous artificial intelligence programming agent authored by Anthropic. By enticing the agent with a sufficiently protracted sequence of subcommands,...
An ordinary hyperlink to an AI chat may easily masquerade as a treacherous snare. The vanguard at Oasis Security has illuminated that within Claude.ai, merely navigating to a meticulously crafted address and striking the...
