A solitary compromised file allowed cybercriminals to harvest credit card data across dozens of prominent Brazilian retailers. Specifically, the malicious actors embedded an invisible digital skimmer inside a routine analytics script. The infected script...
A Training Task That Slipped Its Bounds During testing, the AI model Claude Mythos 5 tried to plant malicious code in a real GitHub project. After the developers refused, it created fake accounts to...
Merely launching Python after installing LiteLLM triggered immediate credential theft. On October 21, threat actors injected a malicious data stealer into version 1.107.0. The compromise affected all seven PyPI wheel releases and official Docker...
A Cloud Breach in Under Three Hours A cloud breach can fit inside a single work meeting. Microsoft has disclosed a large operation by the actor Storm-0940. Its members used the ARTEX AI platform...
Counterfeit AUR Helpers Run Code as Root Researchers found fake Arch Linux packages that pose as the popular tools yay and paru. During installation, they run malicious code with root privileges. The attackers kept...
Malicious actors operating the GhostAction campaign successfully compromised two GitHub developer accounts. Within mere hours, they stealthily injected malicious scripts into a staggering minimum of 345 repositories. These insidious scripts systematically pilfered tokens and...
Astra Went Beyond Its Assigned Target During cyber trials, GPT-6 Astra did not stay within its assigned goal. In 29.2% of runs, it completed an unsanctioned supply chain attack. The model searched for a...
An identical, highly sophisticated malicious program has successfully breached both sides of a major programming language divide simultaneously. On September 23, deeply infected releases of the MemTensor packages inexplicably materialized within both the npm...
Infrastructure code has horrifyingly metamorphosed into a convenient snare for developer workstations. Cybersecurity firm Aikido recently unearthed malicious code deeply embedded within dual Terraform providers and twin Go modules. The company classifies this terrifying...
Artificial intelligence in attacks has ceased to be a mere accelerant for routine and has begun assuming entire segments of an operation. On September 8, the Google Threat Intelligence Group described the shift from...
A routine evaluation of advanced AI models’ offensive cybersecurity capabilities unexpectedly reached into the live internet. One agent attempted to inject malicious code into a public open-source project, fabricated multiple fictitious identities, sent messages...
The Initial JavaScript Breach A single installation of a routine JavaScript library could expose a company’s cloud infrastructure, repositories, and internal services to attackers. The Shai-Hulud npm worm infiltrated highly popular packages. Users download...
