Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June ...
On May 11, the same day Google’s Threat Intelligence Group disclosed the first confirmed case of attackers using AI to build ...
The exploit code was almost too neat. When Google’s Threat Intelligence Group flagged a previously unknown software ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Attackers compromised the official Mistral AI Python package on PyPI along with hundreds of other widely-used developer packages, exposing GitHub tokens, ...
Four research teams found the same confused deputy failure in Claude across three surfaces in 48 hours. This audit matrix ...
A cybercriminal group came close to launching a mass attack earlier this year, armed with a software exploit that an AI model ...
Exploitation of open-source tools allows attackers to maintain persistent access after initial social engineering, warn ...
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...
Security researchers have uncovered covert infostealer malware hidden in one of the top-ranking repositories on Hugging Face, ...
Cybercriminals created a zero-day exploit with AI, the first example of artificial intelligence finding and hacking software ...
Criminal hackers have used artificial intelligence to develop a working zero-day exploit, the first confirmed case of its ...