AI tools
Shai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI Tools
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI ChatGPT. Lockdown Mode was introduced by the artificial intelligence (AI) company in June 2026 as an optional setting to minimize
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services. The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attac
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
Gartner predicts that security operations centers will have 50% more engineers than analysts by 2028 as AI agents take over routine alert handling. Prophet Security examines how AI is reshaping SOC roles, from analyst responsibilities and detection engineering to threat hunting a
Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Two critical flaws in Langflow could let a remote attacker with no account bypass authentication or run arbitrary code, IBM said last week. Langflow is an open-source tool for building AI agents and workflows, and its vulnerability reports go to IBM. Every release from 1.0.0 thro
Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
Forty percent of security teams now use AI every day, and another 56% are testing it. Only 4% have no plans to adopt it, according to Prophet Security's State of AI in Security Operations 2026 survey of more than 250 CISOs, SOC leaders and practitioners. For the teams still testi
New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value
Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim's stolen data by their monetization value. Like other typical stealer families, VOLTA is equipped to harv
“Black October” for AI Developer Platforms
A series of agentic attacks on AI Developer Platforms has been leading to LLMJacking at scale.
AI agent security in Kubernetes: Why prompt injection isn't the right term
Abdel Sghiouar, Google engineer and senior cloud developer advocate, thinks prompt injection should be called prompt poisoning Category: Guides & Best Practices
Malicious Claude Code extension on Cursor planted SSH backdoors
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...]
More from AI tools
Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace
Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH Backdoor
Hugging Face malware campaign returns to hijack GPUs for crypto mining
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
3 Ways AI Agents Already Operate in Your Browser
Even after PHP2Shell, blast radius matters more than a CVSS score
Aikido launches external network pentesting
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Warp discloses breach exposing AI agent logs, user telemetry data
StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
When an AI Agent Is the Incident, the Identity Record Is the Evidence
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
AI coding agents hijacked using AGENTS.md file in Downloads folder
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
You gave your AI agent access, but who is giving it orders?
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors
OpenCode Flaw Lets Malicious MCP Servers Execute Code During Sign-In on Windows and WSL
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
The Harness Is the Hard Part of Agentic Pentesting
From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage