Fake IT help desk calls led to remote access and VYPR ransomware
Cisco Talos says callers often knew only names and emails, and one Quick Assist session ended in ransomware.
68
AI model
Claude Code
- Mentions · 7d4
- Mentions · 30d11
- All mentions21
- First seenAug 30, 2026
- Last mentioned1d ago
Timeline
21 articles · newest firstSuspected Chinese attackers rooted 25 servers with custom PHP2Shell chain
The chain hit PAN-OS 12.1 and 12.2 from October 23; Dream says remote access likely remains.
84
OWASP finds AI agents lower the skill bar for parts of hacking
Guide 2.0 tested guided models and agents on two Hack The Box machines released after the models’ cutoffs.
52
123 Reg says AI-driven attack exposed customer contact and account data
The GoDaddy-owned registrar says the September 18 intrusion was limited to reading and suspects China-linked use of ARTEX.
70
Simple Lean 4 harness h1 matches specialized prover workflows
With matched models, a single attempt plus verifier feedback solved eight open FormalConjectures problems and led three formal benchmarks.
42
Fingerprint launches Agentic Installation for fraud-detection setup
Developers can prompt Claude Code, Codex, or Cursor, or run one CLI command, then optionally query fraud data through an MCP server.
22
Storm-0940 used ARTEX against over 2,250 Microsoft 365 tenants
Stolen ConnectWise application credentials enabled Graph access; a separate spray of more than 151,000 logons had no successful authentication.
76
Microsoft frames AI agents as insider threats needing live controls
Dynamic Permissions start at zero and last only for a task; Guardian Agents follow human playbooks.
52
Anthropic's Q3 revenue hits $16.8B but growth slows ahead of planned November IPO
Anthropic says Q3 revenue reached $16.8 billion as growth slowed before its planned November IPO.
76
Vijil DART tests AI agents for security flaws and policy violations
Vijil launched DART, automated adaptive red-teaming that probes enterprise AI agents with multi-turn attacks to find security flaws and policy violations.
30
EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents
EvoRiskBench releases 450 adversarial workspace-agent tasks; worst configuration (Codex plus DeepSeek-V4-Pro-0813) reached 68.44% attack success rate.
58
AI coding agents leaked 13,000 internal company screenshots to public GitHub repos
Glow Labs found AI coding agents leaked 13,000+ internal screenshots, including customer billing records, to public GitHub repos across 300+ organizations.
62
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
AI coding agents uploaded 13,000+ internal screenshots, including billing records, to public GitHub repos across 300+ organizations, invisible to security teams.
62
AI is supercharging hacking, and your local hospitals and banks aren’t ready
The Verge analysis warns AI agents are supercharging hacking faster than small hospitals, banks, and nonprofits can defend themselves.
48
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1
Security Affairs launches a weekly AI-cybersecurity newsletter that indexes headlines without original reporting.
18
Drawgent: Coding agent on a live Excalidraw canvas
Open-source tool drawgent connects Claude Code, Codex, or opencode to a live Excalidraw canvas for diagram-driven coding tasks.
12
Two Git ignore files nobody told me about
Developer blog explains .git/info/exclude and the global core.excludesFile as uncommitted alternatives to .gitignore for keeping personal scratch files untracked.
3
AI-Powered Threats Exploit Digital Trust Through Autonomous Breach Techniques
A PRC-linked group used Claude Code as an autonomous operator for espionage, while researchers identified the first Android malware leveraging generative AI.
70
Prismor: Open-source runtime control plane for AI agents
PrismorSec released Prismor, a free open-source runtime policy layer that allows, warns, or blocks AI coding agent tool calls before execution.
48
The VMs Powering Mobile Agents (Instinct, Claude Code)
A teardown reveals Claude Code runs in Firecracker microVMs with a Rust PID 1 and MITM'd egress, while Instinct rents E2B sandboxes with git-based memory.
35
Dr. Claw: An AI Scientist Workspace for Vibe Research
Researchers release Dr. Claw, an open-source auditable workspace that wraps coding agents like Claude Code for end-to-end AI-assisted research workflows.
45
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-4630016%7.8Shared-frag marker loss in Linux kernel skb coalescing (LPE)
Appears with
- Anthropicorganization · 7
- Codexai model · 6
- Anthropicvendor · 4
- DeepSeekai model · 3
- OpenAIorganization · 3
- Microsoftvendor · 3
- Claude Codeproduct · 2
- GitHuborganization · 2
- gitshotorganization · 2
- OpenAI Codexai model · 2
- ARTEXmalware · 1
- OpenLAIRorganization · 1
- PAN-OSproduct · 1
- Grokai model · 1
- Claudeproduct · 1
- Palo Alto Networksvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.