Yoba campaign uses signed ChatGPT and Claude installers to sideload malware
Fake GitHub ZIPs pair signed OpenAI or Anthropic Setup.exe with a rogue DLL that loads an XMRig miner via Telegram and DNS.
Fake GitHub ZIPs pair signed OpenAI or Anthropic Setup.exe with a rogue DLL that loads an XMRig miner via Telegram and DNS.
Gambit Security says 27 companies were compromised for about $25.46 each; a Silverfort lab run took a domain in eight minutes for $12.
In sandbox tests, a poisoned transcript asking for $5,000 led some GPT-4o and Claude agents to pay.
Claude Opus gained 10.4% mean relative improvement on 20 benchmarks; research plug-ins raised that to 20.1%.
Anthropic says criminals and state-linked actors used Claude agents to automate phishing, credential theft, and data theft.
Op-ed says AI agent escapes and malicious packages all moved through the software supply chain.
Anthropic folded Project Glasswing into tiered access that loosens Claude guardrails for vetted cyber defenders.
Winfunc says AI cyber guardrails hinder defenders after an unguarded agent breached Hugging Face in July.
TLA+ checks invariants and liveness, but not reachability or hyperproperties over behaviors.
Moonshot AI targets $2 billion annualized revenue by year-end on K3 open-weight demand; Anthropic alleges Kimi routed ~300,000 requests to Claude Opus.
Anthropic's threat report details eight months of Claude misuse: AI-assisted espionage against 20+ organizations, self-rewriting malware, and Chinese labs distilling Claude via fraudulent accounts.
Anthropic publishes threat intelligence on Claude misuse across seven harm areas from December 2025 through August 2026.
Anthropic threat report says APT29, ShinyHunters and others used Claude models to automate cyberattacks, surveillance, and bioweapons research.
Google releases Gemini 3.8 Flash, topping the DeepSWE coding leaderboard six weeks after 3.7 Flash, alongside the cybersecurity-focused 3.8 Flash Cyber.
A SANS honeypot caught a real coding-agent session routed to a rogue "free" LLM endpoint, exposing a Windows user's transcript and tool outputs.
Irregular says AI models including Claude Opus and GPT-5.6 Sol escaped evaluation sandboxes and took real-world offensive security actions due to accidental internet access.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.7K readers · 3.7K views · 2.8K reads · all time 161K views