AI-Driven Threats

#119 - The Agent Trust Boundary

AI phishing, hallucinated dependencies and prompt injection in developer toolchains

#118 - Agentic Ransomware: First Autonomous AI Attack Chain Confirmed

Agentic ransomware, coding agent supply chain risk, and prompt injection against AI browsers

#117 - AI Developer Trust Is Now the Attack Surface

Amazon Q flaws, poisoned OpenAI tenants and Gaslight malware show AI threats moving into developer trust boundaries.

#116 - AI Agent Supply Chain Attacks Expose Hidden Trust

Poisoned agent skills, AutoJack and LiteLLM flaws reveal how AI control planes turn misplaced trust into enterprise compromise.

#115 - Agentjacking: AI Agents as Attack Infrastructure

New attack class achieves 85% compromise rate against autonomous AI agents in development pipelines. Prompt injection emerges as reliable exploitation vector.

#114 - AI Agents Exploited in Production: Chatbots, CI/CD and Worms

From Meta's hijacked support bot to a free LLM worm spreading through enterprise networks - how AI's trust models became this week's attack surface.

#113 - AI Agent Runs First Live Intrusion: Marimo, Flowise, SymJack

An LLM agent autonomously emptied a database in under two minutes, while RCEs in AI orchestration runtimes and coding agents widened the attack surface.

#112 - Shai-Hulud Worm Goes Public: AI Supply Chain Attacks Explode

Megalodon hits 5,561 GitHub repos, ChromaDB max-severity RCE exposes the AI infrastructure layer, and one fraudster replicates a full criminal team with jailbroken Gemini.

#111 - AI Zero-Day in the Wild and Mini Shai-Hulud Worm Hits OpenAI

Google confirms first AI-developed exploit, TeamPCP worm compromises Mistral, Guardrails, OpenAI with valid SLSA attestations and Claude Code hooks

#110 - AI Attacks OT: Claude Used Autonomously in Water Utility Breach

Claude Code one-click RCE, Five Eyes agentic AI warning, and a Hugging Face typosquat hitting 244,000 downloads.

#109 - AI Developer Toolchain Under Attack: DPRK LLM Malware, Gemini CLI RCE

How the coding assistants, agent marketplaces, and ML libraries powering AI development became this week's primary supply chain attack surface.

#108 - Vercel Breach via AI Tool OAuth: Supply Chain Attacks Hit Production

Vercel breach, the Shai-Hulud npm worm targeting AI/MCP configs, and Claude Mythos earning its first Firefox CVEs.

#107 - AI Coding Agents Hijacked: MCP Flaw, Claude Mythos, Prompt Injection

#106 - AI Credential Harvest Scales as Agentic Attack Surface Mapped

Systematic prompt injection chains, 35,000 exposed Gemini keys, and $893M in FBI-confirmed AI fraud losses define a week of convergent risk.

#105 - North Korea's AI Malware, Claude Code Exploit, and the AI Supply Chain Breach

AI threat intelligence on DPRK operationalising LLMs in attacks, critical Claude Code prompt injection, and TeamPCP's cascade through the AI developer supply chain

#104 - Agentic AI Attacks Confirmed: Nation-State LLM Exploits Hit Infrastructure

Chinese APT agentic framework succeeds against 30 targets; TeamPCP compromises AI toolchain to breach 1,000+ cloud environments via LiteLLM and Trivy supply chain campaign.

#103 - The Developer Endpoint Is the New Perimeter

Shadow AI, Supply Chain Cascades, and the Economics of AI-Enabled Fraud

#102 - AI Agents Go Rogue: Autonomous Attacks Hit Enterprise LLM Platforms

Autonomous agents breach McKinsey's LLM, QUIETVAULT weaponises coding tools, and North Korea operationalises agentic AI across the kill chain

#101 - When AI Becomes the Attack Team

How nation-states, cybercriminals, and AI agent vulnerabilities converged in one week — and what it means for your Monday morning

#100 - The Week the Theory Became Reality

One Operator. Six Hundred Firewalls. The Skill Gap Is Gone.

#099 - When your AI dev tools become the attack vector

The Developer's Dilemma: Your AI Coding Stack Is Now a Weapon

#098 - State Hackers Weaponize Google Gemini for Recon and Code

Microsoft warns of AI recommendation poisoning attacks, and malicious ChatGPT extensions compromise 260k users

#097 - Claude Opus 4.6 finds 0-days

Docker's AI assistant vulnerability, deepfake job applicants, and AI browser hijacking attacks

#096 - Viral Moltbot becomes security nightmare

LLMjacking bazaar hijacks compute, VS Code malware hits 1.5M, AI backdoors target developers

#095 - AI agents write zero-day exploits

Google Gemini calendar attack, AI-generated malware insights