Cyber Security

#132 - The New Edge: Attackers Are Farming the AI Layer That Holds Your Keys

LLM proxies, AI gateways, agent runtimes and MCP servers got hit in the wild this week: 3,000+ servers infected, a CVSS 9.9 and one prompt for IAM keys.

#130 - The $12K Breach: Agentic Crime's New Unit Economics

A criminal spent $12,000 on three open-source AI agents to breach 27+ companies and steal 600,000 cards — plus why the OpenAI "agents attacking the internet" panic is aimed at the wrong story.

#123 - The Confirmation Gap

DeepSeek-powered AI agent attacks: how one threat actor went from unconfirmed capability claim to CISA-confirmed exploit in just five days.

#122 - The Believed Boundary

Anthropic just confirmed the same failure - twice in three weeks, the sandbox didn't hold.

#121 - The Accountability Gap

OpenAI's own models hacked Hugging Face. The precedent is worse than the breach.

#119 - The Agent Trust Boundary

AI phishing, hallucinated dependencies and prompt injection in developer toolchains

#118 - Agentic Ransomware: First Autonomous AI Attack Chain Confirmed

Agentic ransomware, coding agent supply chain risk, and prompt injection against AI browsers

#117 - AI Developer Trust Is Now the Attack Surface

Amazon Q flaws, poisoned OpenAI tenants and Gaslight malware show AI threats moving into developer trust boundaries.

#116 - AI Agent Supply Chain Attacks Expose Hidden Trust

Poisoned agent skills, AutoJack and LiteLLM flaws reveal how AI control planes turn misplaced trust into enterprise compromise.

#115 - Agentjacking: AI Agents as Attack Infrastructure

New attack class achieves 85% compromise rate against autonomous AI agents in development pipelines. Prompt injection emerges as reliable exploitation vector.

#114 - AI Agents Exploited in Production: Chatbots, CI/CD and Worms

From Meta's hijacked support bot to a free LLM worm spreading through enterprise networks - how AI's trust models became this week's attack surface.

#113 - AI Agent Runs First Live Intrusion: Marimo, Flowise, SymJack

An LLM agent autonomously emptied a database in under two minutes, while RCEs in AI orchestration runtimes and coding agents widened the attack surface.

#112 - Shai-Hulud Worm Goes Public: AI Supply Chain Attacks Explode

Megalodon hits 5,561 GitHub repos, ChromaDB max-severity RCE exposes the AI infrastructure layer, and one fraudster replicates a full criminal team with jailbroken Gemini.

#111 - AI Zero-Day in the Wild and Mini Shai-Hulud Worm Hits OpenAI

Google confirms first AI-developed exploit, TeamPCP worm compromises Mistral, Guardrails, OpenAI with valid SLSA attestations and Claude Code hooks

#110 - AI Attacks OT: Claude Used Autonomously in Water Utility Breach

Claude Code one-click RCE, Five Eyes agentic AI warning, and a Hugging Face typosquat hitting 244,000 downloads.

#109 - AI Developer Toolchain Under Attack: DPRK LLM Malware, Gemini CLI RCE

How the coding assistants, agent marketplaces, and ML libraries powering AI development became this week's primary supply chain attack surface.

#108 - Vercel Breach via AI Tool OAuth: Supply Chain Attacks Hit Production

Vercel breach, the Shai-Hulud npm worm targeting AI/MCP configs, and Claude Mythos earning its first Firefox CVEs.

#107 - AI Coding Agents Hijacked: MCP Flaw, Claude Mythos, Prompt Injection

#106 - AI Credential Harvest Scales as Agentic Attack Surface Mapped

Systematic prompt injection chains, 35,000 exposed Gemini keys, and $893M in FBI-confirmed AI fraud losses define a week of convergent risk.

#105 - North Korea's AI Malware, Claude Code Exploit, and the AI Supply Chain Breach

AI threat intelligence on DPRK operationalising LLMs in attacks, critical Claude Code prompt injection, and TeamPCP's cascade through the AI developer supply chain

#104 - Agentic AI Attacks Confirmed: Nation-State LLM Exploits Hit Infrastructure

Chinese APT agentic framework succeeds against 30 targets; TeamPCP compromises AI toolchain to breach 1,000+ cloud environments via LiteLLM and Trivy supply chain campaign.

#103 - The Developer Endpoint Is the New Perimeter

Shadow AI, Supply Chain Cascades, and the Economics of AI-Enabled Fraud

#102 - AI Agents Go Rogue: Autonomous Attacks Hit Enterprise LLM Platforms

Autonomous agents breach McKinsey's LLM, QUIETVAULT weaponises coding tools, and North Korea operationalises agentic AI across the kill chain

#101 - When AI Becomes the Attack Team

How nation-states, cybercriminals, and AI agent vulnerabilities converged in one week — and what it means for your Monday morning

#100 - The Week the Theory Became Reality

One Operator. Six Hundred Firewalls. The Skill Gap Is Gone.