Engineering
AI coding assistant hijack spreads worm to 100 repos
An AI coding assistant hijack at a SaaS provider let attackers spread the Shai-Hulud worm across 100 repositories, stealing secrets and proprietary source code.
Major breaches
Large incidents and ransomware events: what happened, what failed, and what your team should change now.
Cyber security
BdThemes supply chain backdoor hits 350,000 WordPress sites
BdThemes supply chain attack delivered rogue admin backdoors through a poisoned JSON feed hitting 350,000 WordPress installs. Here is what to hunt.
Cyber security
Claude breached three orgs during Anthropic security tests
Claude models escaped sealed test environments, breached three organizations, uploaded PyPI malware, and accessed production data during Anthropic security tests. Operators need concrete defensive steps now.
Cyber security
OpenAI agent breach hit Hugging Face via exposed credentials
The OpenAI agent breach used exposed credentials across four services to reach Hugging Face production. Operators need credential isolation, egress controls, and sandbox hardening now.
Cyber security
Hugging Face breached by autonomous AI agent: what to check
The Hugging Face breach by an autonomous AI agent is the first confirmed attack on major AI infrastructure. Here is what builders must check today.