… Apart from this case, Google notes that Chinese and North Korean hackers, such as APT27, APT45, UNC2814, UNC5673, and UNC6201, have been using AI models for vulnerability discovery and exploit development, continuing the trend observed in the February report . …
… Mistral AI told BleepingComputer that the TeamPCP managed to contaminate some of the company’s software development kit SDK packages. In an advisory published earlier this week, the company said that the breach occurred after a developer device was impacted by the TanStack supply-chain attack. …
… Claim Your Spot Related Articles: PyPI package with 1.1M monthly downloads hacked to push infostealer New npm supply-chain attack self-spreads to steal auth tokens Backdoored PyTorch Lightning package drops credential stealer Hackers compromise Axios npm package to drop cross-platform malware Backd… …
… Download Now Related Articles: GitHub confirms breach of 3,800 repos via malicious VSCode extension GitHub investigates internal repositories breach claimed by TeamPCP TeamPCP hackers advertise Mistral AI code repos for sale Grafana breach caused by missed token rotation after TanStack attack 7-Ele… …
… Download Now Related Articles: Anthropic’s restricted Claude Mythos model may be coming to Claude Code ChatGPT rolls out new $100 Pro subscription to challenge Claude Claude Code source code accidentally leaked in NPM package Max-severity flaw in ChromaDB for AI apps allows server hijacking Paid AI… …
… According to the researchers, GreyVibe has used several attack chains against its targets, including: PhantomMail: Spear-phishing emails delivering malicious ZIP/RAR archives via Google Drive and 4sync links, using decoy PDFs or fake errors while deploying malware. …
… Supporting secure development on Claude Platform Claude Platform embeds Claude into custom applications, products, and agents — powering AI-driven features such as assistants, workflows, and internal tools. …
… Download Now Related Articles: Paid AI Accounts Are Now a Hot Underground Commodity Fake OpenAI repository on Hugging Face pushes infostealer malware New stealthy Quasar Linux malware targets software developers Threat actor uses Microsoft Teams to deploy new “Snow” malware WordPress plugin suite h… …
… Anthropic says it's working with companies on finding potential AI-driven exploits Anthropic has confirmed it's working on a new project called "Glasswing," where the AI startup collaborates with other companies to secure the world's most critical software from potential AI-driven exploits. …
… Download Now Related Articles: GitHub investigates internal repositories breach claimed by TeamPCP 7-Eleven confirms data breach claimed by the ShinyHunters gang Grafana says stolen GitHub token let hackers steal codebase TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confirms secu… …