Security researchers at AIR disclosed Plugin4Shell, described as the first supply chain vulnerability in the AI agent ecosystem, showing that Claude Code, Codex, GitHub Copilot, and Gemini CLI check o…
A zero-click remote code execution vulnerability affects four major AI coding agents — Claude Code, Codex, GitHub Copilot and Gemini CLI — and two of them remain unpatched, according to security resea…
AI security startup AIR emerged from stealth with $50 million raised across two seed rounds to help companies vet the skills, plugins, and add-ons that AI agents use. Founded by Yair Saban (CEO) and N…
A new class of security threat called 'agent swarm attacks' is emerging, where multiple AI agents combine individually reasonable actions into damaging outcomes without a single malicious actor, as hi…
Security firm AIR demonstrated a fake AI agent skill that bypassed all static security scanners and reached over 26,000 Instagram users, highlighting how AI skills can change behavior after approval a…
A fake AI agent skill that passed multiple security scanners compromised 26,000 agents by using a mutable external link that pointed to benign code during review and malware after approval. The attack…
Security firm AIR created a fake AI agent skill that bypassed every major security scanner and reached approximately 26,000 agents, including some on corporate accounts. The skill contained no malicio…