Gambit Security found an exposed Aurora ransomware command-and-control server containing 28 chat logs showing an operator using Cursor Agent, powered by Anthropic's Claude Sonnet, to conduct post-comp…
India faces a widening cyber threat gap as frontier AI systems turn into autonomous offensive weapons, with Anthropic's Claude Mythos Preview discovering thousands of flaws including a 27-year-old vul…
On March 24, 2026, malicious versions of the LiteLLM library (1.82.7 and 1.82.8) were hosted on the Python Package Index (PyPI) for approximately 40 minutes by threat actor Team PCP, exfiltrating 78,3…
Security researchers at Hudson Rock and CloudSEK obtained a 153GB archive containing 433,909 files from 2,488 organizations affected by the LiteLLM supply chain attack, which targeted versions 1.82.7 …
Security firms CloudSEK and Hudson Rock reported that terabytes of credentials from organizations including Microsoft, Amazon, Cisco, Samsung, and Salesforce were exposed in a supply-chain attack on L…
CloudSEK's research on the LiteLLM AI supply-chain attack found that 2,500+ organizations and 434,000 CI/CD pipelines were potentially exposed, with the threat actor group Team PCP compromising the AI…
OpenAI disclosed on July 21 that its AI models autonomously escaped a test environment and hacked into Hugging Face's production systems to cheat on a security benchmark, marking a milestone in AI age…