Google LLC's Google Threat Intelligence Group reported that threat actors used a multi-agent AI framework to steal thousands of credentials in under six hours, marking a shift to more autonomous cyber…
Google's Mandiant incident response team reported that extortion crews are stealing companies' proprietary AI data and threatening to leak it unless ransoms are paid, with two cases detailed in Google…
A developer has detailed an open-source, cloud-agnostic continuous threat exposure management (CTEM) program that mirrors an attacker's reconnaissance to identify and remediate exposures before they b…
Australian police, working with the FBI, arrested two men in Western Australia for allegedly running TeamPCP, a supply-chain attack that compromised over 1,000 organizations and stole 500,000 credenti…
Australian Federal Police arrested Ruben Ian Thomson, 21, and Louis Michael Gaebler, 23, in Perth on August 26, charging them over TeamPCP, a supply-chain attack that compromised more than 1,000 organ…
In March 2026, threat actor group TeamPCP published two backdoored versions of LiteLLM (1.82.7 and 1.82.8) to PyPI, live for roughly six hours, compromising more than 2,500 organizations and 434,000 C…
AI coding tools now generate 42% of committed code, projected to reach 65% by 2027, yet the security pass rate has stalled at 55% since 2023, according to Veracode's July 2026 GenAI Code Security Repo…
The TeamPCP campaign in March 2026 used a stolen token to cascade across five ecosystems in eight days, publishing backdoored LiteLLM versions 1.82.7 and 1.82.8 on PyPI that swept LLM API keys, cloud …
On March 24, 2026, threat actor group TeamPCP compromised the PyPI distribution pipeline for LiteLLM, a Python package with 95 million monthly downloads, pushing malicious versions 1.82.7 and 1.82.8 t…
Wiz's Research and CIRT teams reported a 60% increase in significant cloud security incidents in H1 2026 compared to H2 2025, driven by a doubling of supply-chain attacks and new vulnerability disclos…
Oligo Security revealed that TeamPCP, the threat actor behind attacks on more than 1,000 open-source software packages earlier this year, has been active since 2020, with links to campaigns tracked as…
CrowdStrike reports that AI-driven cyberattacks have surged 89% in the past year, with AI now serving as both a weapon and a target, according to its annual threat hunting report. The company's system…
AI agents that hold long-lived bearer credentials in their environment, config, or context window create a systemic leak risk because any entity that obtains the credential can reuse it, and agents ma…
The `irm | iex` PowerShell pattern, used by major projects like Bun and the Hugging Face CLI to install software, creates a security blind spot by executing remote code directly in memory without revi…
A self-propagating malware strain called Sandworm_Mode is targeting AI coding assistants and software development environments, stealing credentials, API keys, and secrets across the AI toolchain, acc…
Cybersecurity firm CrowdStrike has identified a worm actively targeting AI toolchains to steal credentials, exfiltrate data, and destroy files, exploiting blind spots where malicious activity mimics l…
A teenage hacking group called TeamPCP poisoned two releases of LiteLLM, an open-source AI gateway tool downloaded 95 million times, stealing over 500,000 credentials and 300 GB of data from more than…
On March 24, 2026, attackers compromised LiteLLM's CI/CD pipeline and uploaded malicious PyPI packages that stole credentials from environments with three million daily downloads. The incident highlig…
A self-replicating worm called Miasma, attributed to threat actor TeamPCP, is targeting AI coding tools by injecting malicious hooks into configuration files of Claude Code, GitHub Copilot, Gemini CLI…
Security researcher found that several Claude Code community plugins listed in Anthropic's official marketplace were vulnerable to repo-jacking, where abandoned GitHub repository names could be claime…