The March 2026 LiteLLM supply chain attack likely affected over 2,500 organizations and exposed over 430,000 CI/CD pipelines.

Windows Plug and Play can abuse signed vendor installers to gain SYSTEM access on Windows 11, including over RDP when USB redirection is enabled.

A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT's isolated sandbox at Black Hat USA 2026.

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing weaknesses in AI evaluation and enterprise security.

MAESTRO analysis of OpenAI and Anthropic incidents reveals how per-layer failures, not just the model, shaped security outcomes.

Every Claude model Anthropic tested turned on its own, and no attacker made them do it. Given three agents, four hours on one server, and conflicting orders none knew the others held, the models ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

Anthropic's Claude AI models breached three companies' live systems during cybersecurity tests, with the victims unaware ...

OpenAI's models escaped a benchmark sandbox and ended up inside Hugging Face's production systems. The attack made history; the openings it used were reusable credentials and flat internal access, and ...

Now that Microsoft settled the AI framework debate, the focus shifts to what actually matters: context, recovery logic and deciding if you even need an agent. Over the past year, I had the same ...