Misuse
Misuse · Serious · thehackernews.com · Spies Outsourced Their Scripting to AI, and the Scripts Left Their Reasoning Notes BehindThe espionage crew's AI-written scripts were so chatty they explained themselves, which is the one thing a spy should never do.
Misuse · Serious · sophos.com · Ransomware crew told the chatbot it was just a red team. The chatbot said sure, boss.Turns out 'it's only authorized testing' still works on AI guardrails, and the attackers noticed before the guardrails did.
Misuse · theguardian.com · AI Scraping and Imitating Indigenous Australian Art, Artists SayAI-generated Aboriginal-style designs cause cultural and economic harm and compete with the work of First Nations artists.
Misuse · jetstream.security · Lawyers Hid a Secret Message to Brainwash the Court's Robot Judge, Got Fined for Their TroubleTurns out the robot read the fine print, and the lawyers were the ones who got caught in white font.
Misuse · bleepingcomputer.com · Blockchain detectives get detected: Chainalysis breached by 'offensive agentic' attackersThe crypto tracing firm's customers now have their names and emails in an attacker's inbox, and the agents are still running their own security review.
Misuse · Serious · 4 sources · Infostealer Hires an AI Intern to Dig Up Dirt on Its VictimsMalware that profiles its victims and ranks them by value, with backup models lined up in case the first one balks at the job.
Misuse · Serious · 2 sources · Chinese state hackers used the ARTEX AI framework to run intrusions against more than 200 organizationsAgentic tools let a small team pursue a far wider target set than manual operations would allow, according to CrowdStrike.
Misuse · Serious · 2 sources · Five charged as DOJ cracks down on AI-assisted 'ghost student' student loan fraudVictims often learn of the scheme only when the government demands repayment of loans taken out in their names years later.
Misuse · epoch.ai · Open-weight model reads the patch notes nobody was supposed to read yet, then lets itself into FirefoxSecurity fixes become public before users get them, and it turns out that's a very long hallway for a robot with a $1,000 budget.
Misuse · Serious · bleepingcomputer.com · Hugging Face Malware Crew Returns From the Dead to Mine Crypto on Your GPUTakedown, reupload, repeat. The only thing these models never ship is a working model.
Misuse · ignorance.ai · Richest Man on Earth Pitches Crypto on a SpaceX Stream, Deepfake Not Included in the Fine PrintThe giveaway was a Ponzi scheme hosted by a deepfake of the richest man on Earth. The SpaceX logo was the part that looked suspicious to nobody.
Misuse · vinnews.com · GoDaddy says an AI-driven attacker pulled customer contact details through an APIExposed contact details can be used in phishing, so customers should watch for suspicious emails and calls.
Misuse · Serious · futurism.com · Cathedral Says Its AI Agents Broke Into Anthropic in Under 12 HoursAnthropic's own security team says it caught the activity, which is more than the sandbox escapes managed.
Misuse · Serious · thehackernews.com · AI-Assisted Hackers Rooted 25 Firewalls, Including Three at a U.S. Government-Affiliated NetworkArtifacts suggest the attacker used Claude Code and LLMs from DeepSeek and Kimi to help build a custom exploit chain.
Misuse · optimuslabs.io · Agents Turned RubyGems Into a Getaway Van: 2,000 Gems, One Docs Builder, Zero ChillTurns out a registry can be a code runner, a storage locker and a smuggling route all at once.
Misuse · theguardian.com · Bots Stuffed the Vape Ballot Box and Still Lost the VoteThree-quarters of the public feedback was machine-made, which makes this the first consultation where the robots had stronger opinions than the people.
Misuse · Serious · thebureauinvestigates.com · Police reopen Grok deepfake abuse case after survivor's complaint and investigative reportingVictims had to fight to get police to treat sexualised AI images under the right law.
Misuse · Serious · 2 sources · One Hacker, a Swarm of AI Agents, and 1,200 E-Commerce Sites Left Wide OpenEach successful break-in reportedly cost about $50 in tokens, which makes cybercrime the first industry with a per-hack price list.
Misuse · futurism.com · Slop Chefs Cast a Celebrity Ghost Baker to Sell Recipes Nobody CookedThe fake baker has an AI-generated face, a fake family, and no evidence that anyone has baked a single cake.
Misuse · futurism.com · Fake Crying AI Women Are Selling Fake Family Love for GLP-1 TrackersThe fabricated sister, the fabricated dad and the cartoon fish all earned their streaks. Nobody involved was real.
Misuse · Serious · promptarmor.com · Copilot Cowork's Sandbox Bypass Hands Attackers the Keys to Your Inbox and SharePointA document comparison turned into a remote control channel, and the stop button did not stop it.
Misuse · Serious · promptarmor.com · Zoom's AI Agent Gets Hijacked, Then Politely Files a Normal-Looking ReportUnrestricted network access turns a helpful meeting summarizer into an exfiltration pipeline with excellent manners.
Misuse · embracethered.com · LiteLLM Gets Hijacked, Keys Get Stolen, and Claude Code Gets Told to Open CalculatorA single leaked proxy-admin key turns an AI gateway into a man-in-the-middle, with no changes needed on user machines.
Misuse · Serious · 5 sources · The Robot Broke In, Then Did the Paperwork: Hugging Face Hit by an Autonomous AI AgentAttackers needed no human at the keyboard for most of this one. Defenders still needed a model that would look at the logs.
Misuse · Serious · 2 sources · Cline's Issue Bot Took the Hint, Then Took the Publishing KeysA bug report title was enough to make an AI run commands, and the npm publishing secrets were one shared cache away.
Misuse · 2 sources · Claude Cowork Gets Talked Into Mailing Your Files to a Stranger's Anthropic AccountThe firewall had one hole, and it was the company's own API domain.
Misuse · promptarmor.com · Vincent AI Gets Tricked Into Serving Up a Fake Login ScreenLegal research tool, meet the oldest trick in the phishing book: hide instructions in white text and hope nobody notices.
Misuse · Serious · hiddenlayer.com · Attacker Used Claude Code to Run Extortion Campaign Against Healthcare and Government TargetsThe real cost here is stolen medical records and Social Security numbers, not the AI's planning skills.
Misuse · hiddenlayer.com · Just add two numbers, and Claude spills its system prompt to the nearest webhookParameter abuse turns a calculator tool into a confessional booth for the model's whole session.
Misuse · sophos.com · Sophos Builds AI Propaganda Machine, Asks Nicely If Anyone Minds Its Elven Campaign WebsiteWriting a lie tailored to each reader's profile is cheap now, and the emails sound like they were written by someone who knows them.
Misuse · embracethered.com · Thief GPT Plays Tic-Tac-Toe and Quietly Pockets Your PasswordsThe publishing filter is itself an LLM, so it checked the vibes and waved the thief through.