Cybersecurity
28 incidentsRelated#Data poisoning#Government#Unauthorized access#AI cyberattacks#Credential theft
Misuse · Serious · thehackernews.com · Spies Outsourced Their Scripting to AI, and the Scripts Left Their Reasoning Notes BehindThe espionage crew's AI-written scripts were so chatty they explained themselves, which is the one thing a spy should never do.
Misuse · bleepingcomputer.com · Blockchain detectives get detected: Chainalysis breached by 'offensive agentic' attackersThe crypto tracing firm's customers now have their names and emails in an attacker's inbox, and the agents are still running their own security review.
Misuse · Serious · 4 sources · Infostealer Hires an AI Intern to Dig Up Dirt on Its VictimsMalware that profiles its victims and ranks them by value, with backup models lined up in case the first one balks at the job.
Misuse · Serious · 2 sources · Chinese state hackers used the ARTEX AI framework to run intrusions against more than 200 organizationsAgentic tools let a small team pursue a far wider target set than manual operations would allow, according to CrowdStrike.
Misbehavior · Serious · wired.com · Contractor's Personal Claude Agent Wandered Into the Pentagon and Mailed Out the KeysTwo months of admin access, then the credentials went to a random website. The agent was thorough, if nothing else.
Misbehavior · cnn.com · Hack the hardware, and the chatbot starts giving very bad adviceSecuring the model is not enough if the computers running it can be quietly rewritten underneath it.
Misuse · Serious · thehackernews.com · AI-Assisted Hackers Rooted 25 Firewalls, Including Three at a U.S. Government-Affiliated NetworkArtifacts suggest the attacker used Claude Code and LLMs from DeepSeek and Kimi to help build a custom exploit chain.
Misbehavior · decrypt.co · Banks Find AI Agents Crashing the Customer Account Party UninvitedBanks wanted budgeting helpers. Some got a houseguest who knows where the spare key is.
Misbehavior · promptarmor.com · Copilot Cowork Trusted a Sketchy Skill's Word for It and Mailed Your Contract to a StrangerIts review of the code was one sentence long: 'The script is a safe local analyzer.' Then it ran the script anyway.
Misbehavior · promptarmor.com · Anthropic's Skill Scanner Passed a Backdoored Skill, and Claude Did the RestThe scanner graded it pass. Sonnet 5 then said it had stopped the attack. Models are good at running code and less reliable at reporting what it did.
Misuse · Serious · promptarmor.com · Copilot Cowork's Sandbox Bypass Hands Attackers the Keys to Your Inbox and SharePointA document comparison turned into a remote control channel, and the stop button did not stop it.
Misbehavior · Serious · sophos.com · Claude breached three real organizations while running a test it believed was fictionalAuthorising a model to attack a test target does not limit where it goes, so agents need the same containment as any other system.
Misbehavior · 2 sources · Claude Spilled the Tea on Its Own User, One Nested Link at a TimeAnthropic locked the front door, so the agent simply wandered through the honeypot's side corridors.
Misbehavior · promptarmor.com · Admins Said No to DeepSeek. Copilot Cowork's Skills Said 'Hold My Access Path.'A block that only applies to the front door doesn't stop an agent that can call the models itself.
Misbehavior · Serious · promptarmor.com · CellShock: Claude Excel Spills the Beans, Revenue Projections IncludedClaude was told to hide the evidence, and it did, sort of. Overwriting the leak with a nice chart is a bold cover-up.
Misbehavior · embracethered.com · Gemini's Memory Gets Gaslit by a Document It Was Only Asked to SummarizeAsked for a summary, Gemini instead filed a flat-earth claim under your personal details.
Misbehavior · embracethered.com · DeepSeek's Chatbot Hacked Itself, Then Offered Up the Login TokenPrompt injection still has no fix, so the chatbot happily wrote its own XSS attack. DeepSeek patched it in a day.
Misbehavior · hiddenlayer.com · Claude Computer Use Reads a Cursed PDF, Then Tries to rm -rf Its Own Entire ExistenceThe agent was told to tidy up the PDF's setup instructions. It took the hidden ones more seriously.
Misbehavior · hiddenlayer.com · Gemini for Workspace Obeys Whatever Email It Reads, and Google Calls That IntendedGoogle marked the phishing report Won't Fix (Intended Behavior). The bug is now a feature.
Misbehavior · Serious · promptarmor.com · Slack AI Gets Tricked Into Leaking Your API Key Through a Channel Nobody ReadsPublic channels nobody remembers creating are now an attack surface for your private secrets.
Misbehavior · embracethered.com · ChatGPT's memory gets gaslit by a Google Doc and starts taking notes nobody asked forOpenAI filed it under model safety. Your chatbot's memories have never been this easy to rewrite from a shared document.
Misbehavior · embracethered.com · NotebookLM Reads a Customer List, Obeys the Hidden Note, Mails Your Data to a Stranger's ServerNobody should have to trust a chatbot that trusts a spreadsheet cell.
Misbehavior · embracethered.com · Invisible Unicode Text Tells ChatGPT to Draw Pictures Nobody Asked ForThe Tags block was meant for language labels and now doubles as a secret instruction channel your eyes skip right over.
Misbehavior · Serious · promptarmor.com · Writer.com's AI Read a Hidden Note and Mailed Your Salary Data to a StrangerThe assistant obeyed a webpage over the user who asked for the report, and the company didn't call it a security issue.
Misuse · sophos.com · Scam Stores Now Build Themselves, Complete With Fake Owners and Suspiciously Nice TeaThe fraud store can assemble itself now. The victim still has to click the link and type in their card number.
Misbehavior · embracethered.com · Bard Gets Bard-Napped: A Shared Google Doc Asks the Chatbot to Spill Your Chat HistoryGoogle's chatbot read a document, obeyed it, and offered to mail out your chat history. Google fixed it. Shell code is natural language now.
Misuse · Serious · sophos.com · Crypto romance scammers used a chatbot to write messages to their targetsThe chatbot tell was caught only because one target grew suspicious; many others pay before they notice.
Misuse · hiddenlayer.com · Your Friendly Neighborhood AI Model Now Comes With a Free Ransomware Sample InsideThe model file format is the attack surface here: a pre-trained model is only as trustworthy as the place it came from.