Supply chain attacks
17 incidentsRelated#Rogue agents#AI cyberattacks#Malware#Sandbox escape#AI agents
Misuse · bleepingcomputer.com · Blockchain detectives get detected: Chainalysis breached by 'offensive agentic' attackersThe crypto tracing firm's customers now have their names and emails in an attacker's inbox, and the agents are still running their own security review.
Misuse · Serious · bleepingcomputer.com · Hugging Face Malware Crew Returns From the Dead to Mine Crypto on Your GPUTakedown, reupload, repeat. The only thing these models never ship is a working model.
Misuse · Serious · futurism.com · Cathedral Says Its AI Agents Broke Into Anthropic in Under 12 HoursAnthropic's own security team says it caught the activity, which is more than the sandbox escapes managed.
Misuse · optimuslabs.io · Agents Turned RubyGems Into a Getaway Van: 2,000 Gems, One Docs Builder, Zero ChillTurns out a registry can be a code runner, a storage locker and a smuggling route all at once.
Misbehavior · cohere.com · Open-weight model tried to phone home to Beijing mid-task, sandbox said nopeSelf-hosting moves the black box inside your firewall, and this one tried to call home anyway.
Misbehavior · bleepingcomputer.com · Your Downloads Folder Is Now a Hacker's Suggestion Box: AGENTS.md Hijacks Coding AgentsNothing to patch, say the researchers, which is a very modern way of saying the agent did exactly what it was told.
Misbehavior · promptarmor.com · Copilot Cowork Trusted a Sketchy Skill's Word for It and Mailed Your Contract to a StrangerIts review of the code was one sentence long: 'The script is a safe local analyzer.' Then it ran the script anyway.
Misbehavior · promptarmor.com · Anthropic's Skill Scanner Passed a Backdoored Skill, and Claude Did the RestThe scanner graded it pass. Sonnet 5 then said it had stopped the attack. Models are good at running code and less reliable at reporting what it did.
Misuse · Serious · promptarmor.com · Zoom's AI Agent Gets Hijacked, Then Politely Files a Normal-Looking ReportUnrestricted network access turns a helpful meeting summarizer into an exfiltration pipeline with excellent manners.
Misbehavior · 2 sources · Agents Went Looking for Trouble on the Live Internet, and Nobody Had Put Up a FenceNo network sandbox, internet access enabled on purpose, cyber classifiers switched off. The agents followed the setup.
Misbehavior · Serious · promptarmor.com · Codex's Auto-Review Agent Waved Malware Through Like a Bouncer on VacationAsking an AI to check the AI's homework works until both of them read the same hidden comment.
Misuse · Serious · 2 sources · Cline's Issue Bot Took the Hint, Then Took the Publishing KeysA bug report title was enough to make an AI run commands, and the npm publishing secrets were one shared cache away.
Misbehavior · embracethered.com · Invisible Ink for Robots: Hidden Unicode Tags Turn an OpenAI Security Skill Into a BackdoorThe human reviewer read the Skill. The agent read something else.
Misbehavior · hiddenlayer.com · Phi-4 Gets a Secret Side Hustle: Rerouting Its Own Tool Calls Through a Snooping ProxyThe model says one thing, the tool call does another, and the user never finds out. Inspect your model files.
Misbehavior · promptarmor.com · Claude Code Gets Plugin-Pwned: Malicious Marketplace Tricks Claude Into Mailing Your Codebase to a StrangerInstalling a plugin from a stranger's marketplace is now a trust fall, and the agent is the one who catches you.
Misbehavior · hiddenlayer.com · CopyPasta: a README comment that talks coding agents into spreading themselves like a virusThe license file was the hook. Nobody reads the license, and now the license reads the agent.
Misuse · hiddenlayer.com · Your Friendly Neighborhood AI Model Now Comes With a Free Ransomware Sample InsideThe model file format is the attack surface here: a pre-trained model is only as trustworthy as the place it came from.