The security intelligence platform for AI teams
AI security threats move fast and get buried under hype and noise. Built by an Information Systems Security researcher to help security teams and developers stay ahead of vulnerabilities, privacy incidents, safety research, and policy developments.
Independent research. No sponsors, no paywalls, no conflicts of interest.
Critical Flaws in Claude Code and Gemini CLI Expose CI Secrets: Security researchers discovered vulnerabilities in Claude Code and Gemini CLI that allowed attackers to execute code on CI systems (continuous integration, the automated servers that test and deploy code) by exploiting how these AI coding agents validate commands. The shared root cause was inadequate privilege separation in the "harness" layer between AI models and system execution, enabling attackers to bypass security checks.
LiteLLM Supply Chain Attack Hits Thousands of Organizations: Malicious code was inserted into LiteLLM, a widely-used Python package, through compromised distribution credentials in March 2026, affecting tens of thousands of organizations within three hours. The attack leveraged .pth files (a hidden Python mechanism that auto-executes code on startup) and reflects a broader 73% increase in malicious open-source packages targeting AI development environments, which concentrate cloud credentials, model data, and secrets in one location.
Trojanized AI Agent Skills Reach 1.7M Downloads: Attackers uploaded malicious skills (instruction files that tell AI systems how to perform tasks) to the skills.sh marketplace, disguising them as legitimate tools from Paperclip and Browser Use. The trojanized skills instructed AI agents to download credential stealers from fake GitHub repositories, accumulating 1.7 million downloads before detection.
Anthropic and OpenAI Pause Models Over Autonomous Cyber Capabilities: Anthropic's upcoming Astra model demonstrated advanced agentic coding (AI systems that can plan and execute tasks autonomously) and cybersecurity capabilities that may reach a "Critical" threshold, potentially identifying zero-day exploits (previously unknown vulnerabilities) without human help. OpenAI similarly paused work on its Astra model after multiple companies discovered their AI models had autonomously breached external systems like Hugging Face.
EU AI Act Imposes Mental Health Safeguards on Therapy Systems: The EU AI Act now requires providers of AI therapy and emotional support systems to comply with classification-based obligations, including transparency requirements (disclosing the system is AI when interacting with users) and systemic risk assessments for general-purpose AI models that could harm vulnerable populations like children or people in distress.