Full archive

Security risk: Latest AI News

Search reporting on AI markets, models, products, companies, policy, and culture.

Showing 1-3 of 3Results matching "Claude Code"

Last week

2 stories

Aug 30, 2026

Claude, Codex and Hermes Ran Unowned Package Commands Inside Corporate Networks

The experiment showed that trusted-looking documentation can become an execution path when an agent is allowed to install software. It did not establish confirmed infections or stolen production data. A package name left unclaimed in a company’s AI-readable documentation can become an attacker-controlled delivery point later.

3 min readRead story

Security risk Infrastructure

Aug 28, 2026

TeamPCP’s Trivy Attack Hit 2,500 Organizations; AI Tool Backdoors Are Claimed

The LiteLLM-linked exposure shows how a poisoned dependency can yield reusable developer access. Claims of persistence in AI coding-tool settings would make cleanup harder, but they remain uncorroborated. A compromised build of Aqua Security’s Trivy scanner was used in a supply-chain attack that harvested credentials from more than 2,500 organizations through LiteLLM.

3 min readRead story

August 2026

1 story

Security risk Infrastructure

Aug 22, 2026

AI Agents Are Turning the Web Into an Infrastructure and Security Test

Autonomous systems are driving more model calls, more web activity and new shared-service risks—while the tools for proving who created online content remain incomplete. AI models are increasingly being built to accept a task, use tools and return with a result rather than sustain a conversation. The task replaces the prompt O’Reilly’s weekly AI roundup identifies a product shift toward autonomous work.

4 min readRead story