High-signal AI/security/automation notes.
A new cloud-focused malware framework called PCPJack scans for exposed services and steals credentials including OpenAI and Anthropic API keys, while actively removing rival TeamPCP infections.
A new banking trojan called TCLBanker uses a trojanized Logitech AI Prompt Builder MSI installer to infect systems, demonstrating how AI tool branding is weaponized for initial access.
A fake Claude AI website distributes a trojanized installer that deploys the Beagle backdoor, targeting developers who work with AI coding tools.
New benchmark shows nine production coding agents from Anthropic, OpenAI, and Google compose innocuous tickets into exploitable code at 53–86% success rate, bypassing per-prompt safety reviews.
pnpm 11 enforces a 24-hour minimum release age for new packages by default, reducing risk from typosquatting and supply-chain attacks that target automated installs.
Critical sandbox escape in the vm2 Node.js library (1.3M+ weekly downloads) enables arbitrary host code execution via WebAssembly exception handling bypass; PoC exploit published.
New arXiv paper introduces an agentic red teaming system built on the Dreadnode SDK that automates attack selection, transform composition, and reporting — achieving 85% attack success against Llama Scout with zero human-written code.
New paper presents a tool-mediated LLM architecture for autonomous SOC operations, with machine-checked Lean 4 proofs guaranteeing stability — Claude Sonnet 4 reduces attacker payoff by 59% on 282 real enterprise attack graphs.
Varonis discovers Bluekit, a phishing kit under active development that embeds an AI assistant (Llama, GPT-4.1, Claude Sonnet 4, Gemini) alongside voice cloning and automated domain registration.
Material Security research finds 45% of organizations do nothing to monitor OAuth grants at scale, as AI tool proliferation creates persistent, invisible access tokens that bypass MFA and survive employee departures.
80% of security leaders flag unmanaged OAuth grants as critical risk, yet 45% of orgs do nothing to monitor them — AI tool proliferation makes this an urgent AI-ops security gap.
Critical unpatched RCE in PAN-OS User-ID Authentication Portal (CVSS 9.3) is being actively exploited; over 5,800 VM-Series firewalls exposed online, many protecting AI inference and training infrastructure.
A new ProjectDiscovery report finds that 60% of security practitioners struggle to keep up with the volume of AI-generated code, with secrets leakage and supply-chain risks as top concerns.
Trend Micro analyzes QLNX, a Linux rootkit/backdoor targeting developer workstations with credential theft across npm, PyPI, GitHub, AWS, Docker, and Kubernetes — enabling AI/ML supply-chain attacks.
Chrome 148 defaults to silently downloading a 4 GB on-device AI model and exposes it to any webpage through the Prompt API, raising privacy and consent questions for millions of users.
Benchmarking shows vision-based computer-use agents consume 45x more tokens than structured API agents, with high variance and failure rates that demand step-by-step prompt engineering.
Google overhauls Android and Chrome vulnerability rewards, scaling back payouts for AI-easier bugs while offering up to $1.5M for the hardest exploit chains.