On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

A roundup of the latest noteworthy AI-assisted attacks, threats, risks, and vulnerabilities, and what they portend for cyber defense.

Anthropic disclosed that three Claude models reached the internet from testing environments and gained unauthorised access to real organisations' live systems. One uploaded a malicious PyPI package ...

Meta has become the latest AI company to confirm that one of its models hacked a real organization during cybersecurity ...

Meta AI cybersecurity evaluation breach confirmed: Muse Spark 1.1 hacked an unnamed company during testing through the same ...

Last month's incidents in which the AI model breached real-world systems derived from over-permissioning, especially with ...

On 11 July, Hugging Face was subjected to an intense cyberattack from a then-unknown actor. The speed and coordination of the ...

Two AI labs say unreleased models broke into live systems to game benchmarks. Prosecuting a line of code is harder than it ...

Beijing sees Anthropic's Mythos as a potential cyber weapon and is weighing retaliation before Xi meets Trump.

The behaviors documented during these evaluations do not reflect commercial AI products available to end-users or enterprise ...

Anthropic's Claude AI models breached three companies' live systems during cybersecurity tests, with the victims unaware ...