GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...

Max-severity flaw in ChromaDB for AI apps allows server hijacking

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to ...

What we know about how the U.S. government uses spyware (and what we don't)

Critics of spyware, which can be used to remotely hack into phones, worry the Trump administration is eroding policies that ...
Memeburn

Microsoft Flagged Mistral AI Hack in PyPI Malware Supply Attack

Microsoft flagged a Mistral AI hack as a supply-chain attack that hid malware in a fake AI library on PyPI. Here's what ...

The First AI-Crafted Zero-Day Was Easy to Spot. The Next One May Not Be

Google reported the first confirmed AI-assisted zero-day exploit, raising new concerns about logic flaws, supply chain risk, ...
Dark Reading

LatAm Vibe Hackers Generate Custom Hacking Tools on the Fly

In the latest evolution of automated cyberattacks, 2 threat campaigns heavily leveraged AI agents to support attacks against ...
Computing

Criminals have already used AI to create a zero-day exploit

Researchers at Google say they have uncovered the first known case of hackers using AI to develop a zero-day cyber exploit.
Decrypt

Hackers Insert Malware Into Mistral AI Software Download

Microsoft Threat Intelligence said attackers placed malicious code inside a Mistral AI download distributed through a Python ...

Google Says Hackers Used AI to Build Zero-Day Exploit

Google says hackers used AI to help build a zero-day exploit targeting 2FA, raising concerns about AI-assisted hacking.
BeInCrypto

Google Catches First AI Zero-Day Exploit: A Warning Shot for Crypto Security?

Google's threat team caught the first live AI-built zero-day exploit, escalating the attacker-defender AI arms race.
Axios on MSN

AI-assisted hacking is already here, Google warns

Google says it has identified what may be the first known case where cybercriminals used AI to discover and weaponize a ...
Hosted on MSN

Google blocks first AI-made zero-day exploit before mass attack

First AI zero-day: Google identified and blocked an AI-generated zero-day exploit aimed at bypassing two-factor authentication in a widely used open-source admin tool. How it was found: Analysis ...