Archive (Page 2) • AI Sec News

AI Coding Tools are Becoming a New Persistence Layer

May 4, 2026

AI coding tools are becoming a new persistence layer” AI Sec News Weekly #7 — 240 sources scanned We’ve been busy threat-modeling dependencies and pipelines,...

Shai-Hulud worm rode @bitwarden/cli 2026.4.0, abusing GitHub Actions secrets

April 27, 2026

Shai-Hulud worm rode @bitwarden/cli 2026.4.0, abusing GitHub Actions secrets AI Sec News Weekly #6 — 204 sources scanned When did 'npm install' become a...

AI Tools Are Reading… and Writing Back

April 20, 2026

Your AI Tools Are Reading… and Writing Back AI Sec News Weekly #5 — 161 sources scanned When we call something “read-only,” do we stop questioning what it...

Anthropic's Mythos Model Claims 72% Zero-Day Exploit Rate. Now what?

April 14, 2026

Anthropic's Mythos Model Claims 72% Zero-Day Exploit Rate AI Sec News Weekly #4 — 214 sources scanned There's a useful heuristic in security economics: a...

Claude Code's Permission System Flipped by Prompt Injection

April 7, 2026

Claude Code's Permission System Flipped by Prompt Injection AI Sec News Weekly #3 — 221 sources scanned There's a quiet assumption baked into most agent...

Cisco Breached After Trivy Supply Chain Attack Hits AI Product Source

April 2, 2026

Cisco Breached After Trivy Supply Chain Attack Hits AI Product Source AI Sec News Weekly #2 – 194 sources scanned Supply chain attacks used to be a patience...

TeamPCP Backdoors LiteLLM on PyPI, Harvests Cloud Creds at Scale

March 25, 2026

Supply-chain attacks used to target what you depend on. Now they target what your AI depends on. There's a difference — and it matters more than most teams realize.