LIVE FEED
FIRST LOOK NVIDIA Launches OSAA and SAFE Open AI Security Framework // HIGH UK AI Security Institute Reports Security Incident INC-2026-07-28 // FIRST LOOK Microsoft Launches Zero Trust for AI Agent Security Tools // FIRST LOOK Varonis Launches Agent IBAC to Constrain AI Agent Actions at Runtime // CRITICAL DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm // CRITICAL CVE-2026-44827: Hugging Face Diffusers RCE Bypasses Trust Gate // FIRST LOOK Sprocket Launches AI Agent for Hardware and Software Dev // FIRST LOOK OpenAI Astra Model Solves 10 Open Math and CS Problems // FIRST LOOK CrowdStrike Falcon AIDR Adds Coverage for Copilot Studio and Claude Code // FIRST LOOK LLM CLI Tool Adds OpenAI Endpoint Command for Any AI Backend //
CREDENTIAL-STEALER

Credential-Stealer

3 reports
All LLM Security Agentic AI Industry News Supply Chain Research Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Governance AI Security Tools Deep Signal Intelligence Report Security Operations
Miasma Worm Compromises 73 Microsoft NPM Packages for AI Agents

Miasma Worm Compromises 73 Microsoft NPM Packages for AI Agents

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 8.5 Ars Technica Security

Seventy-three Microsoft-hosted open source packages were compromised with the Miasma credential-stealing worm, which activates specifically when developers open packages inside AI coding agents. The malware, attributed to threat actor TeamPCP, exploits legitimate OIDC token workflows and SLSA provenance attestation to bypass supply-chain integrity checks and spread laterally across cloud infrastructure. This marks the second such compromise of an official Microsoft repository in as many months, indicating a sustained campaign targeting developer toolchains and the AI-assisted development pipeline.

CVE-2026-45321: Supply Chain Worm Targets Mistral AI

CVE-2026-45321: Supply Chain Worm Targets Mistral AI

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 The Hacker News

The TeamPCP threat actor has executed a broad supply chain campaign dubbed Mini Shai-Hulud, injecting credential-stealing malware into npm and PyPI packages from major AI and developer tooling ecosystems including Mistral AI, Guardrails AI, and TanStack. The malware profiles execution environments, exfiltrates cloud, CI, and AI tool credentials, and establishes persistence inside Claude Code and VS Code IDEs. The TanStack compromise alone affected 42 packages and 84 versions, exploiting a chained GitHub Actions attack to inject malicious payloads without stealing npm tokens directly.

PyTorch Lightning Package Backdoor Steals Developer Credentials

PyTorch Lightning Package Backdoor Steals Developer Credentials

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 8.5 BleepingComputer

A malicious version of PyTorch Lightning (v2.6.3) was published to PyPI, embedding a hidden execution chain that silently downloads a JavaScript runtime and executes a heavily obfuscated credential-stealing payload dubbed 'ShaiWorm'. The attack targeted AI/ML developers who use this popular deep learning framework, exposing cloud credentials, API keys, browser-stored secrets, and GitHub tokens. The package has since been reverted to a safe version, but any developer who imported the compromised version should rotate all secrets immediately.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.