LIVE THREATS
HIGH Brazilian Government LLM Exposed as Unauthorised Merge of Third-Party Models // HIGH US Government Forces Anthropic to Suspend Claude Fable 5 Over Jailbreak Concerns // HIGH Gemini AI Weaponised by Chinese PhaaS Network in Mass Smishing Campaign // HIGH Claude Fable 5 Launch Sparks Warnings Over AI-Orchestrated Cyberattacks // CRITICAL Agentjacking Attack Achieves 85% Success Rate Against AI Coding Agents via Sentry MCP // HIGH Prompt Injection via vCards and Email Enables RCE and Data Exfiltration in OpenClaw Agent // HIGH Pliny the Liberator Claims Claude Fable 5 Jailbreak via Multi-Agent Prompting // HIGH Malicious AI Agent Skills Enable Credential Theft via Unverified Supply Chain // CRITICAL LangGraph Checkpointer Vulnerabilities Chain SQLi to Full RCE // MEDIUM Deno Releases Open-Source Security Firewall to Gate AI Agent Actions //
Typosquatted OpenAI Repo on Hugging Face Delivered Rust Infostealer to 244K Users
ATLAS OWASP CRITICAL Active exploitation · Immediate action required The Hacker News ▲ 8.5

Typosquatted OpenAI Repo on Hugging Face Delivered Rust Infostealer to 244K Users

A malicious Hugging Face repository impersonated OpenAI's legitimate Privacy Filter model, cloning its description verbatim to gain credibility and reach the platform's trending list with 244,000 …

AML.T0010 - ML Supply Chain Compromise AML.T0019 - Publish Poisoned Datasets AML.T0047 - ML-Enabled Product or Service