LIVE FEED
CRITICAL LiteLLM PyPI Supply Chain Attack Drops Info-Stealer Malware // FIRST LOOK Walmart Opens Platform to AI Shopping Agents With Spend Controls // CRITICAL AI Agent ARTEX Weaponised in ConnectWise Supply Chain Breach // FIRST LOOK 1Password Launches Agent Login Tool That Shields Credentials // FIRST LOOK Anthropic Claude Launches Automated Attack Surface Reduction for Code // FIRST LOOK Anthropic Proposes AI Safety Bill with Model Block Powers // HIGH Rogue AI Agents Read Indian Org Data via Exposed Credentials // FIRST LOOK Microsoft Launches Guardian Agents to Monitor AI Agent Behaviour // FIRST LOOK NVIDIA Launches Nemotron 3.5 Super VL and Bolt Agent Models // FIRST LOOK Laminar YC S24 Launches flow-1 for AI Agent Trace Analysis //
INFO-STEALER

Info-Stealer

2 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
LiteLLM PyPI Supply Chain Attack Drops Info-Stealer Malware

LiteLLM PyPI Supply Chain Attack Drops Info-Stealer Malware

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 BleepingComputer

Attackers compromised LiteLLM's release pipeline, injecting credential-stealing malware into PyPI version 1.107.0 and multiple Docker images, exposing a project with 92 million monthly downloads. The malicious payload was silently executed at Python startup via crafted .pth and sitecustomize.py files, harvesting credentials, secrets, and environment variables before the host application could run. The incident highlights the acute risk of AI/ML tooling supply chains as high-value targets, given LiteLLM's deep integration into enterprise AI infrastructure at companies including NVIDIA, Netflix, and Okta.

Fake Claude App via Bing Ads Delivers SectopRAT Malware

Fake Claude App via Bing Ads Delivers SectopRAT Malware

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 7.2 BleepingComputer

Attackers exploited Bing's ad platform and Anthropic's legitimate Claude.ai domain to distribute a fake Claude desktop installer laced with SectopRAT, a feature-rich remote access trojan with info-stealing and HVNC capabilities. The campaign, dubbed FakeAgent, compromised at least 29 organisations in a 48-hour window by abusing Claude Artifacts as a trusted hosting vector — a novel AI platform abuse technique. The incident highlights how threat actors are weaponising AI brand trust and legitimate AI infrastructure as malware delivery mechanisms.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.