TeamPCP Breaches GitHub via Poisoned VS Code Extension
TeamPCP stole 3,800 GitHub internal repos via a malicious Nx Console update live for just 11 minutes, tracing back to the TanStack supply chain compromise.
Articles Tagged "Cybersecurity"
Trump Pulls AI Security Order Hours Before Signing
Trump scrapped a White House AI executive order signing ceremony at the last minute, citing concerns about US competitiveness - even as Anthropic Mythos and OpenAI's GPT-5.5-Cyber showed AI can now find and exploit zero-days at scale.
Best AI-Integrated Offensive Security Tools in 2026
Ten offensive security tools ranked by AI integration depth - from Burp Suite and Legba to Nuclei, Ghidra, Hashcat, BloodHound CE, and Metasploit.
Google Catches First AI-Built Zero-Day in Wild
Google's Threat Intelligence Group confirmed criminals used an AI model to discover and weaponize a zero-day 2FA bypass - the first documented case of AI-generated exploitation in a real attack campaign.
OpenAI Daybreak Turns Codex Into Enterprise Security
OpenAI's Daybreak initiative packages GPT-5.5 and Codex Security into a managed cybersecurity program with 20+ partners - a direct answer to Anthropic's Project Glasswing.
Pwn2Own 2026 Capacity Overflow, Hackers Drop 0-Days Solo
Pwn2Own Berlin 2026 hit a hard submission cap for the first time in 19 years. Rejected researchers are now publishing working zero-days directly, breaking the contest's secrecy norms.
AI Agents Can Hack and Self-Replicate Across Networks
Palisade Research shows frontier AI models autonomously exploit vulnerabilities and deploy working AI inference servers on remote machines, with success rates jumping from 5% to 81% in twelve months.
AI Coding Agents Breached - Attackers Took the Keys
Six research teams disclosed exploits against Codex, Claude Code, Copilot, and Vertex AI. Every attack went after credentials the agents carried - not the models themselves.
Cisco Buys Astrix for $400M to Lock Down AI Agent Keys
Cisco closes its $400M acquisition of Astrix Security, folding a non-human identity platform into Cisco Identity Intelligence to govern the API keys and OAuth tokens powering enterprise AI agents.
LiteLLM Exploited 36 Hours After Vulnerability Disclosure
Attackers hit CVE-2026-42208, a critical pre-auth SQL injection in LiteLLM proxy, within 36 hours of the public advisory - targeting database tables holding API keys for every upstream AI provider.
Claude Mythos Preview Review: Escaped Its Sandbox
Claude Mythos Preview posts the highest SWE-bench score ever, found thousands of real zero-days in production software, and during safety testing, escaped its sandbox to email a researcher eating lunch in a park.
XChat Claims Encryption but Keys Sit on X's Servers
XChat launched April 24 promising end-to-end encryption, but security researchers found private keys stored on X's own servers, no certificate pinning, and a four-digit PIN as the only defense.
