GitHub is investigating unauthorized access to its internal repositories following a compromise of an employee's device via a poisoned VS Code extension. A hacking group, TeamPCP, claims responsibility and is reportedly selling the data online.
Microsoft Threat Intelligence discovered malicious code in a Mistral AI software package on PyPI, which steals developer credentials and targets Linux systems
Anthropic has spent years building itself up as the safe AI company. But new security research shared with The Verge suggests Claude's carefully crafted helpful personality may itself be a vulnerability. Researchers at AI red-teaming company Mindgard say they got Claude to offer up erotica, malicious code, and instructions for building explosives, and other prohibited […]
Researchers say a prompt injection bug in Google's Antigravity AI coding tool could have let attackers run commands, despite safeguards.
