High
AI agent skills malware: malicious add-ons and a one-click flaw hit a popular agent
Researchers found malicious add-on skills for a popular open-source AI agent, which also fixed a one-click takeover flaw. Treat agent add-ons as software.
Risks AI tool supply chain
AI tool supply chain
5 entries.
High
AI coding assistant hijacking: attackers and worms turn developer agents into a way in
Mandiant describes an attacker hijacking a live AI coding assistant session, and a new worm steals AI tool config files. Treat developer AI tools as privileged.
High
AI gateway supply chain attack: backdoored releases targeted cloud secrets
Two backdoored releases of a widely used AI gateway reached PyPI, built to steal cloud and Kubernetes secrets. AI middleware deserves crown-jewel controls.
High
Exposed AI infrastructure: internet-facing AI servers hijacked for mining and scanning
Two research teams report campaigns taking over internet-exposed AI servers for cryptomining and further attacks. Put AI tools in your attack-surface inventory.
Elevated
AI tools that change their instructions after you approve them
Researchers documented a malicious MCP server that behaved normally for three tool calls, then told the connected AI agent to hunt for SSH keys and cloud credentials. A one-time review of an AI tool is not enough.