Congress Is Suddenly Waking Up to the AI Doomsday Threat19m ago The AI safety vibe shift1h ago Sam Altman met with top power utilities about securing the electrical grid. He offered one possible solution: OpenAI's cyber services.1h ago OpenAI Is Open to Slowing Cutting-Edge AI, CEO Sam Altman Tells Staff2h ago Tencent-Backed Chipmaker Enflame Jumps 188% in Shanghai Debut2h ago Salesforce introduces Enterprise AI Harness, AI Control Plane2h ago The Race for the Next Big Weight-Loss Drug Is On—and China Wants In2h ago How Social Media Platforms Are Identifying AI Content3h ago DeepSeek launches V4.1-Flash and retires V4-Pro, its flagship model3h ago OpenAI Wants to Know if an AI Industry Slowdown Would Even Be Legal3h ago Oracle Posts Cloud Sales That Top Estimates on AI Demand3h ago iPhone 18 Pro Max vs Samsung Galaxy S26 Ultra: How these XL phones compete3h ago AWS open-sources Pizza Bot: email-style inbox for background AI agents4h ago ToolGrad: Efficient tool-use dataset generation with textual "gradients"4h ago

Congress Is Suddenly Waking Up to the AI Doomsday Threat19m ago The AI safety vibe shift1h ago Sam Altman met with top power utilities about securing the electrical grid. He offered one possible solution: OpenAI's cyber services.1h ago OpenAI Is Open to Slowing Cutting-Edge AI, CEO Sam Altman Tells Staff2h ago Tencent-Backed Chipmaker Enflame Jumps 188% in Shanghai Debut2h ago Salesforce introduces Enterprise AI Harness, AI Control Plane2h ago The Race for the Next Big Weight-Loss Drug Is On—and China Wants In2h ago How Social Media Platforms Are Identifying AI Content3h ago DeepSeek launches V4.1-Flash and retires V4-Pro, its flagship model3h ago OpenAI Wants to Know if an AI Industry Slowdown Would Even Be Legal3h ago Oracle Posts Cloud Sales That Top Estimates on AI Demand3h ago iPhone 18 Pro Max vs Samsung Galaxy S26 Ultra: How these XL phones compete3h ago AWS open-sources Pizza Bot: email-style inbox for background AI agents4h ago ToolGrad: Efficient tool-use dataset generation with textual "gradients"4h ago

Cybersecurity Dev3 min reading time

AI coding agents followed abandoned package references, 6K domains analyzed

Hacker NewsPublished 11 days ago

Researchers analyzed over 6,000 domains and found 120 unclaimed package or domain references in llms.txt files used by AI coding agents. These stale references could allow attackers to register the names and deploy malicious packages, potentially compromising corporate systems. An experiment showed that Fortune 500 companies' systems contacted these malicious packages within an hour, highlighting a new software supply-chain attack vector.

#ai-coding-agents #claude #fortune-500 #hermes #nous-research #openai-codex #package-management #software-supply-chain

More in Cybersecurity

Cybersecurity10 min read

Anthropic Details Disrupted Claude Misuse Across Seven Harm Areas

Covered by 4 sources9h ago

Cybersecurity4 min read

Sam Altman met with top power utilities about securing the electrical grid. He offered one possible solution: OpenAI's cyber services.

Covered by 2 sources5h ago

Cybersecurity6 min read

Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

TechCrunch9h ago