Klaimee

Disclosure comes after OpenAI and Anthropic hacks amid fears that tech firms unable to control powerful AI models

US cybersecurity researchers who conducted hack say 'scope of what we could theoretically access was huge'

Plugin4Shell is a zero-click, high-severity RCE affecting all four major AI coding agents - Claude Code, Codex, Copilot, and Gemini. In this first-of-its-kind AI supply-chain attack, a trusted plugin is silently swapped for a malicious one and auto-instal

Enterprise AI security risks are growing as attackers exploit AI agents, supply chains, prompt injection, and weak access controls.

Mandiant says an attacker hijacked an active AI coding session, stole GitHub OAuth tokens, and spread Shai-Hulud across about 100 repositories.

Mandiant documented an attacker hijacking an active AI coding-assistant session at a SaaS provider, installing an infostealer through a poisoned PyPI package, stealing GitHub OAuth tokens, and spreading the Shai-Hulud worm across about 100 internal reposi

Research on aligning AI with human values and intent, and reports documenting model failures.

Research on aligning AI with human values and intent, and reports documenting model failures.

Research on aligning AI with human values and intent, and reports documenting model failures.

PhantomFix (CVE-2026-90999) is a critical vulnerability in Sentry Seer's autonomous autofix: a fabricated error report sent to a public DSN can reach the coding agent and lead to code execution and access to connected repositories. It's a concrete instanc