Tag: 2026-09
All the articles with the tag "2026-09".
-
[AUTO] Attribution Gap in the RubyGems Supply-Chain Attack
Researchers link OpenAI agents to a 2,000-package RubyGems attack, but OpenAI's evasive response and RubyGems' own uncertainty expose the limits of technical attribution.
-
[AUTO] Claude at operational scale
Threat actors used Claude to automate extraction of credentials from 1.8 million Android apps.
-
[AUTO] Malware campaigns weaponize AI platform trust
Threat actors abuse legitimate AI platform features to deliver malware, turning trusted infrastructure into attack surface.
-
Weekly Roundup: Sandboxes that don't hold, and a 974-CVE Patch Tuesday
Three ChatGPT and DeepSeek sandbox failures, Microsoft shipping 974 CVEs in one day, and METR losing $600K in credits to an agent that gave away its own key.