This Is How Your LLM Gets Compromised

Plainly speaking, Artificial intelligence is no longer a fringe technology. It has become a core component of modern business, from customer service chatbots to complex data analysis. We often treat the Large Language Models (LLMs) that are at the core Read More …

“Shai-Hulud” Worm Compromises npm Ecosystem in Supply Chain Attack

Palo Alto Networks Unit 42 is investigating an active and widespread software supply chain attack targeting the Node Package Manager (npm) ecosystem. A novel, self-replicating worm, which is currently being tracked as “Shai-Hulud,” is responsible for the compromise of over Read More …

RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT

RevengeHotels, also known as TA558, is a threat group that has been active since 2015, stealing credit card data from hotel guests and travelers. RevengeHotels’ modus operandi involves sending emails with phishing links which redirect victims to websites mimicking document Read More …

Hackers are now hiding malware in the images served up by LLMs

As AI tools become more integrated into daily work, the security risks attached to them are also evolving in new directions. Researchers at Trail of Bits have demonstrated a method where malicious prompts are hidden inside images and then revealed Read More …

Carnegie Mellon researchers show how LLMs can be taught to autonomously plan and execute real-world cyberattacks

In a groundbreaking development, a team of Carnegie Mellon University researchers has demonstrated that large language models (LLMs) are capable of autonomously planning and executing complex network attacks, shedding light on emerging capabilities of foundation models and their implications for Read More …

Preventing Zero-Click AI Threats: Insights from EchoLeak

EchoLeak (CVE-2025-32711) is a newly identified vulnerability in Microsoft 365 Copilot, made more nefarious by its zero-click nature, meaning it requires no user interaction to succeed. It demonstrates how helpful systems can open the door to entirely new forms of Read More …

Israel: Unit 8200 created AI language learning tool from intercepted Palestinian Arabic comms

Israel’s military surveillance Unit 8200 has reportedly developed a vast database of intercepted Palestinian communications in order to construct an artificial intelligence tool similar to ChatGPT, a joint investigation by The Guardian, +972 Magazine and Mekomit alleged on Thursday. Israel Read More …

DeepSeek has rattled the AI industry. Here’s a quick look at other Chinese AI models

The Chinese artificial intelligence firm DeepSeek has rattled markets with claims that its latest AI model, R1, performs on a par with those of OpenAI, despite using less advanced computer chips and consuming less energy. DeepSeek’s emergence has raised concerns Read More …

Chinese tech startup DeepSeek says it was hit with ‘large-scale malicious attacks’

Chinese tech startup DeepSeek said it was hit by a cyber attack on Monday that disrupted users’ ability to register on the site. The company, whose artificial intelligence chatbot has sent the tech world into a frenzy, said that it Read More …