Red Hat AI 3.5 tackles the GPU queue that can stall AI pilots27m ago CNN Just Ran One of the Worst AI Puff Pieces We’ve Ever Seen in Our Lives About That “AI Actor” Tilly Northwood40m ago How Credit Genie keeps codebase docs fresh with OpenWiki41m ago Closing The Gap Between AI Ambition And Data Reality43m ago Universal Music is launching an AI music platform with ElevenLabs49m ago Top Pentagon Official Rejects Anthropic Researcher’s AI Warning2h ago Arlequin AI raises €28M to build novel AI models that learn complex relationships at scale53m ago SpaceX sues to block release of tax-break records for its Texas Terafab project53m ago Salesforce closes Fin and eyes $2bn Listen Labs, Business Insider reports54m ago Google brings Gemini for desktop app to Windows55m ago AI’s Hidden Apprenticeship Tax (And How Firms Can Avoid It)58m ago Abacus.AI Releases Three Open-Weight Smaug Models for Agentic Workloads1h ago Clay raises $115m at a $7.1bn valuation, more than double its 2025 price1h ago Before AI Agents Take Action, Enterprises Need A New Data Rule Book1h ago

Red Hat AI 3.5 tackles the GPU queue that can stall AI pilots27m ago CNN Just Ran One of the Worst AI Puff Pieces We’ve Ever Seen in Our Lives About That “AI Actor” Tilly Northwood40m ago How Credit Genie keeps codebase docs fresh with OpenWiki41m ago Closing The Gap Between AI Ambition And Data Reality43m ago Universal Music is launching an AI music platform with ElevenLabs49m ago Top Pentagon Official Rejects Anthropic Researcher’s AI Warning2h ago Arlequin AI raises €28M to build novel AI models that learn complex relationships at scale53m ago SpaceX sues to block release of tax-break records for its Texas Terafab project53m ago Salesforce closes Fin and eyes $2bn Listen Labs, Business Insider reports54m ago Google brings Gemini for desktop app to Windows55m ago AI’s Hidden Apprenticeship Tax (And How Firms Can Avoid It)58m ago Abacus.AI Releases Three Open-Weight Smaug Models for Agentic Workloads1h ago Clay raises $115m at a $7.1bn valuation, more than double its 2025 price1h ago Before AI Agents Take Action, Enterprises Need A New Data Rule Book1h ago

Cybersecurity Dev3 min reading time

AI coding agents followed abandoned package references, 6K domains analyzed

Hacker NewsPublished 11 days ago

Researchers analyzed over 6,000 domains and found 120 unclaimed package or domain references in llms.txt files used by AI coding agents. These stale references could allow attackers to register the names and deploy malicious packages, potentially compromising corporate systems. An experiment showed that Fortune 500 companies' systems contacted these malicious packages within an hour, highlighting a new software supply-chain attack vector.

#ai-coding-agents #claude #fortune-500 #hermes #nous-research #openai-codex #package-management #software-supply-chain

More in Cybersecurity

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 2 sources8h ago

Cybersecurity6 min read

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Covered by 2 sources10h ago

Cybersecurity5 min read

Every AI Incident Has Two Timelines. We Default To One

Forbes6h ago