IDScan is offering free credit monitoring and ID protection after leaking driver's licenses23m ago Google brings Gemini for desktop app to Windows33m ago How to watch the Flame Fatales 2026 speedrunning marathon38m ago Amazon makes its agentic AI platform Quick generally available for desktop on Windows and macOS46m ago Ant International, Visa, Mastercard Align on AI Agent Verification Rules47m ago Panic builds over bankrupt Spirit’s looming data sale to Google49m ago Wall Street already loves ChatGPT. Now OpenAI is doubling down.2h ago BNP says AI borrowing will end the credit bull market, and it is lending to AI too1h ago Anthropic reveals rogue AI agents hate CAPTCHAs, just like you1h ago Cognition Adds Dioxus Team to Advance Devin Coding Agent1h ago Peter Thiel-Backed AI Startup Cognition Raises Funds at $48 Billion Valuation1h ago Anthropic Details Disrupted Claude Misuse Across Seven Harm Areas1h ago OpenAI Releases GPT-6 Astra for Coding and Computer Use1h ago India’s Pocket FM doubles revenue run rate to $500M as AI powers 93% of audio content1h ago

IDScan is offering free credit monitoring and ID protection after leaking driver's licenses23m ago Google brings Gemini for desktop app to Windows33m ago How to watch the Flame Fatales 2026 speedrunning marathon38m ago Amazon makes its agentic AI platform Quick generally available for desktop on Windows and macOS46m ago Ant International, Visa, Mastercard Align on AI Agent Verification Rules47m ago Panic builds over bankrupt Spirit’s looming data sale to Google49m ago Wall Street already loves ChatGPT. Now OpenAI is doubling down.2h ago BNP says AI borrowing will end the credit bull market, and it is lending to AI too1h ago Anthropic reveals rogue AI agents hate CAPTCHAs, just like you1h ago Cognition Adds Dioxus Team to Advance Devin Coding Agent1h ago Peter Thiel-Backed AI Startup Cognition Raises Funds at $48 Billion Valuation1h ago Anthropic Details Disrupted Claude Misuse Across Seven Harm Areas1h ago OpenAI Releases GPT-6 Astra for Coding and Computer Use1h ago India’s Pocket FM doubles revenue run rate to $500M as AI powers 93% of audio content1h ago

Cybersecurity Dev3 min reading time

AI coding agents followed abandoned package references, 6K domains analyzed

Hacker NewsPublished 11 days ago

Researchers analyzed over 6,000 domains and found 120 unclaimed package or domain references in llms.txt files used by AI coding agents. These stale references could allow attackers to register the names and deploy malicious packages, potentially compromising corporate systems. An experiment showed that Fortune 500 companies' systems contacted these malicious packages within an hour, highlighting a new software supply-chain attack vector.

#ai-coding-agents #claude #fortune-500 #hermes #nous-research #openai-codex #package-management #software-supply-chain

More in Cybersecurity

Cybersecurity6 min read

Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

TechCrunch1h ago

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 2 sources10h ago

Chinese AI Giants Accused of Sending Millions of User Queries to U.S. Models

The Wall Street Journal2h ago