The Wave

1. 6h agoWiz Research · research by NordStellarThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 6h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 6h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
2. 6h agoWiz ResearchBuilding an AI Detection Engine for Agent Intent | Wiz BlogWiz outlines its AI agent intent-detection pipeline, which uses model I/O telemetry, layered LLM analysis, and runtime correlation, validated against a simulated benchmark and referencing the OpenAI–Hugging Face incident.

   2 articles

   1. 6h agoWiz ResearchIntroducing Atlas: Wiz's AI vulnerability researcher | Wiz Blog
   2. 6h agoWiz ResearchEarliestBuilding an AI Detection Engine for Agent Intent | Wiz Blog

   Cyber22 linked
3. 6h agoWiz ResearchHow to Evaluate AI Agent Cybersecurity Capabilities | Wiz BlogWiz Research published a blog post explaining its principles for benchmarking AI agent cybersecurity capabilities, drawing on its Cyber Model Arena v3.9 results across 59 agents and 327 challenges.1 outletCyber4 linked
4. 6h agoWiz Research · research by Wiz“Black October” for AI Developer Platforms | Wiz BlogWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments.

   15 articles · 2 outlets · TechTarget

   1. 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
   2. 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
   3. 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
   4. 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
   5. 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
   6. 6h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
   7. 6h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
   8. 6h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
   9. 6h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
   10. 6h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
   11. 6h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
   12. 6h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
   13. 6h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
   14. 6h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
   15. 6h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz

   CyberAI169 linked
5. YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
6. YesterdayAnthropicWhen AI builds itselfAnthropic's Institute publishes internal and public-benchmark evidence that AI is accelerating its own development, and argues that recursive self-improvement could arrive sooner than institutions expect and that a verifiable coordinated slowdown should be an option.

   12 articles

   1. YesterdayAnthropicPolicy on the AI Exponential
   2. YesterdayAnthropicNatural Language Autoencoders
   3. YesterdayAnthropicInvestigating unintended model actions in our evaluations and internal use
   4. YesterdayAnthropicResponsible Scaling Policy Version 3.0
   5. YesterdayAnthropicTrustworthy agents in practice
   6. YesterdayAnthropicPickupThoughts on America’s AI Action Plan
   7. YesterdayAnthropicUnderstanding and addressing AI harms
   8. YesterdayAnthropicTeaching Claude why
   9. YesterdayAnthropicPetri: An open-source AI auditing tool
   10. YesterdayAnthropicLLMs and biorisk
   11. YesterdayAnthropicAnthropic’s Transparency Hub
   12. YesterdayAnthropicEarliestWhen AI builds itself

   AI236 linked
7. YesterdayAnthropicDetecting and countering misuse of AI: August 2025Anthropic released a threat intelligence report describing three cases of Claude being misused for data extortion, North Korean remote-worker fraud, and AI-generated ransomware sales, along with its countermeasures.1 outletCyberAI29 linked
8. 3d agoTechCrunchCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcriptsFireworks AI confirmed a cyberattack that exposed customer billing data and datasets, and Notion says the hackers also obtained chat transcripts from its Notion AI Insights users.

   2 articles · Gizmodo

   1. 3d agoTechCrunchEarliestCyberattack on Fireworks AI allowed hackers to access Notion customers’ chat transcripts
   2. YesterdayGizmodoPickupHackers Stole Thousands of Uber Drivers’ Data Through an AI Startup

   CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor13 linked
9. 3d agoPalo Alto Unit 42 · research by Palo Alto Networks Unit 42Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsUnit 42 reports Chinese-speaking attackers used the open-source Cairn AI pentesting framework, paired with Zhipu GLM and DeepSeek models, to run 25 autonomous intrusion operations against 19 organizations in August–September 2026.

   2 articles

   1. 3d agoPalo Alto Unit 42EarliestAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
   2. 3d agoCSO OnlinePickupPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks5 linked
10. 2d agoAnthropicAnthropic Economic Index report: Learning curvesAnthropic publishes findings from an open-ended survey of 81,000 Claude users, linking higher AI job-displacement concern to occupational exposure, early career stage, and the largest speedups.

    3 articles

    1. 2d agoAnthropicAnthropic Economic Index report: Learning curves
    2. 2d agoAnthropicEarliestWhat 81,000 people told us about AI economics
    3. 2d agoAnthropicMeasuring AI agent autonomy in practice

    112 linked
11. 2d agoAnthropicEnabling independent research on how people use ClaudeAnthropic reports a pilot in which three external research groups (Stanford SALT Lab, Oxford Human Information Processing Lab, and METR) ran independent studies on roughly 250,000 Claude conversations using its Anthropic Insights tool, and says it will publicly release the aggregate data while weighing whether to scale the program.1 outlet29 linked
12. 3d agoThe RegisterOpenAI launches security products, tells orgs they’re doomed if they don’t use themOpenAI unveiled Daybreak Red Team and Daybreak Defense Factory under its Daybreak security platform, arguing companies can only stay secure by using frontier AI models for defense, as a nonprofit coalition sued to block more capable AI development.1 outletCyberAI22 linked
13. 3d agoTechCrunchHugging Face CEO vows to keep fighting for open source AI after Jensen Huang’s exitHugging Face CEO Clément Delangue vowed to keep fighting for open-source AI after Nvidia CEO Jensen Huang's departure, as Nvidia's $12.9 billion Hugging Face acquisition remains pending.1 outletAI25 linked
14. 5d agoThe Record · research by FireworksAI company Fireworks says hackers stole data, billing info during October breachesFireworks AI disclosed a new breach where attackers used a compromised third-party cloud provider to reach its development machines and expose some customer billing data, metadata, and partial model weights.

    3 articles · 2 outlets · BleepingComputer

    1. 5d agoBleepingComputerEarliestFireworks AI discloses new breach after cloud provider hack
    2. 5d agoThe RecordPickupAI company Fireworks says hackers stole data, billing info during October breaches
    3. 3d agoBleepingComputerApify rotates API tokens, prompts 2FA resets after breach

    CyberAIFireworks AI breach exposes customer data at Uber, Notion and Cursor14 linked
15. 4d agoBleepingComputerRailway breach leads to $740,000 in fraudulent AI chargesRailway's new incident report says a October 2026 breach let attackers steal environment variables and AI provider credentials, generating about $740,000 in fraudulent AI usage across at most 100,000 workspaces.

    2 articles · Computerworld

    1. 4d agoBleepingComputerEarliestRailway breach leads to $740,000 in fraudulent AI charges
    2. 3d agoComputerworldPickupHackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill

    CyberFireworks AI breach exposes customer data at Uber, Notion and Cursor10 linked
16. 5d agoWiz ResearchNavigating the road ahead for CISOs following the Uber verdict | Wiz BlogWiz Research draws five practical recommendations for CISOs from the federal conviction of Uber's former chief security officer for concealing the 2016 breach from the FTC.1 outletCyber1 linked
17. 5d agoTechCrunchCyberattacks threaten to make open source AI a little less open, Hugging Face exec warnsHugging Face's chief policy officer warns that cyberattacks on open AI platforms, including the OpenCode, Hugging Face and Fireworks breaches, could push open source AI toward more restrictive access controls.1 outletCyberAI9 linked
18. 5d agoDark ReadingAI Coding Agents Leak Thousands of Secrets to GitHubDark Reading reports that a Claude Code command can inadvertently commit credentials and other sensitive files to public GitHub repositories, exposing organizations to security gaps.1 outletCyber7 linked
19. 6d agoDark Reading · research by AIR SecurityAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxResearchers at AIR Security disclosed the "Office Party" flaw in Anthropic's Claude DOCX/PPTX/XLSX skills, which lets an attacker run code on Linux via a planted shared library that Anthropic has chosen not to fix.1 outletCyberAI37 linked
20. Oct 30Dark ReadingDevs Hit by Trojanized Claude Code Extension for CursorAnthropic's Claude Code extension on the Cursor marketplace was trojanized on Oct. 29, 2026, delivering a backdoored version 2.1.313 that stole data and could grant persistent SSH access.1 outletCyber9 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.