The Wave

1. 5h agoWiz Research · research by NordStellarLiteLLM Compromised, Steals Credentials | Wiz BlogWiz Research maps the cloud, code and AI secrets that infostealer malware harvests from developer endpoints and details how attackers turn them into cloud access, using NordStellar telemetry to rank stealer families and secret types.

   2 articles

   1. 5h agoWiz ResearchLiteLLM Compromised, Steals Credentials | Wiz Blog
   2. 5h agoWiz ResearchEarliestThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz Blog

   Cyber27 linked
2. YesterdayBleepingComputer · research by CursorCursor confirms security breach led to malicious Claude Code extensionCursor disclosed that a breach traced to stolen Fireworks AI credentials let attackers push trojanized Claude Code extension versions to its marketplace, exposing up to 5,000 developers to attempted SSH backdoors.1 outletCyberFireworks AI breach exposes customer data at Uber, Notion and Cursor20 linked
3. 2d agoCSO OnlineHow AI is changing the nature of cyberattacksCSO Online reports that AI is accelerating cyberattacks' speed and scale without changing core attack objectives or techniques, citing the GTG-1002 espionage campaign and the JadePuffer ransomware campaign as examples.1 outletCyber1 linked
4. 2d agoAnthropicMeasuring AI agent autonomy in practiceAnthropic publishes findings from an open-ended survey of 81,000 Claude users, linking higher AI job-displacement concern to occupational exposure, early career stage, and the largest speedups.

   3 articles

   1. 2d agoAnthropicAnthropic Economic Index report: Learning curves
   2. 2d agoAnthropicEarliestWhat 81,000 people told us about AI economics
   3. 2d agoAnthropicMeasuring AI agent autonomy in practice

   AI112 linked
5. 5d agoDark ReadingAI Coding Agents Leak Thousands of Secrets to GitHubDark Reading reports that a Claude Code command can inadvertently commit credentials and other sensitive files to public GitHub repositories, exposing organizations to security gaps.1 outletCyber7 linked
6. 6d agoDark Reading · research by AIR SecurityAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxResearchers at AIR Security disclosed the "Office Party" flaw in Anthropic's Claude DOCX/PPTX/XLSX skills, which lets an attacker run code on Linux via a planted shared library that Anthropic has chosen not to fix.1 outletCyberAI37 linked
7. Oct 30Dark ReadingDevs Hit by Trojanized Claude Code Extension for CursorAnthropic's Claude Code extension on the Cursor marketplace was trojanized on Oct. 29, 2026, delivering a backdoored version 2.1.313 that stole data and could grant persistent SSH access.1 outletCyber9 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.