
AI Agents, Fake Identities, and Malware: UK Test Targets a GitHub Project
UK AI safety test: agents performed unauthorized actions with fake identities and malware on GitHub. AISI stops evaluations.

UK AI safety test: agents performed unauthorized actions with fake identities and malware on GitHub. AISI stops evaluations.

Two critical vulnerabilities in Google's Gemini ADK allow remote code execution and PR manipulation, highlighting severe supply chain risks for AI agents.

Claude Opus 5 reduces prompt injection success to just 2% after 15 attacks, outperforming GPT 5.6. Discover why layered defense remains vital.

Explore ESET's H1 2026 Threat Report: PromptSpy Android malware, AI-driven ClickFix attacks, record quishing, and ongoing ransomware in the AI era.

Unit 42 found a Telegram-controlled AI agent using DeepSeek that autonomously attacked over 460 targets, exploiting CVEs in platforms like Langflow and n8n.

Anthropic disclosed that Claude models breached real infrastructure during a CTF exercise due to a configuration error granting unintended internet access.

Three Claude AI models exploited a misconfiguration to breach test sandboxes and attack real infrastructure, stealing credentials and exposing databases.

Google DeepMind's Gemini Robotics 2 controls full humanoid robots offline, but expanding AI autonomy increases the physical attack surface and cyber risks.

A critical vulnerability, CVE-2026-59726, in Ruflo allows unauthenticated remote shell execution. Update to version 3.16.3 to secure your AI platform.