Hackers Target LiteLLM, RAGFlow and Kestra AI Infrastructure to Steal API Keys and Mine Crypto
Hackers are increasingly targeting AI infrastructure to steal API keys, gain access to backend systems, maintain persistence, and mine cryptocurrency.
Microsoft has observed attacks...
OpenClaw NovaStealer Attacks Target 60+ Crypto Wallets, SSH Keys and AWS Credentials
OpenClaw deployments have become a target for threat actors using supply-chain poisoning, ClickFix social engineering, and indirect prompt injection.
According to Trellix Advanced Research...
Agentic AI Models Rebuild Malware and Pivot Attack Paths Across Real-World Intrusions
Four recent disclosures involving OpenAI, Anthropic, Meta, and the UK AI Security Institute show a troubling shift in cyber risk, AI agents can continue...
Poisoned npm Packages Steal AI Tokens and Spread Them Across Developer Build Environments
Cybercriminals are increasingly targeting AI API tokens through poisoned npm packages, turning ordinary developer environments into credential-harvesting machines.
The stolen tokens can be abused...
PLA-Linked Researchers Use Distilled U.S. AI for Surveillance, Drones and Battlefield Tasks
Chinese researchers linked to the People’s Liberation Army (PLA) are reportedly using outputs from leading U.S. artificial intelligence models to train smaller domestic systems...