First reported · updated · 2 reports bleepingcomputer.com
News · latest
First reported theregister.com
Anthropic cracks down on hijacked user accounts mining AI tokens
Anthropic is responding to a wave of infostealer malware that steals Claude login credentials, session cookies, and MFA-bypass data to hijack accounts and freeload on victims' paid AI usage (token mining). Anthropic detected attempted API-based token theft, logged affected users out, and removed saved payment methods; the company stresses the malware is ordinary commodity infostealer activity unrelated to Claude itself and not agentic AI malware. Details →First reported proofpoint.com
Anthropic Leak & Mercor Attack | Enterprise AI Security Risks | Proofpoint US
Proofpoint reports two April 2026 AI security incidents: an Anthropic leak that exposed internal files and Claude Code source code via a release packaging error, and a Mercor supply-chain attack in which malicious code embedded in the open-source LiteLLM library (used to connect applications to AI services) stole API keys and customer data, attributed to Team PCP within the Lapsus$ group. The piece frames these as evidence that AI security failures are operational and governance failures involving human error, insecure integrations, and compromised dependencies. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector