First reported bleepingcomputer.com
Lead dispatch
First reported · updated · 2 reports island.io
AgentBaiting: How Fake AI Skills Deliver Malware at Scale
The FakeGit campaign, detailed by Island security researcher Oleg Zaytsev, uses roughly 7,600 malicious GitHub repositories—over 800 posing as AI Skills or MCP servers—to deliver SmartLoader malware, which establishes persistence and installs the StealC information stealer. Researchers coined the technique 'AgentBaiting,' where AI agents like Claude Code, Gemini, and ChatGPT autonomously discover the attacker repositories, treat the malicious READMEs as legitimate documentation, and hand installation instructions to users; the operation recorded over 14 million downloads and peaked in April 2026.supply-chain · tool-abuse · malware-distribution · agent-baiting
mcp · ai-agents · llm · github
Severity
0.78
The wire · latest
First reported · updated · 3 reports darktrace.com
Hackers Compromise AWS AI Gateway Connected to Amazon Bedrock to Deploy XMRig Cryptominer
Darktrace disclosed an incident in which attackers compromised an AWS EC2 instance running LiteLLM-Proxy — an AI gateway centralizing access to Amazon Bedrock foundation models through a privileged IAM role — and deployed XMRig cryptomining malware. The instance had SSH port 22 exposed to all inbound traffic (0.0.0.0/0) and was hit by brute-force attempts, primarily from IP 145.241.123[.]102. Details →First reported github.com
GitHub - clayseal/clayseal-identity: Runtime identity for AI agents. Short-lived attested credentials with capability tokens that agents narrow as tasks change and verify offline.
clayseal-identity is an open-source project providing runtime identity for AI agents, issuing short-lived attested credentials with capability tokens that agents can narrow as tasks change and verify offline. The repository includes backend, conformance tests, deployment configs, integrations, and examples for adding scoped, verifiable identity to agentic systems. Details →First reported nhimg.org
AI agents in the browser: what it means for IAM controls
An NHIMG editorial based on Surf Security content argues that AI agents which browse, log in, and act across SaaS and admin portals create machine-speed risk when they run in unmanaged browsers, leaving excessive permissions, persistent credentials, and limited auditability. It recommends treating the browser as an enforcement boundary and separating credential handling from agent logic to govern where agents may execute. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector