First reported darkreading.com
Lead dispatch
First reported · updated · 2 reports island.io
AgentBaiting: How Fake AI Skills Deliver Malware at Scale
The FakeGit campaign, detailed by Island security researcher Oleg Zaytsev, uses roughly 7,600 malicious GitHub repositories—over 800 posing as AI Skills or MCP servers—to deliver SmartLoader malware, which establishes persistence and installs the StealC information stealer. Researchers coined the technique 'AgentBaiting,' where AI agents like Claude Code, Gemini, and ChatGPT autonomously discover the attacker repositories, treat the malicious READMEs as legitimate documentation, and hand installation instructions to users; the operation recorded over 14 million downloads and peaked in April 2026.supply-chain · tool-abuse · malware-distribution · agent-baiting
mcp · ai-agents · llm · github
Severity
0.78
The wire · latest
First reported · updated · 2 reports darkreading.com
AI Coding: Do Security Risks Outweigh Productivity Gains?
A Dark Reading analysis weighs the security risks of AI coding tools against their productivity gains, citing surveys showing near-universal enterprise adoption and research finding AI-generated code carries more high-risk vulnerabilities, hardcoded secrets, and hidden costs from scanning, remediation, and false positives. It references large-scale studies (e.g., arXiv analyses of GitHub repositories and human-vs-AI code) plus issues like slopsquatting and trust-boundary gaps in AI coding assistants. Details →First reported ncsc.gov.uk
The 'vibe coding spectrum' approach to AI-assisted software development
An NCSC blog frames 'vibe coding' — giving AI agents high-level prompts to autonomously build software — as a spectrum requiring calibrated oversight based on the code's risk profile. It cites research (arXiv:2510.26103 and an IOActive report) showing AI-generated code can contain security vulnerabilities, arguing high-stakes code like authentication or CNI systems needs deeper review than low-risk prototypes. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector