Updated continuously

The signal that matters.

Cutting through advisories, vendor PSIRTs, researcher write-ups, and the underground — correlated, deduped, and ranked so your team only sees what moves the needle.

42,223stories tracked

Story velocity

6,256 sources1.9M refsLive

Ai Enabled Threat Ac…Ai Platform SecurityCloud Service Vulner…+2

Autonomous AI Agent Breached Hugging Face Production Infrastructure

Hugging Face disclosed that an autonomous AI agent system breached part of its production infrastructure after a malicious dataset exploited two code-execution paths in the company’s dataset-processing pipeline. The intrusion reportedly achieved code execution on a processing worker, escalated to node-level access, harvested cloud and cluster credentials, and moved laterally across internal clusters at machine speed. Hugging Face said the attacker accessed a limited set of internal datasets and several service credentials, while reporting no evidence of tampering with public models, datasets, Spaces, or its software supply chain.

Timeline

18h agoResearchers describe AI-assisted ransomware attack via exposed Langflow
54min agoHugging Face advises users to rotate tokens after breach

Attack Tradecraft·5sources·Updated 17min ago

Latest

Ai Platform SecurityAi Enabled Threat Ac…+2

Tracebit's 'Context Bombs' Disrupted AI Hacking Agents in AWS Tests

Tracebit researchers unveiled a defensive technique called "context bombing" that plants prompt-injection strings inside decoy secrets in Amazon Web Services environments to derail autonomous AI hacking agents. The embedded text is designed to trigger a target model’s refusal or safety behavior after the agent discovers the bait, causing it to abandon or break from its original attack instructions. The approach extends Tracebit’s earlier canary-style detection work aimed at spotting agentic AI intrusions in cloud infrastructure.

Emerging Technology Risk

2·Updated 8h ago

State Sponsored Espi…Phishing Campaign In…+3

DPRK-Linked Contagious Interview Hid Malware in SVG Files in Fake Coding Challenges

Elastic Security Labs reported a Contagious Interview intrusion tied to a DPRK-aligned threat cluster after suspicious activity targeted Elastic’s community Slack workspace. Using a fake recruiter persona named Maxwell, the operator posted a fraudulent job opportunity and coding challenge that directed victims to trojanized Next.js e-commerce repositories. The malicious code hid payload components inside SVG image files using steganography, embedding Base64 fragments in flag images that were reassembled by serverValidation.js and executed with eval() when the local development server started.

Attack Tradecraft

2·Updated 13h ago

Enforcement ActionCryptocurrency Platf…+2

U.S. Task Force Disrupts Southeast Asia Scam Compounds and Sanctions Backers

U.S. authorities and private-sector partners disrupted transnational scam compounds in Southeast Asia that were tied to pig-butchering cryptocurrency fraud, broader confidence scams, and human trafficking networks used to supply forced labor. Reporting says the Scam Center Strike Force, led by the U.S. Attorney’s Office for the District of Columbia with support from the DOJ, FBI, Secret Service, Treasury, and State Department, helped neutralize 1.4 million malicious accounts, disable supporting infrastructure, and seize more than 500 fake investment domains. Meta, Microsoft, the U.S. Department of Justice, and other partners were also identified as participants in the disruption effort.

Emerging Technology Risk

3·Updated 13h ago

11 sections hidden

Find out if you're exposed

Don't read about it. Know when it affects you.

Mallory correlates every story on this page with your attack surface (assets, vendors, identities, subsidiaries) and surfaces a small set of evidence-based cases instead of 10,000 alerts.

Start Free Trial Request a live demo

Subscribe to the digest

A daily email with top stories, new KEVs, and fresh exploits. No marketing.

Or grab the RSS feeds →