HalluSquatting AI attack could hijack your computer

HalluSquatting exploits AI coding assistants that hallucinate fake repository names, letting attackers register those names ...
The Hacker News

Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images

North Korean hackers hide a four-stage OtterCookie payload in SVG files inside fake coding tests to steal browser data and ...
Hosted on MSN

Yes, criminals are using AI to vibe-code malware

Interview With everyone from would-be developers to six-year-old kids jumping on the vibe coding bandwagon, it shouldn't be surprising that criminals like automated coding tools too.… "Everybody's ...
The Hacker News

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
AOL

Vibecoded Malware Is Flooding the Internet

Vibe coding's dark side, "vibe hacking," is on the rise. Cybersecurity companies such as McAfee and Bitdefender have observed recent spikes in vibe-coded malware, also called "vibeware," with telltale ...
eWeek

Clean GitHub Repo Attack Exposes AI Coding Agent Risk

Mozilla 0DIN’s Claude Code demo shows how clean GitHub repos can expose AI coding agents to prompt injection, reverse shells, and credential risk.
CSOonline

Google researchers detect first operational use of LLMs in active malware campaigns

Google’s Threat Intelligence Group reports that new malware strains use LLMs mid-execution to generate, rewrite, and obfuscate malicious code in real time. Threat actors are now actively deploying ...