Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft Security

This story is part of the morning brief AI security morning brief: stolen AI keys, agentic attacks, and a ChatGPT share-link flaw. The reporting lives at the original source.

Read at Microsoft Security

Northflank customers' AI API keys were abused after a breach, CrowdStrike details a China-linked agentic AI hacking campaign, and researchers show a ChatGPT share link could hijack sessions.