AI Security GuruAI Security Guru

Topics

Model supply chain

Poisoned weights, malicious model files, and the packages and hubs those models travel through.

Briefs

  1. Friday, November 6, 2026

    CPython memory bug lets poisoned model templates escape AI inference sandboxes

    RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.

  2. Tuesday, November 3, 2026

    Breaking: AI-agent attack hits GitBook as ARTEX claims WorkOS and Chainstack, plus a poisoned Claude Code extension

    Update, Nov 3 evening: GitBook and two more ARTEX victims disclose breaches. This morning's brief follows: ARTEX's 11-day campaign, a tampered Claude Code extension and abandoned MCP servers show the developer machine is the soft spot.

  3. Monday, November 2, 2026

    A fake Claude Code extension in the Cursor marketplace tried to backdoor developer machines over SSH

    Plus Chainalysis discloses a breach driven by agentic attack tooling, and Sophos shows a ransomware crew handing its intrusions to AI agents.

Stories right now

Nothing in today's stories matches this subject.