Stack layer / Threat pattern
Armadin details full sandbox escape in Anthropic's Claude Cowork; Anthropic disputes, silently patches
SiliconANGLE
Stack layer / Threat pattern
ClawHavoc campaign plants 300+ malicious skills on a single marketplace to run infostealers
Unit 42 (Palo Alto Networks)
Policy dependency / Stack layer
Guillermo Rauch Argues the Next Battle Is 'Splitting Models From Agents' — and Shows Vercel's Hand With Eve and Sandbox
TechCrunch
Stack layer / Threat pattern
JADEPUFFER Reported as First Fully Autonomous AI Ransomware Campaign
BuildFastWithAI
Stack layer / Update thread
Jim Fan: NVIDIA Open-Sources ASPIRE, and 'the Training Output Changes From Model Weights to a Continuously Expanding Skill Library'
BigGo Finance
Stack layer / Threat pattern
'The MCP Governance Illusion' — Why Governing Tools Isn't Enough
Cyera / Hacker News
Policy dependency / Stack layer
IAPS warns on Kimi Claw: security and governance risks of Chinese-hosted 'always-on' AI agents
IAPS
Stack layer / Threat pattern
Data-Injection Attacks Widen the Agent Threat Model Beyond Prompt Injection
arXiv