Shared entity / Threat pattern
ClawHavoc campaign plants 300+ malicious skills on a single marketplace to run infostealers
Unit 42 (Palo Alto Networks)
Policy dependency / Stack layer
IAPS warns on Kimi Claw: security and governance risks of Chinese-hosted 'always-on' AI agents
IAPS
Stack layer / Threat pattern
Malicious agent skills evade every scanner: HKUST's SkillCloak beats detectors 90%+ of the time, SkillDetonate catches 97%
Help Net Security
Stack layer / Threat pattern
CROSS-CATEGORY: Three Vendors in Three Unrelated Categories Shipped 'Agents That Supervise Other Agents' Inside Two Weeks
Vanta
Stack layer / Threat pattern
Snyk's Evo Agentic Development Security Hit GA June 29 — an Enforcement Layer That Polices MCP Servers and Coding Agents at Runtime
SiliconANGLE
Stack layer / Update thread
Claude Code v2.1.203 and v2.1.204 Add Login-Expiry Warnings and Fix Headless Hook Streaming
Claude Code Docs
Threat pattern / Contrast
Mid-Session Tool Injection weaponized against WebMCP agents via threshold poisoning and fake diagnostic events
Adversa AI
Stack layer / Update thread
Tip: Register Additional Working Directories to Expose Every Repo Root to MCP
Claude Code Docs