📰 Dev.to · Cor E

Phantom Squatting: When AI Hallucinated Domains Become Attacker Infrastructure

Agentjacking: How Fake Bug Reports Are Hijacking AI Coding Agents — and How to Stop It

282 AI Apps Are Handing Strangers Your API Bill — And Calling It a Product

Your AI Agent Is Being Fed Lies, and Your Logs Won't Tell You

GuardFall: When Decades-Old Shell Injection Tricks Beat Modern AI Safety Guardrails

BioShocking: How AI Browsers Were Tricked Into Handing Over Your Passwords

Your AI Agents Are Privileged Identities. You're Treating Them Like Interns.

AI Coding Agents Are the New Attack Surface Nobody's Ready For

North Korean Hackers Poisoned 140+ npm Packages in an AI Dev Tooling Attack. Here's What Would Have Caught It.

Claude Is Your Insider Threat Now - Notes from Dan Tentler's Security Fest 2026 Talk

LangGraph RCE Chain: How Malicious Tool Calls Escalate to Full Host Compromise

Agentjacking: How AI Coding Agents Get Hijacked Through Their Own Tool Pipeline

Claude Fable 5 Was Jailbroken in 48 Hours. Here's What Actually Stopped Nothing.

OpenAI Built a Lockdown Mode Because Tool-Based Data Exfiltration Is Real — Here's What Catches It Earlier

When Your Background AI Agent Becomes a C2 Server

Malicious npm Package Targeted Claude's /mnt/user-data Directory — Here's What Agentic Pipelines Are Missing

Brazilian Lawyers Fined R$84,000 for Prompt Injection in Court — Here's What Caught Them (and What Didn't)

AI Can't Stop AI? Wrong Problem. Wrong Layer.

The $200K Morse Code Heist: How One Tweet Drained Grok's Crypto Wallet (And How to Stop It)

Why Your LLM Probably Has a PII Problem (And How to Fix It)

RAG Pipelines Are the Next Prompt Injection Frontier