Daily brief · 2026-11-01
New incidents (7), most serious first
-
Malicious Hugging Face 'Qwen2 test' models execute hidden crypto miner and reverse shell via trust_remote_code
Pluto Security found 31 malicious repositories on seven Hugging Face accounts posing as small Qwen2 test models for self-hosted AI services, drawing over 32,000 downloads.
-
SolanaCry fake GitHub repo tricks AI coding agents into installing NetSupport RAT
A fake GitHub repository posing as a Solana starter kit, SolanaUpdateTools/solana-starter-kit, ranked first in search results and its README told AI coding agents to run a PowerShell command that downloaded and executed a 21 MB dropper in memory.
-
North Korean group uses AI to mass-produce tailored phishing PDFs against South Korean users
North Korean hacking groups used AI tools, including the ARTEX open-source penetration-testing framework and AI coding tools such as Cursor, to mass-produce phishing lure documents, fake job offers and malware.
-
Claude agent detects MeshAgent screen-capture malware on high-stakes poker player's machine
On September 25, 2026, professional online poker player Alex was using his Claude AI agent to review play statistics when his SQL database crashed and needed to be reset.
-
University of Washington study demonstrates cross-origin data theft via prompt injection in ChatGPT Atlas Agent Mode
A University of Washington study tested seven agentic browsers and found four could let malicious sites cross origin boundaries.
-
Microsoft red team: poisoned agent memory bypasses human-in-the-loop approval prompts
Microsoft's red team, in research reported in the Microsoft Digital Defense Report 2026, examined AI agents that can write to their own long-term memory and are given sensitive capabilities but told to ask the user before acting.
-
Red-team campaign finds 11 attacks defeating Codex sandbox and Auto-review monitor
Researchers red-teamed OpenAI's Codex coding agent and its synchronous control measures, chiefly the Auto-review blocking monitor, at commit c4f42d1.
The register was corrected 13 times this day (merges, retractions and fixed fields). Read the corrections log.