/
attack_type:data_exfiltration × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

safedep.io · low

SafeDep tests Jev and Gryph to flag malicious actions by compromised AI coding agents such as Claude Code

A SafeDep researcher describes an experiment that uses Gryph (an audit trail for AI coding agents) and TypeSafe AI's Jev model to separate a developer's normal agent activity from attacks. The article cites threats to agents such as Claude Code and Codex: the Mini Shai-Hulud worm commits Claude Code hooks into repositories, malicious npm …

technology software development
f5.com · high

F5 Labs CASI Leaderboard: Sugar-Coated Poison LLM attack and AI tooling flaws in Copilot, OpenClaw (CVE-2026-25253) and Claude Code (CVE-2026-21852)

F5 Labs published its March 2026 CASI Leaderboard update, which is now dominated by OpenAI and Anthropic. Z.ai's GLM-5 performs well on price and capability but has a weak security posture (CASI 37.56 vs 96.61 for Claude Opus 4.6 and 92.58 for GPT-5.2). The report also spotlights Sugar-Coated Poison (SCP), a multi-turn technique that grad…

CVE-2026-25253 CVE-2026-21852 technology software development