Security AI

Huntress reports attackers abusing trusted AI platform features to deliver malware

Huntress reports attackers abusing trusted AI platform features to deliver malware Image: Primary
Huntress's Security Operations Center says attackers are increasingly abusing trusted AI platform features rather than attacking the models themselves. Over nine months, it tracked campaigns weaponizing shareable AI content, public mini-apps and sponsored search placement. In one July campaign called FakeAgent, a malicious Claude Artifact hosted on the real claude.ai domain posed as a Claude Desktop download page and delivered SectopRAT to more than 29 organizations. A separate claude.ai/share link posing as an Apple Support guide led to the MacSync stealer. Huntress also found SEO-poisoned ChatGPT and Grok conversations delivering the AMOS stealer. Anthropic removed the reported Artifact by July 22, but related redirects continued into August.
Sources
BleepingComputer
In this story
OpenAI Anthropic xAI Apple
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
AI Science
AI Science

NASA and IBM release open lunar foundation model on Hugging Face

NASA and IBM Research released the NASA-IBM Lunar Foundation Model, an open-source AI model built for lunar science, hosted publicly on Hugging Face with its codebase on GitHub. NASA said the model was trained primarily on 17 yea...

Phys.org
Security Policy
Security Policy

Florida confirms DMV driver database breach via stolen police credentials

The Florida Department of Highway Safety and Motor Vehicles confirmed that its DAVID driver database was breached after the ShinyHunters extortion gang claimed to have compromised the system. The agency said it learned of the bre...

BleepingComputer
Security
Security

Wiz reports Artifactory flaw chain exploited to plant Rust backdoor

Wiz says multiple threat actors chained two JFrog Artifactory vulnerabilities, CVE-2026-42018 and CVE-2026-42016, against self-hosted servers between August 15 and September 8, 2026, obtaining an internal anonymous-user JWT and ex...

BleepingComputer