Storia in 2 fonti

Trust is the target: the new AI-era supply-chain attacks

Two campaigns this week, TeamPCP's 1,000 poisoned open-source packages and the abuse of Claude's own chat feature, show trust is the new attack surface.

Raccontata da

thehackernews.com

thenextweb.com

Confronto fonti

2 prospettive sulla stessa storia

AI · summaries

thenextweb.comStai leggendo1 mese fa

Trust is the target: the new AI-era supply-chain attacks

TeamPCP poisoned 1,000+ packages in four months (500M downloads/week); AI agents bypass human review, widening supply-chain risk. Security hinges on infrastructure trust, forcing enterprises to redesign package governance and AI-agent access controls.

originale

thehackernews.com1 mese fa

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain threats this week.

Leggi questa versione → originale

Timeline cronologica

giovedì 18 giugno 2026·thehackernews.com
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain threats this week.
venerdì 19 giugno 2026·thenextweb.com
Trust is the target: the new AI-era supply-chain attacks
Two campaigns this week, TeamPCP's 1,000 poisoned open-source packages and the abuse of Claude's own chat feature, show trust is the new attack surface.