AXE Robot Dance – Not AI Generated!

Anthropic has accused Alibaba of running the largest known distillation attack against its Claude AI models using 25,000 fake accounts and 28.8 million exchanges. Here is what happened and what it means for Australian enterprises.

AI agents are moving from passive assistants to active participants in the workplace. When connected to email, files, terminals and cloud services, they introduce a new class of security risk that requires governance, not just policies.

A North Korean state-sponsored group backdoored 144 Mastra AI npm packages with a malicious dayjs typosquat. The postinstall hook ran automatically on npm install, exposing developer machines and CI/CD pipelines to credential theft and full system compromise.

AutoJack, FortiBleed, and evolved LLMjacking show AI agents and self-hosted inference are now live attack surfaces. Here's what enterprises need to patch this week.

A major WordPress plugin vulnerability is leaking API keys and OAuth tokens right now. With AI-enabled phishing on the rise, that stolen data is more dangerous than ever.