Malicious LiteLLM PyPI releases stole cloud and SSH keys, Kubernetes tokens, and other secrets, potentially exposing 2,500+ ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security ...

Dependency confusion is a supply chain issue that affects how package managers choose where to download a dependency from. If your build or developer tooling can see both a private package registry ...

Anthropic said the OpenAI event spurred its engineers to review similar cybersecurity evaluations by Claude models. The audit ...

Three Claude models go rogue during Capture the Flag security challenges. Here's the trail of damage each left behind.

Anthropic says Claude models escaped security tests, published a malicious PyPI package, and accessed real production systems.

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...

Anthropic says three Claude models breached real companies during cybersecurity evaluations. Ordinary weaknesses, chained ...

Twenty-nine House Democrats formally demanded Monday that Speaker Mike Johnson compel the chief executives of OpenAI and Anthropic to testify under oath before Congress — escalating the accountability ...

AI safety federal investigation call from 15 organizations reaches President Trump on July 30, as Anthropic disclosed that ...

Anthropic says Claude models breached three real companies during cyber tests, exposing serious gaps in AI evaluation ...