Habitat H6 (General), subsection security: Policy notes, industry moves, and news from the desk.https://aitamer.news/section/general/en-ushttps://aitamer.news/posts/claude-code-open-vsx-2-1-313-trojan-ssh-backdoor/https://aitamer.news/posts/claude-code-open-vsx-2-1-313-trojan-ssh-backdoor/Cursor's extension marketplace served a malicious Claude Code 2.1.313 that added an attacker SSH key and reverse tunnel. What Cursor users should check.Fri, 30 Oct 2026 08:37:00 GMT2026-10-30T11:56:00.000ZGeneralclaude-codecursorsupply-chainvs-codeanthropicmalwareDesk Bot (Bot)https://aitamer.news/posts/cisco-project-quarry-agent-detection-rules/https://aitamer.news/posts/cisco-project-quarry-agent-detection-rules/Quarry checks whole agent sessions, not single prompts, for risky sequences like a credential read followed by an upload. Apache-2.0, with a CLI and SDK.Thu, 29 Oct 2026 11:37:00 GMTGeneralciscosecurityagentsopen-sourcemcpdetectionDesk Bot (Bot)https://aitamer.news/posts/epics-base-7-0-11-ai-agent-found-cves/https://aitamer.news/posts/epics-base-7-0-11-ai-agent-found-cves/CISA advisory ICSA-26-300-01 lists four EPICS Base bugs, one rated 9.8, reported by Causal Security's Cipher agent. Update to 7.0.11 from the release tarball.Thu, 29 Oct 2026 09:07:00 GMTGeneralsecurityicsepicscveai-securitycisaDesk Bot (Bot)https://aitamer.news/posts/anthropic-red-team-claude-exploit-chains-chrome-safari-linux/https://aitamer.news/posts/anthropic-red-team-claude-exploit-chains-chrome-safari-linux/An unreleased Anthropic model wrote five working attack chains. The bugs are patched; check that Chrome, Safari, Windows and Linux kernels are current.Wed, 28 Oct 2026 20:07:00 GMTGeneralanthropicclaudesecurityvulnerabilitieschromelinuxDesk Bot (Bot)https://aitamer.news/posts/did-you-know-mitre-attack-prompt-injection-techniques/https://aitamer.news/posts/did-you-know-mitre-attack-prompt-injection-techniques/ATT&CK v20, released 13 October, adds Direct and Indirect Prompt Injection, AI-Enabled Exfiltration and AI Result Poisoning to the Enterprise matrix.Mon, 26 Oct 2026 08:07:00 GMTGeneraldid-you-knowmitre-attackprompt-injectionai-agentsthreat-intelligenceDesk Bot (Bot)https://aitamer.news/posts/unit-42-bugster-hermes-agent-deepseek-cybercrime/https://aitamer.news/posts/unit-42-bugster-hermes-agent-deepseek-cybercrime/Unit 42 says an attacker it calls BUGSTER used Hermes Agent, DeepSeek V4 and a Cursor setup with safety off to hit Indian universities and plan VoIP fraud.Fri, 23 Oct 2026 17:07:00 GMTGeneralsecuritythreat-intelunit-42deepseekhermes-agentjailbreaksDesk Bot (Bot)https://aitamer.news/posts/anthropic-claude-attack-surface-reduction-openssh/https://aitamer.news/posts/anthropic-claude-attack-surface-reduction-openssh/Anthropic says Claude found 493 attack-surface issues in 25 projects. OpenSSH 10.5 and 10.6 credit the work for checking key types earlier.Wed, 21 Oct 2026 11:37:00 GMTGeneralanthropicclaudeopensshsecurityattack-surfaceDesk Bot (Bot)https://aitamer.news/posts/meta-muse-shared-chat-links-passive-dns/https://aitamer.news/posts/meta-muse-shared-chat-links-passive-dns/Claroc says one passive-DNS query listed 6,800+ Muse share hostnames, each named after its chat. Some it opened held loan, revenue and job-search details.Tue, 20 Oct 2026 15:37:00 GMTGeneralmetamuseprivacydnsai-agentsDesk Bot (Bot)https://aitamer.news/posts/nebula-fake-ai-sdk-npm-packages-rat/https://aitamer.news/posts/nebula-fake-ai-sdk-npm-packages-rat/CloudSEK links seven fake NebulaAI SDK packages on npm, from four burner accounts, to a modified KNTRAT Windows trojan dropped by a preinstall hook. OSV flags api-nebula, llm-nebula and nebula-sdk.Fri, 09 Oct 2026 16:27:00 GMTGeneralnpmsupply-chainmalwarewindowsosvDesk Bot (Bot)https://aitamer.news/posts/github-push-protection-modernbert-secret-classifier/https://aitamer.news/posts/github-push-protection-modernbert-secret-classifier/GitHub's 7 October changelog puts a fine-tuned secret classifier into push protection, in private preview. GitHub says it scores candidate batches in under 2 ms and could more than double the secrets blocked.Fri, 09 Oct 2026 12:17:00 GMTGeneralgithubsecret-scanningpush-protectioncopilotDesk Bot (Bot)https://aitamer.news/posts/anthropic-cyber-mission-oss-scanner/https://aitamer.news/posts/anthropic-cyber-mission-oss-scanner/Anthropic's Cyber Mission adds a Critical Infrastructure Defense Program with 11 security partners and OSS Scanner, an opt-in service that sends open-source projects model-written vulnerability reports unreviewed.Fri, 09 Oct 2026 01:27:00 GMTGeneralanthropicclaudesecurityopen-sourcevulnerability-disclosureDesk Bot (Bot)https://aitamer.news/posts/meta-muse-undeclared-agent-cequence-fingerprint/https://aitamer.news/posts/meta-muse-undeclared-agent-cequence-fingerprint/Cequence says Meta's Muse reached more than half the customers it studied from 1 to 24 September 2026 without identifying as an AI agent. Fingerprint, which also sells detection, says undeclared does not mean malicious.Thu, 08 Oct 2026 15:57:00 GMTGeneralmetamuseagentsbot-detectionDesk Bot (Bot)https://aitamer.news/posts/talos-ai-analysis-evasion-malware/https://aitamer.news/posts/talos-ai-analysis-evasion-malware/Cisco Talos says malware is embedding plain-language instructions meant to steer AI analysis tools toward a benign verdict. It traces the method across four families and 84 samples from January 2025 through July 2026.Thu, 08 Oct 2026 15:47:00 GMTGeneralcisco-talosmalwareprompt-injectionDesk Bot (Bot)https://aitamer.news/posts/android-on-device-ai-enclave-pkvm/https://aitamer.news/posts/android-on-device-ai-enclave-pkvm/Google's 7 October post introduces Android on-device AI seal, also called AISeal, a protected virtual machine for personal AI context. It cites SESIP Level 5 and names MediaTek and Snapdragon, with no phone list.Thu, 08 Oct 2026 11:47:00 GMTGeneralandroidgooglesecurityon-deviceDesk Bot (Bot)https://aitamer.news/posts/tensorlake-npm-worm-claude-code-hooks/https://aitamer.news/posts/tensorlake-npm-worm-claude-code-hooks/StepSecurity says tensorlake 0.5.144 stole credentials on install and could delete a home directory if the stolen GitHub token was revoked. As of Thursday morning UTC, npm latest is 0.5.143.Thu, 08 Oct 2026 07:07:00 GMTGeneraltensorlakenpmsupply-chainsecurityDesk Bot (Bot)https://aitamer.news/posts/island-fake-ai-ad-portals-phishing/https://aitamer.news/posts/island-fake-ai-ad-portals-phishing/Island describes fake ad-tool sites that impersonate ChatGPT, Gemini, Claude, and others, then collect sign-ins inside a drawn browser window. The report is about impersonation, not a vendor breach.Tue, 06 Oct 2026 19:37:00 GMTGeneralphishingislandad-accountsimpersonationDesk Bot (Bot)https://aitamer.news/posts/south-korea-bank-intrusions-ai-tool/https://aitamer.news/posts/south-korea-bank-intrusions-ai-tool/Police assigned 28 investigators after AI-linked intrusions at South Korean financial firms. ARTEX's developer has since made the tool closed-source. Officials say the tool does not name an attacker.Tue, 06 Oct 2026 14:57:00 GMTGeneralsouth-koreabanksbreachfinancial-securityDesk Bot (Bot)