← Back to feed

Hackers can use 9 of the most popular AI tools to assemble massive botnets

L4 · DeveloperResearchArs Technica AI· 7/8/2026

Critical security vulnerability affecting multiple major AI developer tools that requires immediate attention from engineering teams using these platforms.

AI Summary

Security researchers have discovered a new type of injection attack called 'HalluSquatting' that exploits AI coding assistants' tendency to hallucinate resource identifiers, allowing attackers to create massive botnets by compromising popular AI tools including Cursor, GitHub Copilot, Gemini CLI, and others. The attack works by predicting which identifiers LLMs are most likely to hallucinate and seeding malicious code in those repositories. This represents the first scalable pull-based prompt injection attack capable of large-scale device infections.

Excerpt

"HalluSquatting" weaponizes LLMs' inability to say "I don't know."

Read Original
0 upvotes · 0 downvotes · 1 min read

Related Articles

L4 · DeveloperResearch@emollick.bsky.social
Ethan Mollick (@emollick.bsky.social): This was one of those impressive AI thresholds for me. I gave GPT-5.6 Sol in Codex control over my computer, and asked it to win the daily challenge for the game Slay the Spire 2 (randomized factors,

In an experiment testing autonomous AI capabilities, the user gave a custom-tuned GPT model (GPT-5.6 Sol in Codex) direct control over their computer with the goal of winning the daily challenge in the complex roguelike game Slay the Spire 2. The AI successfully played the game autonomously for 5 hours, making complex strategic decisions to beat the randomized challenge. The result exemplifies a significant threshold in AI's ability to understand and execute multi-step objectives in a dynamic, unpredictable environment.

L5 · ResearcherResearch@AnthropicAI
Anthropic (@AnthropicAI): In previous research, we found that Claude expresses over 3,000 values, like honesty and warmth. In new work, we asked how the values Claude expresses vary between Claude models and across languages.

Anthropic researchers developed a methodology to analyze how Claude's expressed values vary across different model versions and languages, identifying four key axes that capture 15% of value variation including Deference vs. Caution and Warmth vs. Rigor. They found significant differences between Claude Opus 4.6 and 4.7 models, as well as between English and Arabic responses. This research provides quantitative insights into how training decisions and linguistic contexts shape AI assistant values and behavior.

L5 · ResearcherResearcharXiv
NIFA: Nonlinear IMC enhanced FPGA for efficient ML inference

This arXiv paper introduces a novel FPGA architecture called NIFA (Nonlinear IMC enhanced FPGA) that integrates ReRAM-based analog in-memory computing blocks with analog content-addressable memories to perform nonlinear operations directly within memory cells, overcoming limitations of conventional digital FPGAs for transformer model inference. The proposed hardware design eliminates power-hungry ADCs and enables more efficient attention computation, achieving up to 40× higher energy efficiency and 4.1× higher area efficiency for CNN/Transformer workloads. This represents foundational hardware architecture research for domain-specialized ML accelerators.

L5 · ResearcherResearcharXiv
BrainPilot: Automating Brain Discovery with Agentic Research

BrainPilot is a fully open-source multi-agent system that accelerates neuroscience research by orchestrating specialist agents grounded in domain-specific knowledge, with features like traceable logs, fabrication checking, and auditable workflows to ensure reliability. The system leverages a curated knowledge base of over 7,200 neuroscience items and a library of 72 reusable research skills across seven domains. Evaluated against neuroscience-specific benchmarks, it demonstrates performance comparable to state-of-the-art agent frameworks while being more cost-effective.

L5 · ResearcherResearcharXiv
AlphaWiSE: Adaptive Weight Interpolation for Continual Multimodal Representation Learning

This arXiv paper introduces AlphaWiSE, a novel method for continual learning of multimodal models like CLIP, which adapts to new data without forgetting earlier cross-modal alignments. It proposes adaptive weight interpolation between frozen model checkpoints, optimizing a single scalar per parameter tensor using small exemplar memory. Experiments on audio-image-text retrieval show consistent improvements over existing continual learning baselines across multiple metrics.