ReversingLabs said threat actors are using the Pickle file format to conceal malware inside seemingly legitimate AI-related software packages. In this recent incident, attackers published three ...

The popular Ultralytics YOLO11 AI model was compromised in a supply chain attack to deploy cryptominers on devices running versions 8.3.41 and 8.3.42 from the Python Package Index (PyPI) ...

Instead of relying on a user’s mistake, as in typosquats, threat actors rely on an AI model’s mistake. A significant number of packages, amounting to 19.7% (205,000 packages), recommended in ...