New research: #CyberCartel's #CARLIY0S runs a multi-model #AI attack chain, splitting recon, exploit development, and data exfiltration across #Claude, #Grok, and #Kimi. Operators used "authorized red team" prompt framing to slip past model guardrails. The first AiPT we've documented from inside the operation.
"Defenders prepared for hostile users and rogue models. Here the model obeys, the user is innocent and the context is the weapon."
straiker.ai/report/threat-re…
Me: I went to the dentist.
my 5yr old kid: Did you get a computer?
me: ?
kid: You’re big, and kids are small and get toys at the dentist.
me: lol why?
kid: bc you hack things.
Can’t make this stuff up.
🎮 @straikerai just launched the world’s first fully playable video game CTF for agentic AI security.
Chapter 1 includes 3 levels:
Jailbreaking
Command Injection
Memory Poisoning
It’s a full cyberpunk world where every level teaches you how AI agents can be tricked, manipulated, and broken.
Follow us for each new chapter release.
Play it: grid-city.straiker.ai |#videogame#infosec#ctf
New Blog: Fake Claude Code, Real Malware: Inside the Campaign Targeting AI Developers
Well, I had a fun rabbit hole of an experience taking apart the malware in this campaign. Even replicated a little script to talk to their C2.
straiker.ai/blog/acr-stealer…