Malware · AI Beat

01 Nov 2026 · AI Beat Desk

The Analyst in the Malware

Cisco Talos published a detailed breakdown of Volta, an infostealer that routes victim data through an LLM to produce a ranked monetization assessment — with a three-model refusal-bypass fallback chain built in. It's a small but concrete sign of how AI components are becoming standard modules in commodity malware toolkits.

01 May 2026 · AI Beat Desk

The AI Stack Keeps Getting Targeted

Versions 2.6.2 and 2.6.3 of the `lightning` PyPI package were compromised on April 30 with credential-stealing malware, part of the ongoing Mini Shai-Hulud campaign that has now hit LiteLLM, Telnyx, Xinference, and PyTorch Lightning in rapid succession. The attack bundles a Node.js-compatible runtime inside a Python training library to execute an 11 MB JavaScript payload — a cross-ecosystem technique that raises the floor for what supply-chain vigilance now requires.