AI agent suggested installing a malware package. Engineer almost took its advice

Security news feed covering actively exploited vulnerabilities, ransomware and supply-chain attacks, data breaches, AI-assisted cyberattacks, cloud credential exposure, privacy issues, and large-scale DDoS activity. Notable urgent items include an actively exploited Ray remote-code-execution flaw subject to CISA remediation deadlines, Apple image-processing vulnerabilities potentially usable for spyware, a malicious npm supply-chain worm affecting hundreds of packages, and attacks against critical infrastructure using AI-generated or autonomous code.