This week

2026-09-18 — 2026-09-25

Themes across the stories in this edition. This is a selected view, not a measure of the whole industry.

AI software appears on both sides of credential theft

MemTensor’s compromised packages expose developers through trusted dependencies; CARBONATO repurposes a legitimate agent after Docker compromise. These are different entry paths into environments holding valuable credentials.

Software supply chainCompromised MemTensor releases deliver credential theft through AI memory tools Malware and AI agentsCARBONATO research exposes a botnet using a stock AI agent

Automated findings still need an external test

PageBreak checks executable behavior, while Anthropic follows computational candidates with human laboratory work. MentalHealthBench adds another boundary: matching expert-written criteria is not evidence of clinical outcomes.

Defensive AI researchGoogle reports over 500 XSS findings from its PageBreak agent AI-assisted biologyAnthropic reports Claude-assisted discovery of an uncharacterized enzyme system AI evaluationMentalHealthBench tests everyday support alongside crisis responses

AI-written · Based on the linked stories.