Malicious AI skills: the danger isn't the code
A skill can carry instructions and code your AI assistant runs. Researchers turned Anthropic's own example skills into data thieves. How to allow them safely.
Read article
News & insights
Practical writing on AI security, cyber risk and the systems we are building.
A skill can carry instructions and code your AI assistant runs. Researchers turned Anthropic's own example skills into data thieves. How to allow them safely.
Read articleClassic antivirus judges files and programs. A hijacked AI agent is a trusted program doing things you're allowed to do.
Read articleIf you've started using ChatGPT, Copilot or Claude at work, you'll have heard colleagues talk about prompts, tokens, agents and jailbreaks. This is a plain-English guide to the words that matter, what each one means for the safety of your data, and what we'd do about it.
Read article