🧰 AIR Security

The items that name it 3

• Hugging Face malware campaign returns to hijack GPUs for crypto mining
  articleas classification.key entities2026-10-29
• Top 10 attacks on Claude Code and what each one actually broke
  writeupas tools2026-09-23

  Research team that discovered Plugin4Shell, the plugin SHA-pinning bypass via git branch/commit name collision.

• OWASP Agentic Skills Top 10
  paperas tools

  Published 'The Story of Skills', 'The Circus of Skills', and 'SkillJacking' research on malicious/hijackable skills.