AI Series Part 4: What should you never tell an AI?
This is the fourth in our plain-English series about artificial intelligence. The full series is at news.atozofcyber.co.uk
This is the fourth in our plain-English series about artificial intelligence. The full series is at news.atozofcyber.co.uk
This is the third in our plain-English series about artificial intelligence. Parts 1 and 2 are at news.atozofcyber.co.uk
This is the second in our plain-English series about artificial intelligence. You can read Part 1 — What AI actually is — at news.atozofcyber.co.uk
This is the first in a new series of articles about artificial intelligence — what it is, how it works, what it can and cannot do, and how to use it without accidentally giving away more than you intended. No technical knowledge required.
Each time, the mechanism has been the same: attackers find a way into a trusted update system, swap the legitimate contents for something malicious, and let the trust do the rest.
On Tuesday we covered how Anthropic accidentally leaked the source code of Claude Code, and how criminals immediately used that leak as a lure to spread malware. But that story
Imagine you are a builder, and you trust your supplier completely. You have been using them for years
The tool was litellm. The update was versions 1.82.7 and 1.82.8. And the damage was done before anyone knew it had started.
Someone calls your IT helpdesk. They sound calm, professional, and helpful. They know the name of an employee. They say there's been a problem with a login and they need a password reset.
In late February 2026, a developer working late into the night made a series of decisions that seemed reasonable in the moment — and ended with two and a half years