2026-07-21 AI 与数据工作流雷达
来源：The Hacker News。这里只保留与 AI 编程、数据工作流或安全边界相关的候选线索；不抓取全文，也不代表事实核验或产品推荐。
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
主题：AI 与数据安全
来源日期： Jul 20, 2026
候选状态：待评估
为什么值得看：命中与个人工作流相关的 AI/数据主题；需要阅读全文判断是否具备临床编程、研究或可复现分析价值。
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit . “FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP files to deliver SmartLoader malware,” Oleg Zaytsev, lead security researcher at Island, said in a report shared with The Hacker News. The end goal of these attacks is to leverage the access afforded by SmartLoader to establish persistence and push secondary payloads, such as StealC, an information stealer capable of harvesting a wide range of data from compromised systems. It’s worth mentioning here that the use of trojanized MCP servers to distribute SmartLoader and StealC was flagged earlier this year by Straiker AI and subsequently by Derp.ca . But a concerning aspect …
可转化方向：评估 AI 辅助研究和编程中的隐私、供应链与安全边界
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
主题：AI 与数据安全
来源日期： Jul 20, 2026
候选状态：待评估
为什么值得看：命中与个人工作流相关的 AI/数据主题；需要阅读全文判断是否具备临床编程、研究或可复现分析价值。
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One was already live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV. What makes it more than a payload dump: it caught the operation mid-build. Testing notes, failed experiments, documentation, and live delivery logs sat in one place, the kind of complete development trail defenders rarely see. Rapid7 reads the artifacts, down to a hardcoded path pointing at an open-source AI coding tool, as an operator using generative AI to produce, test, and document phishing delivery at speed. The most developed test set focused on CVE-2025-33053 (CVSS 8.8, now in CISA’s KEV catalog ), the WebDAV working-directory hijack Check Point documented last year in its Stealth Falcon reporting. The…
可转化方向：评估 AI 辅助研究和编程中的隐私、供应链与安全边界
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
主题：AI 与数据安全
来源日期： Jul 20, 2026
候选状态：待评估
为什么值得看：命中与个人工作流相关的 AI/数据主题；需要阅读全文判断是否具备临床编程、研究或可复现分析价值。
A solo Russian-speaking threat actor known as “ bandcampro “ outsourced a chunk of their operations to Google’s open-source Gemini CLI artificial intelligence (AI) and commandeered a live botnet. The findings come from an analysis of 200 Gemini CLI session logs between March 19 and April 21, 2026, which found the threat actor using AI, among other things, to crack passwords, set up a residential proxy, compromise WordPress merchants, and plan a phone-based cryptocurrency fraud scheme aimed at elderly people in the U.S. and Canada. “The logs documented how the threat actor used an AI agent to migrate a command-and-control (C&C) server, and to control a small-scale botnet, among other hacking activities,” Trend Micro researchers Joseph C Chen, Philippe Lin, Lucas Silva, Vladimir Kropotov, and Fyodor Yarochkin said . “The entire C&C operation fits in three plaintext files totaling roughly 5 KB, making it highly replicable and effectively disposa…
可转化方向：评估 AI 辅助研究和编程中的隐私、供应链与安全边界
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
主题：数据工作流与自动化 / AI 与数据安全
来源日期： Jul 20, 2026
候选状态：待评估
为什么值得看：命中与个人工作流相关的 AI/数据主题；需要阅读全文判断是否具备临床编程、研究或可复现分析价值。
In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system. The company said it detected and responded to the incident targeting its production infrastructure earlier last week. “We identified unauthorized access to a limited set of internal datasets and to several credentials used by our services,” the company said in a statement. While an investigation into the intrusion remains ongoing, Hugging Face said it has found no evidence that the AI agent tampered with public, user-facing models, datasets, or Spaces, and its own software supply chain. The starting point of the attack was the data processing pipeline itself, with a malicious dataset abusing two code execution paths, viz., in its remote code dataset loader and a template injection in a dataset configuration, to run code on a processing worker.
可转化方向：评估对可复现分析、依赖管理或数据质量流程的启发；评估 AI 辅助研究和编程中的隐私、供应链与安全边界