AV Cybersecurity — Attack Surfaces That Could Halt the Physical AI Ramp
AVs are networked computers on wheels. A large-scale cyberattack on a commercial AV fleet could kill people and set the Physical AI ramp back years.
Tags · #security
Physical AI Cybersecurity — AV Attack Surfaces, Sensor Spoofing, and Fleet-Wide Risk
AV cyber attacks are physical safety events — sensor spoofing, OTA exploits, and HD map injection mapped as Physical AI security benchmark dimensions.
Hugging Face malware supply chain: typo-squat hits #1 trending — 244K downloads in 18h before takedown
Open-OSS/privacy-filter typo-squat hit #1 trending on Hugging Face May 11 — 244K downloads in under 18h. Windows infostealer via loader.py. Pin revision SHAs.
Snyk embeds Claude across AppSec, ships Evo for prompt injection and MCP supply-chain attacks
Snyk embeds Claude in its AI Security Platform and ships Evo — the first AppSec tool for prompt injection, MCP supply-chain attacks, and agent tool calls.
MCP security crisis — 200,000 servers exposed to arbitrary command execution
200,000+ MCP servers allow OS command execution via unsanitized STDIO; 36.7% are SSRF-vulnerable. CoSAI published a 12-category MCP threat taxonomy.
Anthropic previews Mythos + Project Glasswing — autonomous cyber capability
Anthropic Red previewed Mythos, a frontier model that autonomously chains zero-days and writes exploits. Project Glasswing applies it defensively.