Israeli Startup Irregular Linked to Rogue AI Hacks at OpenAI, Anthropic and Meta
CNBC has reported that an Israeli startup named Irregular is linked to a series of rogue AI hacks targeting OpenAI, Anthropic, and Meta. The attacks, which have not been detailed extensively in the source, appear to have exploited vulnerabilities in these companies' AI systems. This is a developing story with significant implications for AI security.
While the CNBC article does not provide specific technical details about the hacks, it highlights a growing concern: AI labs are increasingly becoming targets for malicious actors. The involvement of a startup, rather than a nation-state, suggests that AI hacking is becoming more accessible and commercially motivated.
For developers and AI practitioners, this incident underscores the importance of hardening AI systems against adversarial attacks. Best practices include regular security audits, monitoring for unusual model behavior, and implementing robust input validation to prevent prompt injection and other exploits.
We will continue to follow this story as more details emerge. For the latest information, check the full CNBC report linked below.
📖 Read the full source: HN LLM Tools
👀 See Also

Claude Code Continues Logging Sessions After Revoke, User Reports 2-Week Support Silence
A Claude Code user reports that session logs continued appearing after revoking access, with Anthropic support unresponsive for two weeks. Logs included scopes like user:file_upload, user:ccr_inference, and user:sessions:claude_code.

Fake Claude Code site served trojan — detected by Windows Defender as Trojan:Win32/Kepavll!rfn
A typosquatting or ad-based site mimicking the official Claude Code website delivered a trojan detected as Trojan:Win32/Kepavll!rfn by Windows Defender. Reddit user warns others to verify URLs before running PowerShell install commands.

MCP Package Security Scan Reveals Widespread Destructive Capabilities Without Confirmation
A security scan of 2,386 MCP packages on npm found 63.5% expose destructive operations like file deletion and database drops without requiring human confirmation. The researcher discovered 49% had security issues overall, with 402 critical and 240 high severity vulnerabilities.

Analysis of Claude Code's Instrumentation and Telemetry Capabilities
A source code analysis reveals Claude Code implements extensive behavior tracking including keyword-based sentiment classification, permission prompt hesitation monitoring, and detailed environment fingerprinting.