[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5gq9F1K2JSRDgCh5T6DMFzvg4CyLdL6sCysbQu2nD-8":3},{"article":4,"iocs":48,"watch_terms":52,"solutions":53,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":30},"dc77bf2c-1c0e-482c-a0f5-9cfb38d26226","Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams","placeholder-domains-used-by-349-ai-agent-skills-found-redirecting-to-scams-fd0f94","Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam…","Manifold Security discovered that placeholder domains, present in 359,000 GitHub files and 349 AI agent skills, are being redirected to scam websites. This indicates a potential supply chain risk within AI development, where malicious actors could exploit these common placeholders to distribute fraudulent content or malware.","Placeholder domains in AI agent skills redirect to scam sites.","https:\u002F\u002Fhackread.com\u002Fplaceholder-domains-ai-agent-skills-redirect-scams\u002F",null,"2026-09-26T19:02:54+00:00","2026-09-26T20:00:19.001323+00:00",7,[17,20,23],{"name":18,"type":19},"AI agent skills","product",{"name":21,"type":22},"Manifold Security","vendor",{"name":24,"type":25},"GitHub","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":12,"name":28,"slug":29},"Threat Intelligence","threat-intelligence",[31,36,41,46],{"category":32},{"id":33,"icon":12,"name":34,"slug":35},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":37},{"id":38,"icon":12,"name":39,"slug":40},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":42},{"id":43,"icon":12,"name":44,"slug":45},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":47},{"id":26,"icon":12,"name":28,"slug":29},[49],{"type":45,"value":50,"context":51},"cloaked scam","Placeholder domains redirecting to scam content",[21,18],{"controls":54,"vendors":137},[55,83,111],{"slug":29,"name":56,"problem":57,"products":58},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"slug":40,"name":84,"problem":85,"products":86},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",{"slug":112,"name":113,"problem":114,"products":115},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[116,123,129],{"vendor_slug":117,"vendor_name":24,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"github","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":124,"product_name":125,"url":127,"description":128},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",[],{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":151},"placeholder-domains-in-ai-agent-skills-hijacked-to-serve-scams","Placeholder Domains in AI Agent Skills Hijacked to Serve Scams","Developers commonly use placeholder or example domains (e.g., 'example.com' or 'yourdomain.com') in code templates, AI agent skill definitions, and configuration files without verifying ownership or replacing them before deployment. Malicious actors have exploited this oversight by registering or redirecting these unclaimed domains to scam and malware sites, affecting 349 AI agent skills and over 359,000 GitHub files. This represents a serious supply chain vulnerability, as AI agents that call these domains can silently redirect users to fraudulent content without any obvious warning. The scale of exposure — spanning public repositories and packaged AI skills — demonstrates how a seemingly minor development shortcut can become a widespread attack vector at the ecosystem level.",[143,144,145,146,147,148,149,150],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 16: Application Software Security","NIST SP 800-161: Supply Chain Risk Management Practices","NIST CSF DE.CM-6: External Service Provider Activity Monitoring","NIST SP 800-53 SA-12: Supply Chain Protection","NIST SP 800-53 CM-7: Least Functionality \u002F Allowlisting","OWASP Top 10 A08:2021 – Software and Data Integrity Failures","ISO\u002FIEC 27036: Information Security for Supplier Relationships",{}]