10
Aug
Trojanized AI Skills Hit 1.7M Installs: Securing the Agent Supply Chain
Zenity Labs revealed at Black Hat USA 2026 that trojanized AI agent skills accumulated over 1.7 million installs via a public registry, exfiltrating SSH keys, cloud credentials, and CI/CD secrets. Here is what happened, why traditional security tooling missed it, and the concrete controls you can...
11 min read