Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

If your project has a Procfile, agentkernel parses it to detect the runtime: AI agents need API keys to call LLMs, but putting secrets inside sandboxes defeats the purpose of isolation. A compromised ...