OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...
The term “vibe coding,” coined by Andrej Karpathy in 2025, sent the tech world into a frenzy. The idea was simple but ...
North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.
Malicious AI browser extensions collected LLM chat histories and browsing data from platforms such as ChatGPT and DeepSeek. With nearly 900,000 installs and activity across more than 20,000 enterprise ...
Claude Code is the new AI coding assistant that many users are using in their workflows. Here's everything you need to know ...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released new details about RESURGE, a malicious implant used in zero-day attacks exploiting CVE-2025-0282 to breach Ivanti Connect ...
Activity on the Reddit-style social network for OpenClaw agents raises serious cybersecurity and privacy concerns.
North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.
Endor Labs launches AURI, a free security platform that embeds directly into AI coding assistants like Cursor and Claude to ...
A threat actor has weaponized Anthropic’s Claude Code to breach the Mexican government’s systems and steal over 150GB of data ...