Researchers from Zscaler found a new malware campaign dubbed Edgecution.

A newly discovered malware campaign is abusing a malicious Microsoft Edge extension to break out of the browser sandbox and gain control of infected Windows systems. Security researchers at Zscaler ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

A malicious Microsoft Edge extension dubbed ‘Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. Access to the local system is obtained ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub repositories.

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

SAS’s Reggie Townsend argues that a duty TO care, not the familiar duty OF care, is the frame safe and trustworthy AI actually needs. It turns governance from a box you tick into a way of being -- ...

Three-day patching deadlines, exposed fuel-tank systems, scams costing billions of dollars, and social media bans for children all gave Tony plenty to unpack in June 2026 Gamaredon in 2025: Leveraging ...

Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...