A new White House app promises direct access to the administration, but its data collection and app behavior raise some ...

DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple ...

Claude extension flaw enabled silent prompt injection via XSS and weak allowlist, risking data theft and impersonation until ...

How can an extension change hands with no oversight?

Google says DarkSword was used against iOS users in Malaysia, targeting vulnerable older iPhone software through malicious ...

The DarkSword iOS exploit chain was used by the Russian APT behind the Coruna exploit in attacks targeting Ukraine.

Claude extension flaw allowed zero click attacks, letting hackers inject commands and access sensitive user data.

Google Threat Intelligence Group (GTIG), Lookout Threat Labs, and iVerify published coordinated research in March 2026 on ...