An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Mozilla researchers revealed a new attack that tricks Claude Code into running hidden commands from seemingly harmless GitHub ...

Mozilla’s 0din team showed how a Claude Code malware GitHub repo attack could use a clean-looking repository to open a ...

Researchers from Zscaler found a new malware campaign dubbed Edgecution.

The malware program has been deployed across multiple sectors since April, helping to provide initial access sold to ransomware gangs.

Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories ...

Learn how malicious AI agent skills easily bypass static scanners. Discover how runtime checking secures tools like Claude ...

AI-generated fake receipts are making expense fraud cheaper, easier, and harder to detect, forcing companies to rethink how ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Security researchers have found a way to hijack AI coding agents with nothing but a fake bug report. They call it Agentjacking. It needs no malware, no stolen password, and no breach of the target.

When almost anyone can fabricate an image in seconds from a text prompt using artificial intelligence, how do people decide ...

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...