Fake Claude Code installer malware used Google Ads to place spoofed AI tool pages above real documentation since March 2026.

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Cybersecurity researchers create a five-step exploit chain using over-permissioned roles, secrets discovery, and NHIs to attack a popular low-code service.

Massive regional C2 footprint More than 1.3K C2 Servers Discovered in the Middle East Hunt.io said it identified more than ...

FROST exploits the Origin Private File System (OPFS), a browser API that lets websites create and store files on a user's local disk.

Two months after Rapid7 discovered the hole in the Git service, the project maintainer has yet to patch the bug.

Anthropic has announced two new security features for its Claude AI: a self-hosted sandbox and a new security guidance plugin ...

We independently evaluate all of our recommendations. If you click on links we provide, we may receive compensation. Including a shampoo that restored our tester’s hair to its “bombshell glory days” ...