Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.

With Claude's Fable 5 model back in Claude Code as of July 1 after an 18-day export-control shutdown, developers are resuming the long-horizon autonomous sessions the tool was designed for — and ...

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script (VBScript) files that lead to the installation of legitimate Remote Monitoring and Management (RMM) ...

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based code analysis systems into overlooking malicious payloads. Threat actors ...

TCLBANKER is a Brazilian banking trojan that monitors 59 banking and crypto domains. The malware spreads by hijacking victims’ WhatsApp Web sessions and Outlook accounts to send phishing messages to ...

Security researcher Chaofan Shou discovered on March 31 that Anthropic's Claude Code CLI tool had its full TypeScript source code sitting in plain sight on the public ...

Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found by Adversa AI. On March 31, 2026, Anthropic mistakenly included a ...