Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Azul’s free risk assessment for Java estates addresses the blind spot that autonomous AI exploitation tools are increasingly ...

The release includes an embedded MCP server that exposes Spring project analytics to AI coding assistants, along with first-class support for Spring AI and automated property refactoring.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

The QBRC mutation calling pipeline is a flexible and comprehensive pipeline for mutation calling that has glued together a lot of commonly used software and data processing steps for mutation calling.

PixelSmash is a vulnerability in the FFmpeg framework that can be exploited via crafted media files for remote code execution ...