The ‘first’ AI-run ransomware attack still needed a human

An AI agent carried out the technical execution of a real-world ransomware attack for the first known time, but new details ...

This tiny MacBook accessory adds customizable shortcuts for meetings and productivity

Project Mirage has unveiled Dune, a three-button MacBook accessory that offers context-aware shortcuts, AI-powered automation ...
The Hacker News

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

CISA added CVE-2026-45659 SharePoint Server RCE to KEV following confirmed exploitation, requiring U.S. agencies to patch by ...
GitHub

// ROGUEPLANET — Windows Defender TOCTOU Race LPE

// an attacker swaps an NTFS junction so the write lands // inside C:\Windows\System32 instead of the original target. // Confirmed on FULLY PATCHED Windows 10 / 11 as of the // June 2026 Patch ...
Hosted on MSN

NetApp and Cisco collaboration strengthens defense-in-depth for enterprise cyber resilience

NetApp ® (NASDAQ: NTAP), the Intelligent Data Infrastructure company, and Cisco (NASDAQ: CSCO), today announced an expansion of their collaboration to help customers strengthen defense-in-depth ...
techtimes

Claude Code Plugins Get Official Directory: Anthropic Flags Unverified MCP Risks

Anthropic has formalized its Claude Code plugin ecosystem with an official, company-managed directory on GitHub — giving the tool's fast-growing developer community a single vetted source for ...
TechSpot

Hackers breach GitHub and access 3,800 internal repositories now listed for sale

What we know so far: Hackers have reportedly used a malicious Visual Studio Code extension to gain access to a GitHub developer's machine, then leveraged the stolen credentials to move into GitHub's ...
SiliconANGLE

GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension

Hackers exfiltrated roughly 3,800 of GitHub Inc.’s internal code repositories after one of its employees installed a poisoned Visual Studio Code extension, the Microsoft Corp.-owned developer platform ...
heise online

Attack on GitHub: Data from 3800 internal repositories stolen

Attackers apparently had access to GitHub's internal repositories. The operator of the version control platform initially confirmed to the platform Bleeping Computer and later on X that the company ...
Infosecurity-magazine.com

GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 internal repositories. The breach was detected on May 19 and likely comes ...
Windows Report

GitHub Confirms Breach After Malicious VS Code Extension Exposed 3,800 Repositories

GitHub has confirmed that thousands of its internal repositories were breached after an employee installed a malicious Visual Studio Code extension. The incident adds to growing concerns around supply ...
SecurityWeek

VS Code Configs Expose GitHub Codespaces to Attacks

VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request. The automatic execution of VS Code-integrated configuration files when ...