Mozilla researchers demonstrate Claude Code vulnerability using hidden DNS records

Agentic coding tools vulnerable to command execution via DNS records ...
Tech Times

North Korea’s Lazarus Group Hid a Full RAT in Six Rollup Polyfill npm Packages

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
GitHub

meeting-room-booking-system/mrbs-code

Meeting Room Booking System http://mrbs.sourceforge.net/----- The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms ...
Tech Times

GitHub Secret Scanning Now Watches All Public Repos for Leaked Enterprise Keys

GitHub secret scanning now extends beyond org-owned repositories: Public Monitoring scans all of GitHub.com in real time, ...
TMCnet

Sourcegraph Launches Agentic Batch Changes in Public Beta, Bringing AI-Powered Large-Scale Code Change to Enterprise Engineering Teams

Sourcegraph, the code intelligence platform that helps enterprise engineering teams understand, oversee, and evolve their codebases, announced public beta availability of Agentic ...
Security Boulevard

Cut your coding agent’s cost with Sonar Vortex

New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...
latesthackingnews.comOpinion

Amazon Q’s MCP Flaw Is an Industry Warning: AI Tools Still Lack Workspace Trust Standards

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...