Check Point research found three critical flaws in Anthropic's Claude Code that allow attackers to execute arbitrary commands ...
Anthropic fixed the flaws - but the AI-enabled attack surfaces remain Security vulnerabilities in Claude Code could have allowed attackers to remotely execute code on users' machines and steal API ...
Claude Code flaws allow remote code execution and API key theft via untrusted repositories; three bugs fixed across 2025–2026 ...
Security experts have identified three critical vulnerabilities in Anthropic's Claude Code, potentially allowing remote code execution and API key theft. Attackers could exploit malicious ...
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
AI agents now operate across enterprise systems, creating new risk via prompt injection, plugins, and persistent memory. Here ...
IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
Oasis Security, the identity security platform, today released new threat research exploring a vulnerability chain in ...
The thick client is making a comeback. Here’s how next-generation local databases like PGlite and RxDB are bringing ...
Two tools that have recently landed, taken together, define what the next phase of AI agent competition looks like. On5, Anthropic released Remote Control for Claude Code — a feature that lets ...
Cisco tested eight major open-weight artificial intelligence models and found multi-turn jailbreak attacks succeeded nearly ...