Anthropic fixed the flaws – but the AI-enabled attack surfaces remain Security vulnerabilities in Claude Code could have allowed attackers to remotely execute code on users' machines and steal API ...

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.

Four rogue NuGet packages and one npm package stole ASP.NET Identity data, deployed C2 backdoors, and reached over 50,000 ...

After months of real-world testing of AI copilots, chat interfaces, and AI-generated apps, Terra Security releases a new module for continuous AI Penetration Testing to match AI development velocity ...

The OpenClaw ecosystem's ClawHub has identified 1184 malicious packages that potentially targets crypto wallets.

OpenClaw jumped from 1,000 to 21,000 exposed deployments in a week. Here's how to evaluate it in Cloudflare's Moltworker sandbox for $10/month — without touching your corporate network.

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...

Exploitation of two recently patched Ivanti Endpoint Manager Mobile (EPMM) vulnerabilities, which had been zero-days, has surged.

These 4 critical AI vulnerabilities are being exploited faster than defenders can respond ...

The recent decline in size inclusivity is disappointing and short-sighted, argues designer Ester Manas.

ScotusCrim is a recurring series by Rory Little focusing on intersections between the Supreme Court and criminal law. Imagine: A group of drug dealers beat and shoot dead a citizen […] The post ...