An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could ...

The GigaWiper backdoor combines several malware families and can sabotage systems using a wiper, encryption, and wiping ...

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

The open-source command-line client gives developers, GTM engineers, and AI agents direct access to ZoomInfo's verified go-to-market data from any ter ...

SCMBANKER watches banking windows, captures screenshots, hijacks CLABE and card numbers, and can deploy Remote Utilities for ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

A one-line entry in the Claude Code v2.1.200 changelog, released July 3, 2026, changed something fundamental about how the tool behaves the moment a developer installs or updates it. Anthropic changed ...

Overview of six major Claude Cowork security risks, from prompt injections to persistence, with defense-in-depth guidance.

Proofpoint says UNK_MassTraction exploited patched Roundcube flaws to target U.S. and Canadian university mail servers.

The premium hardware manufacturer has announced a dedicated spotlight on its officially licensed IQUNIX EV63 'Ghost in the ...