Threat actors are evading phishing detection in campaigns targeting Microsoft accounts by abusing the no-code app-building ...
An AI pentesting tool has discovered critical vulnerabilities in default ImageMagick configurations. Workarounds offer ...
Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...
Claude Code, Anthropic’s top AI agent, just suffered a major source code leak. Version 2.1.88 exposed 512,000 lines of ...
The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm ...
DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
OpenClaw developers targeted by sophisticated phishing scam using fake $CLAW token giveaways on GitHub. Learn how attackers ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
The phishing campaign lures OpenClaw developers with fake $5,000 token airdrops, then drains wallets through a cloned site ...