TypoPrompting exploits mistyped AI website addresses to redirect users to fake pages that deliver malware and browser hijackers.

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

A malicious version of the Claude Code extension reportedly contained hidden code capable of opening remote access to developers' computers, putting sensitive files and credentials at risk. Cursor ...

Hackers infected 953 online stores with JavaScript loaders hidden in Magento CMS blocks, using bot filtering to evade security scanners.

Claude Code vulnerability could let malicious HTML steal SSH keys and tokens via its preview pane. See which risks developers face ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access tokens.

On Nov. 4, the Cybersecurity and Infrastructure Security Agency added CVE-2024-27834 to its Known Exploited Vulnerabilities ...

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

IntroductionOver the past few days, there has been a series of reports regarding critical vulnerabilities. These affect "PHP," which runs the backend of websites; "Java," widely used in enterprise ...

In November 2026, the Windows PC launcher for the popular game 'Goddess of Victory: NIKKE' was tampered with by a third party ...