Fake Claude Code installer malware used Google Ads to place spoofed AI tool pages above real documentation since March 2026.

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Cybersecurity researchers create a five-step exploit chain using over-permissioned roles, secrets discovery, and NHIs to attack a popular low-code service.

Massive regional C2 footprint More than 1.3K C2 Servers Discovered in the Middle East Hunt.io said it identified more than ...

FROST exploits the Origin Private File System (OPFS), a browser API that lets websites create and store files on a user's local disk.

Other venture-backed companies like Chai Discovery and Isomorphic Labs have raced to build better models. SandboxAQ is betting that access is the bigger obstacle and that Claude solves it.

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code to escape the container and do nasty things to IT environments. As a result, ...

21st May 2026: We added new Love and Deepspace codes. Love and Deepspace has become something of a sleeper hit since it was released: despite its launch going largely unremarked, it was quietly one of ...