The install size of the latest version of Claude Code is now 45% smaller. According to Jarred Sumner, a member of Anthropic's ...
keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion monthly downloads. The Wave Six payload hid inside AI agent config files ...
A legitimate-looking link or valid digital signature can offer false reassurance. Here’s why familiar download safety checks ...
A campaign with fake websites displays correct-looking links, but tricks victims into downloading unwanted software.
WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect ...
On Thursday, Google’s Threat Intelligence Group (GTIG) said it's now tracking two other suspected Russian groups, UNC7005 and ...
Three suspected Russian cyber-espionage clusters are abusing legitimate authentication features to compromise personal ...
Kaspersky researchers found 92,000 malicious attacks disguised as AI services in 2026, with fake ChatGPT, Claude and Gemini ...
Chrome security update 151.0.7922.169/.170 patches 15 vulnerabilities, including two Critical sandbox-escape buffer overflows ...
Threat actors are increasingly turning legitimate software into part of their attack chains. Instead of deploying an obviously malicious executable, attackers can abuse trusted tools that already have ...
In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 ...