Secret Claude tracker shocks users after Anthropic’s anti-surveillance stance

Anthropic quickly removed a tracker secretly monitoring Claude Code users in China after a security researcher exposed the ...
latesthackingnews.com

CSRF Attack Explained: Mechanics, Real Exploits, and How to Test for It

A practitioner's breakdown of the CSRF attack: how the forged request works, two documented exploits, a manual test, and the ...
CNET on MSN

Incogni Review: Comprehensive and Transparent Data Removals

Incogni Review: Comprehensive and Transparent Data Removals ...

Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

AI browsers like Perplexity Comet can be tricked into spilling your password through BioShocking exploit

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...
The Next Web

The captive portal economy: how hotel WiFi sign-in pages became both a security vector and a hidden ad channel

KeepSolid CEO Vasyl Ivanov explains how hotel WiFi captive portals evolved into both a security vulnerability and a programmatic ad channel, and what VPN clients should do about it.

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...